last executing test programs: 7m4.748902148s ago: executing program 32 (id=242): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x8) (async) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000d70) (async, rerun: 32) r1 = inotify_init1(0x0) (rerun: 32) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) (async, rerun: 64) rmdir(&(0x7f0000000280)='./control\x00') (async, rerun: 64) r2 = socket(0x1, 0x1, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') (async) llistxattr(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x10020, 0x0) (async, rerun: 32) lstat(&(0x7f0000002a00)='./bus\x00', &(0x7f0000002a40)) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="3e0000000000000000000000fc7f000002090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000200000000000000000000000000000000000000000000071d30aacc16688f5f0465be1eb0f7dc7d6c87c7c6ff4d46464b31615fb6e175b8c5020db5d9402567280cec23a85f51ad94fbfafce50b742fddb6caa010019c8077bede96e9bcf2dec06348b26cbc1772a8ae91bcec5415c5e8bb18d4970dab442d5a775b525eb07bc056e08f20325632076b201cb3d545f57db6689acc89edd3dcc694f14aea4dd7fa7dac0c8a7b2ce02db80"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000009000000001a698c3871f1000000adb3000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r8}, 0x18) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r9}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 6m53.902171418s ago: executing program 33 (id=308): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000848}, 0x8040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xc) ioctl$KDSKBMETA(r3, 0x4b63, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r0, 0x5, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0]}, 0x40) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) syz_clone(0x60100100, &(0x7f0000000440), 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000480)) 6m43.84047122s ago: executing program 34 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be004488fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) flistxattr(r7, &(0x7f0000000240)=""/8, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x9c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xd}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2400}, {0xf, 0xfff1}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r1, 0x20, &(0x7f0000000880)={&(0x7f0000000780)=""/59, 0x3b, 0x0, &(0x7f00000007c0)=""/137, 0x89}}, 0x10) r11 = openat2(r1, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x4000, 0x22, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000580)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}], &(0x7f0000000b80)='syzkaller\x00', 0x6, 0xed, &(0x7f0000000600)=""/237, 0x40f00, 0x12, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x0, 0xca4f}, 0x10, r10, r1, 0x7, &(0x7f0000000a00)=[r1, r9, r6, r1, r8, r1, r11, r6], &(0x7f0000000a40)=[{0x4, 0x5, 0x9, 0x8}, {0x5, 0x2, 0x5, 0x3}, {0x0, 0x1, 0x10, 0x6}, {0x5, 0x1, 0x4, 0x6}, {0x5, 0x5, 0x9, 0x5}, {0x3, 0x3, 0x8, 0x9}, {0x4, 0x3, 0xb}], 0x10, 0x8001}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 5m59.911997599s ago: executing program 35 (id=621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syslog(0xa, &(0x7f0000000080)=""/146, 0x92) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 5m12.478951286s ago: executing program 36 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x64000600) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x123142, 0x168) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 4m40.052010742s ago: executing program 37 (id=1020): r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000000)=ANY=[@ANYBLOB="1201eb00000000106b1d01014000010203010902c7fd03010000000904000000010100000a24010000000201020d24060000030000000000000808240800000000500c2402000000000000000000132406000606000027000900000000000000000924030000000005003124080500"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000003c0)="e84a095482f3ba9b13b0abf766b00e84eae805d4270d2874a4856b6a", 0x1c}, {&(0x7f0000000400)="152a23925f720167986f823eb6834b15446f0c18882460a880ba", 0x1a}, {&(0x7f0000000540)="63b6edcd45310b2ef6bd8f6626b22d69c2ceb3ea7ee9de5ec7fc786e750ecfec4ab914b5caff34a8fdd555b8769a900be2f528c0bf500cc5e4d1cf28250382e28af671a7a1c7885f6fa87bd9f21f23f7a8a6b34856eefd71f1dcf9462b1835108d38fde97cf359474b73eee4474ee825d93acc393e47169c3279aae601c3b2654a3468bb3b109944c46f2f7928f1baf8653c324b0ed31c46b6ecf6b25b210fe9bde899fda27a9f0f2534a61d693ac1a5f31d7340580f1c2143805a538c8dfa0f3a00ebbdf7b29e2cc8f5d8112c9b3386916b86917f9d15ba044a798a81de0477ff6208469b20832cca75a8a33b1a9c37", 0xf0}, {&(0x7f0000000640)="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", 0xfc}, {&(0x7f0000000740)="cdad10dc24d4f24ab33c27251ab7b741f10c1296d28b0a82d60dec97854bdd4c5f8478d2503ba83c7aac6942d1b815e49a613cb02963cb80b128e0ae011bdcc76e05d71ceec371eb408acee83aa30e1d983f39bef7dcc5ef911e5a4573d1e31d9db9507275150e3fe02d9332fe3c39c25cce6cd11f8830e1279687b1c159f70a358335106f675d760baacf8215210f8e374f3044951630df5f878299535cfd4ee7cd72b506ba534193822038edad71809c8b9af025c0b7c4da25d315", 0xbc}, {&(0x7f0000000800)="dce7e2bd7703d3737c670c851745b7fbd9e80fb8d4c932cb4d656d7e6afc4ab94623e83574975dbb5349cd065cbd09b47f4e6a8b55cf5d5755d32209a56d63f755f0ec2053ecdbadeaf46fd03c952dbb8fba6f28afec490898681c76e8cb0dd52b814a1c2eb7150c64d6639ae6a6c04bc909573717ff1930804ea7489dc963249c7519fe516a2eae450a3306e425017ee50e09265b49b838198f7ca46b1f0fd30a9c626df2cd5ee6ff945ff94185ade490926e933a360fa90b7ca081daf230bab2b303a34da9e59d45102aa13cdc7a4213f94c9ed174323344bf8879626d18a424", 0xe1}, {&(0x7f0000000900)="9a081e10dfb76644d0315bb4479241ba63629d1ac537bb91f9bbc23cf9bb627d2c63778127995d7d6a3e89c0e72719f35ed70270a73d1a355d6dbf3a810af8fdd12f53dadb366eb5f7712272c769cc290bf609c71870ffd928d7cdfe9e52b630dc63175e8a0ac45dd5e096028324697f02ea6ffc8f57d7a4faff712d4e5535f10f074cca2ec8eaf4e86746f77e19df4547706078d9a77fba5966bd537a44c5e2d0fe25732a98391b4658eb0802e9acbf23125e70c2f537df76b71bbd4b921ee64a2f3b03eb55b6a2bf23d751c517aff8407dd7e1bd0d81f77f8c63f943150b40e475de4c24b7e6e2", 0xe8}, {&(0x7f0000000480)="145513efb4ccb175", 0x8}, {&(0x7f00000014c0)="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", 0x1000}], 0x9, &(0x7f0000000b40)=ANY=[@ANYBLOB="30000000000900000000000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2a457c08218b3d5728e9aee663ac700809172d96bce6c44748d245152a8bd7cf99f5f49395c445767267ed937f73ed84b69eee9d95e9fa19d82f96cdaa4cb4655364a8de0420b8beeef0256caa6a9709be197317deaec0af556fab7441d67e63b1bd88f5b7718d55b4dae769269b0427408abadb1690f7756e21a99a5c672edb7a338278c340c3bfce6227e71385db2330e87bfcac441fe7966f5436c1e404434a9325f1440363f6bf91033e7244badd783319ceacc827b91f9e889c10d96ec27eff7bb4f0b26e95bf4d9e385e536db56b6bd3b09842f2d50e3b4d25c2a00100ea868e", @ANYRES32=r3, @ANYRES32=r3, @ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r1], 0x30, 0x4000000}}], 0x1, 0x2000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000380)={0x5, 0x4, 0x0, 0x9, 0x7b, 0x8dc2}) inotify_init() r5 = timerfd_create(0x8, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c02000100000000000040fb020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x5, &(0x7f00000001c0)={0xffff, 0x0, 0x10000000, 0xc, 0x49, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0x58, 0x0, 0x0, 0x0, 0x6, 0x8000000000000000, 0x0, 0x0, 0x0, 0xfef, 0x1, 0x0, 0x1, 0x1, 0x2}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f0000000300)="e2566ea695f228c0c456be7e347313e529e7322ac61fb6de06f9ee7bd0fee362b29c54f9680b8402fa39c79c07d9697b9c80ebcf5f9724160f7eecbdb678ffaeae7dfa293ef0d9fb6de7") socketpair$unix(0x1, 0x5, 0x0, 0x0) 4m2.309684003s ago: executing program 38 (id=1262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xff8c) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x12000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0], 0x48) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000005040)=ANY=[@ANYBLOB="640101027f0000010107000000000000"], 0x10) setuid(0x0) 4m0.168827164s ago: executing program 39 (id=1187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0xc8, 0x8, 0x1f8, 0x5803, 0x330, 0x2e8, 0x2e8, 0x330, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x2, 0x14}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8a301, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="0503162ed3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) syz_genetlink_get_family_id$gtp(0x0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ftruncate(0xffffffffffffffff, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x7}, {0x2, 0x42}]}, @struct={0xc}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x45, 0x100e, 0x1, 0x0, 0x10000, @value=r1}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) unshare(0x36000480) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 3m55.960909239s ago: executing program 5 (id=1295): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800004fb13f979e3cbb86755f0f00000080000000000000df1ff42f72ed75"], 0x10}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x88fd537e5d114b64, 0x12, 0xffffffffffffffff, 0x4000) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a3, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000fcdbdf257e0000000800570008a6efd8f19272618366b57550d6df9e000000"], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r7, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001102a, 0x0, 0x2}]}) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 3m55.872429717s ago: executing program 40 (id=1295): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800004fb13f979e3cbb86755f0f00000080000000000000df1ff42f72ed75"], 0x10}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x88fd537e5d114b64, 0x12, 0xffffffffffffffff, 0x4000) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a3, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000fcdbdf257e0000000800570008a6efd8f19272618366b57550d6df9e000000"], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r7, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001102a, 0x0, 0x2}]}) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2m21.30337856s ago: executing program 4 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x48080) 2m21.196448691s ago: executing program 4 (id=1765): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 2m20.262388352s ago: executing program 4 (id=1770): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r7 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m19.125959195s ago: executing program 4 (id=1773): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) accept(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r7, 0x0, 0x8, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2000000000000279, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) unshare(0x22020600) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m18.652537042s ago: executing program 4 (id=1775): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000800850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000180)="1a6186b42bb9ec3bc74c5e7f1704fbaec56565c2a52273e68ae96fdee2f27a8d48eaab132be612247ef9cd91728c34d2843c1ec5c67e3bd0832706d0e32e4c2bb61ab5ad42842d7e32", 0x49}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f00000006c0)="e9591c46781b55b9f03a4beb771ec8bbff344d0d53a3f3f892f09fe454766f3e83c9a83df2f57f967473feb4190b97799bdc0541767b6f670e3201079fc403a2371183e0e3e55c71d9d6a13206a65252c731843f6c85cfb55a88706e43109b7e2bec5a7b675046330ef3d8e37f67b0ae7ebe84357e476fefb4527c293b1117cb47916914a53c76c8d695fa78d7a40cadc9452930be24cd7365ee2119e4d7b9082193d7b202e5fe543bd0ebb12dced1bd", 0xb0}, {&(0x7f0000000900)="2eb59a40d7709bd68085fc82dc5ad00df3e6db6c768e994288f51215339b54c2618d1a71bfd02f093b0d9c661bed3aa1a2826d0cf9ab0266f3b9e054fc235790d447347432556c9e186bfa52c7a299fb87de2fda8633f0e285f6eee8e2c8b9ab08118a7766516c244e39628155a12d44848bf13dd0a1750c3fd8a9421b15207a70bfc40d6a89254e278b3745c25d6f63f276d4d6d23a9e2ae12fbd5e427fc9a21445cb014b890534cd0d24d650e7548009e023a4edd016288963b264ac4f7166ed1eb87b73abe89f08bc3dcd40df08", 0xcf}, {&(0x7f0000000780)="f31e75030eed5d71954bfaa874bb61b03d25a84314aeaaa338f5f9e4fc7e25402b188a69ebc80ea83646ab4d0f5966b7d92627afc691bee393ce38e933166c06ea85ba81a5652f7b35490e3e548b7c3aa148d49bb5eeb46438d91ce92e7ba5cb23fc2e8f033acd7a4f98be1e5d5603a054e7e8cc1458b74bbbae0df721f6dc1152e0a133f0aa6e529ab7777e", 0x8c}], 0x5, &(0x7f0000000b00)="39ea231822aeaa5af3265b03454f030bfc02573f03cd7f80593fb9056c48d92acd7c5c467273f5a77f8bde5b492acdf3e6b1646f59ac6b0eca2fb576437681dcd90ac3efef1f3869896d479c9c0f1a309b84f285d5f0abebd6e0d6853462d3add31b36de70fa7d00d2f0e775f7af59e39e4ef0e6a99db91453b6691ce5", 0x7d, 0x4000000}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) 2m15.591223803s ago: executing program 4 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0xa}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x2e]}}, 0x0, 0x49}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0xa}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x2e]}}, 0x0, 0x49}, 0x28) close(r1) inotify_init1(0x800) (async) r7 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) gettid() (async) r8 = gettid() fcntl$setown(r1, 0x8, r8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') 2m0.522435229s ago: executing program 41 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0xa}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x2e]}}, 0x0, 0x49}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0xa}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x2e]}}, 0x0, 0x49}, 0x28) close(r1) inotify_init1(0x800) (async) r7 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) gettid() (async) r8 = gettid() fcntl$setown(r1, 0x8, r8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') 1m38.215855608s ago: executing program 6 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 1m38.19020986s ago: executing program 6 (id=1966): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x510, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast1, 0x0, 0x0, 0x4e21, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x40000, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x4000}, 0x0, 0x6e6bb6, 0x1, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in=@multicast1, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000001300)=[{{&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)="c34e874944cac7c8fc0537d704dad8a6452acd54f618a6fc7cae5d63425fbf74dfe3064873021bfb01d3c39ae27bced4444de4f68e8dbe2ba1c206938d8b493e6f88197e605ef021150068e9c5", 0xa9}, {&(0x7f00000005c0)="eae86a7d70f07b53ff50f8d446fa1afc549e7cba7202b93b7905eccfedf7677f9c4a7099872c0c5ab0be1aa9314e4a755ad5675155d7cbb9a92d82ad6ebb11b1ee8d0d598d11f70b233d54a3211aa860f69bcc091ba664cc5d7cb7e26c5e6f6371836889ea27ca26c9b618c8d1c03836d6e90e0a0338d84ab9ea85913cc9cffaa9724424ef5294abdbfdc1fda7a9b5d81fe60c5ce5c724eb48c5ecba094569af32c99341aa39497fe61fc4b1a3", 0xad}, {&(0x7f0000000180)="1f7c6c8be50ad5f4bdd3c48eb95b03df3d030980", 0x14}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/792], 0x318}}, {{&(0x7f00000006c0)=@l2={0x1f, 0xa, @any, 0x4}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000fc0)="2042ccaf22b1dcc1de54a9d7bb4759b23f09bc046857eac94e980b1d25fd9625907de2d7cb4ac3093c768d7556b3ee0b948afe55a587b1e38f6abf0f3a7cfeb4fae84b3d5b5a564a4aa02b8a8a871fb645a9ba7979b98f42dfe4e8823ebd9e8c710039bba47503985c3ca6cae851bb1cfa89f7878bffaad8a3163380470762ba2e92ece359eb05d5af86d9dd5c82ba9d93f065e6cd4003f815bf6f6bccc232b00fda74dc4bbf57ac40e356eaf7d08b3042758cd9317bc1e144db147f904a03445fb4c2e7ce81b3e66abaf45465ed0cc1917dcab1f2810c9aadbd7e716be0ef4aa78b4058e2", 0xe5}, {&(0x7f00000010c0)="fa40f43541d905026098a2661bf505446ad82eb4838a8a95ed7c5abfc7a29489b4911f7d4e47fbce4cb8a628f86a19897f1306ca54d86278d03864aa24ed26f69986f6f45e74668c5bc830f4252595db7257dd1790ae5a6740f5bb16d13b8edb6abf9b3d8cd3ad0e74ac37f042c6554faa71f901f2a07b3d403d3f31e480295676b3c79e6084b88878a2d22e0211a02e411b", 0x92}, {&(0x7f0000001180)="7668826142fce79151eacd4001e04824551ace229fb9212a531a5162aa4426ca0d6109aa715c58211f70f47c4e640d1c2f00099e38eade9c47baaeb03b28daa4bc3cab7b29ead4293703b9386a95ef96a8b9138944289e1c82c0607e2f5a5492b9304a9041d717c670dfd0e69cf5c8d14b60e9f5249c8698661257995be47412633f95ac20d323225a2461ba4c64b88884b0b565c42524574722fdd23c6e9f7b19293cf01359fa2426d96d6f676bbdc7b8864045bb97ef1808f76ebe24", 0xbd}], 0x3, &(0x7f0000001280)=[{0x60, 0x118, 0x2, "ca457f4ab865655b84da3e56e59e2fa80ebd5677aaa352b8cd51415b59a11f8734a35349b4494b52bb46fd42a889ce4a77ee81d0ed9cf7aa48055b799d78c61adda5ce905dc3ac82fd"}], 0x60}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x1010, r7, 0x824bc000) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x6, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m36.992956568s ago: executing program 6 (id=1969): unshare(0x60040000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400012042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file1\x00', 0xc2) listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 1m36.77173312s ago: executing program 6 (id=1971): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) utimes(&(0x7f0000000080)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e010000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000002, 0x0, 0xb33}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x3, 0x1, 0x0, {0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4000}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r11, r10, 0x0, 0x3a) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) fcntl$setlease(r2, 0x400, 0x2) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.37156844s ago: executing program 6 (id=1972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x242b047b8f89519, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0xfffffffffffffeea, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.314643245s ago: executing program 6 (id=1973): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)}, 0x4000800) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) 1m36.26258514s ago: executing program 42 (id=1973): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)}, 0x4000800) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) 1m18.176687153s ago: executing program 2 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x7}, 0x1c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)) 1m17.120122527s ago: executing program 2 (id=2095): socket$inet(0x2, 0x2, 0x1) munlockall() getgroups(0x1, &(0x7f0000000000)=[0xee00]) setresgid(0x0, 0x0, 0x0) getresuid(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r5, &(0x7f0000000080), 0x20000000}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x300, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010003c0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 1m15.733948774s ago: executing program 2 (id=2101): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x1200082, &(0x7f0000000140)={[{@errors_continue}, {@errors_continue}, {@discard}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@errors_remount}, {@umask}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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") socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80801) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200)=0x7, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffd, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x81}}}}}}, 0x0) mmap(&(0x7f0000f84000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xadc17000) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdff"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = inotify_init1(0x800) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rmdir(0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x1200082, &(0x7f0000000140)={[{@errors_continue}, {@errors_continue}, {@discard}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@errors_remount}, {@umask}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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") (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) userfaultfd(0x80801) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200)=0x7, 0x4) (async) listen(0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffd, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x81}}}}}}, 0x0) (async) mmap(&(0x7f0000f84000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xadc17000) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdff"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) inotify_init1(0x800) (async) fcntl$setsig(r0, 0xa, 0xe) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) rmdir(0x0) (async) 1m14.543521322s ago: executing program 2 (id=2102): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x1a0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1m13.618672833s ago: executing program 2 (id=2110): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x12, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x4}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff7f18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f1ff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r7, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000000)="448b7cff030000000000008a", 0xc}, {&(0x7f0000000100)="36d1", 0x2}], 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690020000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 1m13.375442496s ago: executing program 2 (id=2112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00002cef88)="d84f7398", 0xc9a2d67362324e00) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x10, &(0x7f0000000080)={@multicast2, @private=0xa010101}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r7, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b0000000d000000070000000900000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x37, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m13.332832351s ago: executing program 43 (id=2112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00002cef88)="d84f7398", 0xc9a2d67362324e00) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x10, &(0x7f0000000080)={@multicast2, @private=0xa010101}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r7, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b0000000d000000070000000900000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x37, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 27.667625763s ago: executing program 8 (id=2377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27.447533474s ago: executing program 8 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000eaffffff00000000000071970000"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r6, r5, 0x0) write$cgroup_pid(r5, &(0x7f0000000180)=r1, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r7], 0x108}}], 0x2, 0xc040) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") 26.919976376s ago: executing program 8 (id=2382): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file1\x00', 0xc2) listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 26.874230881s ago: executing program 8 (id=2383): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000100000000000000000000ce0000000000000075325751e76cbe702065f78749ed5842165d56bfe8f756fa94cf099981acb3b44608b1338970b23fe542a6e0c2e57b018edb2a479d567c47028720234603ade2de8390d1ea98d414f3027cee3f95f2242287b3eb22bdedfda0f59d508b948e8cdf8d6f92b8a2f4be366ea93ad630cb51b6d75f6419d4ff6978aad1d7cafcff35112056f7322f0e1a77df50947bbbc5a164a1"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 24.0467873s ago: executing program 8 (id=2390): unshare(0x60040000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400012042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 23.451560338s ago: executing program 8 (id=2394): open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000580000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000a4cb4e000000000000000200ffff00001811000025d7", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000070d100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005020000020000000410"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r9, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x36c18523, 0x401, 0x4, 0x3, 0x2, 0x0, 0x0, 0x0, 0xa4001f7d}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) unshare(0x64000680) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)) 8.551804507s ago: executing program 44 (id=2394): open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000580000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000a4cb4e000000000000000200ffff00001811000025d7", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000070d100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005020000020000000410"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r9, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x36c18523, 0x401, 0x4, 0x3, 0x2, 0x0, 0x0, 0x0, 0xa4001f7d}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) unshare(0x64000680) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)) 7.903423621s ago: executing program 1 (id=2508): r0 = socket(0x10, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x2000, 0x0, 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0xa6, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 7.800461221s ago: executing program 7 (id=2495): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file1\x00', 0xc2) listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 7.785276273s ago: executing program 7 (id=2510): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000000400000900000001ee7a03a51b413677c0b8de8060114bc37820a5db39814e3506d0b2b1fdf63bff84ccd22e0c7fcf6acaa77d6839832b676914701c8ec1abe1b78f5c5bb2b1476e2ddddd1046ec3e7e884ba7128dbf773f7eff1e18da8b609b691a2421dfe18dd736c8252822c099b01e29d858050361b6008c60c3bd6da6dcabd3663d7bb12f0c4df7d0065671e714ad5122ddd5882e530cbbf5b6292251706ef7c8915494737495b44e6e49a6328d830c4793"], 0x48) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) (async) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6000) (async, rerun: 32) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000000c0)={0x4, 0xec, 0x0, 0x1ff, 0x0, "050000000100000900"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r4, 0x81fd) (async) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000, 0xa00}]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r7, @ANYBLOB="f17685ab78f53ae4a24fe03b7b77cf508dc8d0f48e79a97e9f00f3fcd37f6b79cb0186933f53959e569d169343b453d7e801e825aeea06e9b236d114f51b641b03108ec4434c576e6dfb3f12cce432b4ccec17b6d95068da263a6c773de039c92aed38c2ca019f3349b8290fb2c43da004d53d180b44d0a13cecf3f293a934ebff6748e1e9d6ac00731e8effa6f631"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x14) (async) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x22}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) (async, rerun: 32) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 7.423478618s ago: executing program 7 (id=2511): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_create(0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) shutdown(r2, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b700000000000000950000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x55) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @const={0xe, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e, 0x51, 0x61, 0x61, 0x0]}}, &(0x7f0000001c80)=""/227, 0x3a, 0xe3, 0x0, 0xe}, 0x28) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x762, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0x14, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xba71}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xc8, 0x2, 0x3, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0xc4, &(0x7f0000001b80)=""/196, 0x41100, 0x1, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x5, 0x1, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001e00)=[r9, r1, r1, r0, 0xffffffffffffffff, 0x1], &(0x7f0000001e40)=[{0x0, 0x5, 0x7, 0x6}, {0x4, 0x3, 0x6, 0x9}, {0x0, 0x3, 0x7}, {0x3, 0x3, 0x4, 0xb}, {0x3, 0x3, 0xb, 0x3}, {0x5, 0x2, 0x4, 0x8}, {0x2, 0x1, 0xe, 0x6}], 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 6.926742637s ago: executing program 9 (id=2514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000580)='./file0/file0\x00', 0x1000000, &(0x7f00000008c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, 'mm_vmscan_lru_isolate\x00'}}, {@seclabel}, {@euid_gt}, {@smackfsroot}]}, 0x11, 0xb99, &(0x7f0000002380)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400018000000000000001ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c00028008000200feffffff140003"], 0x50}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x280) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r4) r7 = inotify_init1(0x0) fcntl$setstatus(r4, 0x4, 0x2c00) r8 = gettid() fcntl$setown(r4, 0x8, r8) fcntl$setsig(r7, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000032c0), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40830}, 0x20048080) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 6.916654918s ago: executing program 1 (id=2516): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1, 0x0, 0x81}, 0x18) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1], 0x54) r4 = dup(r3) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c996664736f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) 6.857139344s ago: executing program 1 (id=2517): r0 = creat(0x0, 0xd931d3864d39dcca) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r7 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 6.583577491s ago: executing program 9 (id=2518): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1, &(0x7f0000000700)=ANY=[@ANYRESDEC=r5, @ANYBLOB="a37c710a94b363af4224a65ee75def16a76e954a28c51b15ae81", @ANYRESHEX=r1, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESHEX=r0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000004000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 6.339016655s ago: executing program 7 (id=2519): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020905090700000029bd7000fddbdf2502001000000004d6000004d400000000030005003380000002"], 0x38}}, 0x20000804) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)={[{@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x400, 0x2000000000001]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) syz_emit_ethernet(0x7f, &(0x7f0000000500)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, '$', "247ef4", 0xf6, "945d88168ef01a598e2fbff7ba6447d752048de2c91acca80fb1454714d2d3a29ea40e88ae9c7621f2af7eeb5dfd4afd0c8100791cd22861b388e0650885042270b376c86890b106bebc599c58881dd34849a729d9d562d16202d41919b7f630bca354184288712611"}}}}}, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r3, 0x87, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) 6.143852494s ago: executing program 7 (id=2521): syz_emit_ethernet(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x138, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x59b}]}, @TIPC_NLA_SOCK={0xc4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x709}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32bab03e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6ac9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f00000000c0)=""/128, 0x80) 5.868126871s ago: executing program 0 (id=2523): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)=0x0) io_pgetevents(r5, 0x8, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f00000001c0), &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x0, 0x0}) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$P9_RFLUSH(r9, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) 5.827344355s ago: executing program 7 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,iocharset=iso8859-5,shortname=win95,shortname=lower,uni_xlate=0,utf8=0,shortname=winnttf8=0,check=normal,codepage=866,utf8=1,uni_xlate=1,rodir,iocharset=cp863,shortname=win95,rodir,\x00\x00\x00'], 0x1, 0x27b, &(0x7f0000000640)="$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") open(&(0x7f0000000000)='./file0\x00', 0x141840, 0x100) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) dup(r5) (async) dup(r5) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r4, r3, 0x0) (async) dup3(r4, r3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x2}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x2}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x2c}}, 0x0) 5.825865536s ago: executing program 1 (id=2526): r0 = socket(0x10, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x2000, 0x0, 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x300, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 5.771420601s ago: executing program 45 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,iocharset=iso8859-5,shortname=win95,shortname=lower,uni_xlate=0,utf8=0,shortname=winnttf8=0,check=normal,codepage=866,utf8=1,uni_xlate=1,rodir,iocharset=cp863,shortname=win95,rodir,\x00\x00\x00'], 0x1, 0x27b, &(0x7f0000000640)="$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") open(&(0x7f0000000000)='./file0\x00', 0x141840, 0x100) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) dup(r5) (async) dup(r5) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r4, r3, 0x0) (async) dup3(r4, r3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x2}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x2}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x2c}}, 0x0) 5.670292211s ago: executing program 0 (id=2528): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@sysvgroups}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) sigaltstack(0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'vxcan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) move_mount(r1, &(0x7f0000000140)='./bus\x00', r1, &(0x7f0000000180)='./bus\x00', 0x100) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000c80)=@urb_type_iso={0x0, {0xa, 0x1}, 0xfd, 0x0, &(0x7f0000000440)="5a32af6066a64cbc033d021c6dae605d649b1e84041a12bc3fb5eccd04170e2913da347c10b0cf9e0099ed739580f6aa7be9c228de77be719c1edacc68e664747592480904de9c157cd30241d1b4bce06c176364a6e1e60c14de0e3670bb0e7512ac39b4fcd5ed3c5ede10d3ffcf9c983bbf60efe141a79b531e4c43d20b560069195fc09ee16d7d7a15fbfe5d989f23", 0x90, 0x2, 0x5, 0x36, 0x4, 0xa25, &(0x7f0000000380)="5e6e483791e89c2d6b0b7f2e2f32bcf2f3d9fa7d1e00750f03405804fda7050ae126c9781b79b075068b1cf03c1743172bafce7a4e9c5bd4a2b46f2aa45e01703d366f6bd5f37e11066c7375ea1af6c098faeba920538b32709730cee2db520bc3a9e8cbd967e9739fac414eddbb295ed35829933ea57c05a36aafdad8509b24", [{0x8, 0x7f, 0xfffffffc}, {0xf, 0x1, 0x4}, {0x200, 0xf, 0x2dcd}, {0x3e8c, 0x10b7, 0xd}, {0x1ff, 0xffffff7f, 0xfffffffc}, {0x800, 0xdd5, 0x9}, {0x422e, 0xc49}, {0xef000000, 0x4, 0x4d0f}, {0x1, 0x1, 0x9}, {0xae8d, 0x4}, {0xfff, 0x8, 0x9}, {0xffffffff, 0x914, 0xffff}, {0x1, 0x6, 0x101}, {0x1, 0x5, 0xa3}, {0xc, 0xfffffffa, 0xfff}, {0x20, 0x5, 0x5}, {0xaf56, 0x4a9}, {0x8, 0x0, 0x200}, {0x10001, 0x2, 0x8}, {0x1, 0xdbf, 0x215}, {0x7f, 0xa314, 0x7ff}, {0xcbe, 0x6, 0x2}, {0x8, 0xffff, 0x4}, {0xdb, 0x6, 0x7fff}, {0x100, 0x5, 0x400}, {0x1, 0x9, 0x6dfa}, {0x4, 0x7, 0x1ff}, {0x3, 0x3e, 0x3ff}, {0x3, 0x8, 0x6}, {0xf0d8, 0x6a, 0x4}, {0x6, 0x6, 0xf3}, {0x8, 0x1, 0x6}, {0xb07, 0x7ff, 0x7}, {0xe7ff, 0x3, 0x97df}, {0x4, 0x2e0cd0dc, 0x4}, {0x0, 0x2, 0x1}, {0x61, 0x79, 0x3}, {0xf7e, 0x8001, 0xfff}, {0x8, 0x200, 0xdf0}, {0x8, 0x2d1, 0xff}, {0xf, 0x0, 0x5}, {0x2, 0x57, 0x401}, {0x3, 0x4, 0x7}, {0xb2, 0xc7d, 0x2}, {0xfff, 0x10000, 0x2}, {0xbf8f, 0xfff, 0x3}, {0x0, 0x939, 0x7}, {0xfffffff2, 0x0, 0xe}, {0x200, 0x2, 0xa57}, {0x0, 0xffff, 0xbe}, {0xca, 0x8, 0xa}, {0x3b4, 0x40, 0xfffffffe}, {0x1, 0x10000, 0xa}, {0xa7f, 0x8, 0x40}]}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, 0x0) 5.496535048s ago: executing program 9 (id=2529): socket$inet(0x2, 0x2, 0x1) munlockall() getgroups(0x1, &(0x7f0000000000)=[0xee00]) getresuid(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000280), &(0x7f00000000c0)=@tcp=r7, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r6, &(0x7f0000000080), 0x20000000}, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x300, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010003c0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 4.371722319s ago: executing program 9 (id=2530): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}], 0x1}, 0x8800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r6, 0x5000aea5, &(0x7f0000000040)=ANY=[]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000080)={0x0, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r7, 0x6}) r8 = socket$netlink(0x10, 0x3, 0x13) r9 = socket(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000440)=0xc) r11 = syz_open_procfs(r10, &(0x7f0000000480)='maps\x00') read$FUSE(r11, &(0x7f00000050c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x4e0, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="18d82aff2f9a3301f19007ae6955e74a144a37b165ae675e45c2c509071380d9ecd898e191a82adbff7fd3b930ff638f70badd36112d530768c1e5536db0333679d302330885038552be6b9fc4d2445b659684c251c06a8cee5a47a12e3b7bbf2e147f253fd99dd7e571dbeeb3e32555fce4772b6c7b0893f83c53a533084c7e52c805f0e54bef2331f3bdd38d1e6957faa7ce9ac5ece11904c843edb75bb56684ba61dea3c2c37b4847267dc0b87d342d25a30e21e6a4cfe075e2678634879c1d8aa8b70b970cc3a65e33bcc6ce123227faf56d", @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@empty}, @nested={0x164, 0xc6, 0x0, 0x1, [@typed={0x4, 0x10e}, @nested={0x138, 0xdf, 0x0, 0x1, [@generic="5a7e3bf7563271e20f4446e6bbd826ff23abc3f23f8380368528b7e68ff92fbe5ad02540089874591de179b9c675ffc678ba9dddb55887e2d63cff10d6619561e0aaa4c35d4dce95ade2904b3337", @generic="fb9c10db817f8f9b684d345dd7bfac43ef672bf0b4879a72755211907ff3e65da1c3fc20641412198e7fe59b884d46d647273123f42ac6c2b8f046795445f46ea43a679083c36f6e69c0f2cf5ceed5d24a0fac42ea54fb5f7e2c62f4d0c40bd70cb4380b9ef66c181d1af6d9d995b06e03f0661aae9d4ca3649ce4f2fd313fa29d8488b0950c6cd4b7f7e43c1e427d405cf1bbfe8e30f5dbd09e17916f67987e421c1683f953178eaec68e50068f5ef14d0c783aed753dce94fab1fadd1446712e36aadfbdbd3a6b3fb4d9118f3cd9341c74d4503486", @typed={0x8, 0x12c, 0x0, 0x0, @pid=r12}, @nested={0x4, 0x76}, @nested={0x4, 0x92}]}, @typed={0x8, 0x31, 0x0, 0x0, @fd}, @typed={0x8, 0xda, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x9, 0xdd, 0x0, 0x0, @str='^%#.\x00'}]}, @typed={0xc, 0x98, 0x0, 0x0, @u64=0x8}, @nested={0x269, 0x99, 0x0, 0x1, [@typed={0xc, 0xde, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0xf8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x101, 0x39, 0x0, 0x1, [@generic="c7a8d94d1e0a5f1688ffe61fcff678186f7dd0d2d146de58641a17bc60f94b8167a8afff1bb401b7f5b6ba1789bce915ba468e1f7cdf50a78bd00e8651f12d8fe138e027", @generic="ff0bd308452f83efad136e014191291e89cae9ab6a4a785c619145dd0af339ff30e1d2f0f468ae9e1b1d998c8426ca4d40b104a4ede7599c7bfb3dfde3721b95a8ac2f7b4630bd421de1e0c170d47b8fcab7403f1b05120c4e96c29176982266501c1b915f478afd47a6d87fd10191713ae085c126f55dbb279b7ab471ec59cc3238b6c127ffcc0471bee4d0555febc2fdcde4ca96a7603ae7a0cc098845932215850765dced6f462160678089308221c51dda1d3f2391b3ab"]}, @nested={0xcf, 0x10d, 0x0, 0x1, [@generic="e55186dd6da1e546f37838bff9e3b4cf1693cf7784e87ae1bb0a41473dacf75e244bc05b163d4a4e4a6a159a27ee96307dd886cb54f74a4fb4cfe6cf24ae0a76168d37e0354a321d7abf857ff4dccb43f519b4f07f798c33893f2fe5cd412f3dc66ccf2624259c1ff0bb21d72a263b3f419ee90bef9cb7ec6d6c441ee1161fef708f24c93a973624251fb58e5d9b79aae639cc5933c3c28f39de97826ce25805f27584d3af88c44b677535885709de18108b178afb1c568f2f703e7a9edbeb21224dabd4987c761bfa2fb7"]}, @generic="f828e84543f949e5d255ba7822747200c42b8cefe858ee79fc0d50e296cb8b33f49927044e2594a49b4dda55621f061e8cd4aaca782922543026a933e1cda96c35173921684caf525d19", @generic="db4feec056c4208a5038d2725e020d75a4523fd64a037a2fb503758505423d"]}]}, 0x4e0}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r8, 0x3, 0x80000}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x7fffffff, 0xea, &(0x7f0000000140)=0x1}) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="40040000105f6bc48fc45040645f6622f5a5e87b", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001007369740014000280060012004e2400000600100006000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000040) 3.973715598s ago: executing program 0 (id=2531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lremovexattr(0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r5], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(r8) 3.920618104s ago: executing program 5 (id=2527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000ec40000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8400000012000501"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r6}, 0x18) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200001400000700000000000000008500000083000000bf0900000000000055090100000000009500000000000000a6f70667db4b89e49be1abc11c387a79bf91000000000000b7020000000000008500000085000000b700000000000000950000000000000094650755b649fccedf8f367f743c6e634db24540391d3ccf150c064b7180f0988e61b434e6aad689d36bc72daddffea53ca2a99197e0d6add8f32b"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x2d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 3.419566373s ago: executing program 9 (id=2532): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfdff) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x8, 0x4eb, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) 3.417887373s ago: executing program 1 (id=2533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x20801, 0x0, 0x3, 0x1, 0xfffd, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000001000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='timer_start\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) llistxattr(0x0, 0x0, 0x0) 2.948690909s ago: executing program 0 (id=2535): shutdown(0xffffffffffffffff, 0x1) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = syz_clone(0x82020080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, r0, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0xb000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 2.903441554s ago: executing program 5 (id=2538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r1) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000340)={0x401, 0x7f, 0x4, 0x7, 0x2, "8cb5d01c4bcd240066efba686f553461a61116"}) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100, @remote, 0xa}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x10, &(0x7f0000000200)=0x10, 0x4) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2.786750765s ago: executing program 5 (id=2540): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000d7396d1c7fffc68100001800180000000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4574, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x6, 0x1, 0x0, r4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x4a, &(0x7f0000000380)=""/74, 0x41100, 0x19, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x9, 0x10}, 0x10, 0x161ea, r5, 0xa, &(0x7f00000008c0)=[r10, r0, r4, r4, r4, r11], &(0x7f0000000900)=[{0x4, 0x4, 0xc}, {0x3, 0x5, 0x2, 0x4}, {0x2, 0x1, 0x5, 0x9}, {0x5, 0x3, 0x6, 0x5}, {0x2, 0x3, 0x7, 0x1}, {0x5, 0x4, 0x0, 0x5}, {0x5, 0x5, 0x10, 0x8}, {0x4, 0x1, 0x4, 0x8}, {0x0, 0x1, 0x1, 0xc}, {0x0, 0x4, 0xb, 0x1}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x80, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x2, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x6, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d40}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9de}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0x80f23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x26, 0x3, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x3}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x2}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x7}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x4}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x6, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0xff, 0x8, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0x8, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x8, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x34, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {0x3}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1.837917229s ago: executing program 9 (id=2541): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) fspick(r1, &(0x7f00000002c0)='.\x00', 0x0) 1.666835136s ago: executing program 3 (id=2542): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000340)='./file1\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0xc740a, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x10000, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) (async) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000170400b7080000f7ff396f7b87f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009558f6af826b26514073d3ff1a6e2913c67bf9bd4b30b73698fc6823950af8f240479ed55efa58ebe38babdfc59b7872bebabe558c7c99f280842f75a7c93fef6625cadfd6b5b6c6eb91c8aac9f3838407dd757d8f7a6a7a3b3ba7fd83765fbbddaaba38b1bb359f83bf50da0a7175a328a2fc67f0e512e244ae2796bb05cbec00211068cf10cdc601d7786dde030ca0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000060000000400000000000000", @ANYRES32, @ANYBLOB="03000000000000000000000000009fa7246e00c08124aea1017f9e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b03ffffff92070200000e0000009f02ff01d200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socket$inet(0xa, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x64000600) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) (async) sendmsg$inet(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)}, 0x404c010) gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) 1.443697398s ago: executing program 3 (id=2543): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40010) sendmmsg$inet6(r0, &(0x7f0000005940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @private2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x32}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}], 0x58}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004000) 1.428972279s ago: executing program 3 (id=2544): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005000000090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 1.385739063s ago: executing program 3 (id=2545): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000eaffffff00000000000071970000"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") (fail_nth: 17) 851.682356ms ago: executing program 0 (id=2546): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 4) 368.123233ms ago: executing program 1 (id=2547): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000280)='unconfined\x00', 0xb, 0x0) renameat2(r0, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 254.838315ms ago: executing program 5 (id=2548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@random="ed4e0300", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bbe4d", 0x64, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "8c7c8db45d2c0ba8decba26565b12e6b32dd8c20597f6a5959d0921165374b57", "30ffdcbac90c2e58724369f6012f4b84", {"6854dedc3e3710b7a86a6efb5f14d84d", "18e136787f03e12095dc39942fb20364"}}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) lseek(r2, 0x40, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x5, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @remote, 0x0, 0x0, 'veth1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffe00, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) kcmp(0xffffffffffffffff, r1, 0x3, r5, r0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000280)={'sit0\x00', 0x8}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc0046209, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x1}) 201.41645ms ago: executing program 3 (id=2549): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x81, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000080)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./bus/file0/file0\x00') 200.92175ms ago: executing program 5 (id=2550): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r0, 0x5, &(0x7f0000000040)={0x6, 0x3ff}, &(0x7f0000000600)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="95000000000000001830000005000000040000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b70800004b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000ffffffff18430000040000000000000000000000186200000600000000000000d9dd0000184b0000faffffff0000000000000000186700000100000000000000fbffffff8500000029000000"], &(0x7f0000000240)='syzkaller\x00', 0x479, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r1], &(0x7f00000003c0)=[{0x0, 0x1, 0x6, 0x8}, {0x4, 0x2, 0x5, 0x4}, {0x4, 0x4, 0x4, 0x5}], 0x10, 0x7}, 0x94) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000004c0)={0x0, 0x0, 0x16, 0x7fff, @vifc_lcl_addr=@multicast2, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1b, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000100000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000000) setreuid(0xffffffffffffffff, 0xee01) keyctl$clear(0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='btrfs_cow_block\x00', r2}, 0x18) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) 198.685861ms ago: executing program 0 (id=2551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x10, 0x40, 0x401, 0x8, {{0x1c, 0x4, 0x1, 0x19, 0x70, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xe0, 0x1, 0x5, [{@loopback, 0x5ad}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d}, {@remote, 0x3}, {@multicast2}]}, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x6, [0xb1d, 0xa, 0x800, 0x8]}, @lsrr={0x83, 0x1b, 0x5, [@remote, @empty, @local, @multicast1, @remote, @private=0xa010101]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) pipe(&(0x7f0000000800)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff02000000000000000000000000000104", @ANYRES32=r4], 0x1043) 0s ago: executing program 3 (id=2552): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb020018"], 0x0, 0x4e}, 0x28) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x4, 0x8}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x80400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="8500000053000000029409001000000018110000abd0dac20b8764731c4ce325daf4d1e84331aa8d7c1214ed22a2283dd1eed97af682b6504c8eabe7543d88350159414e", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000007596010008000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000cb0000008500000006000000"], &(0x7f00000001c0)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4, 0x8, 0xfffffffc}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, r5, r6, r7, r8, r9], &(0x7f00000004c0)=[{0x1, 0x5, 0x8, 0x6}, {0x0, 0x4, 0xc, 0xb}, {0x3, 0x1, 0x8, 0x5}, {0x1, 0x3, 0xa, 0x4}, {0x4, 0x4, 0x1, 0x6}, {0x5, 0x3, 0x1, 0x7}, {0x0, 0x5, 0x7, 0x2}], 0x10, 0x4}, 0x94) kernel console output (not intermixed with test programs): . Opts: ,errors=continue [ 417.003060][ T8479] syz.1.2065[8479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.003112][ T8479] syz.1.2065[8479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.075391][ T7067] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 417.106077][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 417.372126][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.484028][ T8514] EXT4-fs error (device loop9): ext4_orphan_get:1395: inode #15: comm syz.9.2073: casefold flag without casefold feature [ 417.497024][ T8514] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.2073: couldn't read orphan inode 15 (err -117) [ 417.509641][ T8514] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 417.530986][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.538262][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.545560][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.553260][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.560524][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.560941][ T7067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.567780][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.586231][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.589733][ T7067] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 417.593928][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.604748][ T7067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.610459][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.625190][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.626079][ T7067] usb 1-1: config 0 descriptor?? [ 417.632549][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.644801][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.652243][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.659716][ T1782] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 417.674071][ T1782] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input16 [ 417.688131][ T1782] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 418.842264][ T1782] usb 3-1: USB disconnect, device number 21 [ 419.512484][ T7067] cherry 0003:046A:0023.000E: unbalanced delimiter at end of report description [ 419.522678][ T7067] cherry: probe of 0003:046A:0023.000E failed with error -22 [ 419.861206][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 419.892264][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2079'. [ 419.953477][ T7068] usb 1-1: USB disconnect, device number 26 [ 419.983970][ T8561] 9pnet: Insufficient options for proto=fd [ 421.079778][ T8593] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2094: bg 0: block 393: padding at end of block bitmap is not set [ 421.095208][ T8593] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 421.106678][ T8593] EXT4-fs (loop0): 2 truncates cleaned up [ 421.112542][ T8593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 421.201260][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 422.093292][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2097'. [ 422.141370][ T8609] device lo entered promiscuous mode [ 423.100017][ T8612] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 423.140342][ T24] kauditd_printk_skb: 131 callbacks suppressed [ 423.140356][ T24] audit: type=1400 audit(65961.061:3569): avc: denied { setopt } for pid=8605 comm="syz.1.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 423.242295][ T24] audit: type=1400 audit(65961.221:3570): avc: denied { bind } for pid=8605 comm="syz.1.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 423.384911][ T8609] device tunl0 entered promiscuous mode [ 423.392001][ T8609] device gre0 entered promiscuous mode [ 423.398700][ T8609] device gretap0 entered promiscuous mode [ 423.405847][ T8609] device erspan0 entered promiscuous mode [ 423.413321][ T8609] device ip_vti0 entered promiscuous mode [ 423.420060][ T8609] device ip6_vti0 entered promiscuous mode [ 423.427124][ T8609] device sit0 entered promiscuous mode [ 423.434197][ T8609] device ip6tnl0 entered promiscuous mode [ 423.443204][ T8609] device ip6gre0 entered promiscuous mode [ 423.450375][ T8609] device syz_tun entered promiscuous mode [ 423.457726][ T8609] device ip6gretap0 entered promiscuous mode [ 423.465044][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.472293][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.472443][ T24] audit: type=1326 audit(65961.461:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.480237][ T8609] device bridge0 entered promiscuous mode [ 423.510720][ T8609] device dummy0 entered promiscuous mode [ 423.517840][ T8609] device veth0 entered promiscuous mode [ 423.525038][ T24] audit: type=1326 audit(65961.491:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.548597][ T24] audit: type=1326 audit(65961.491:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.572213][ T8609] device veth1 entered promiscuous mode [ 423.579203][ T8609] device wg0 entered promiscuous mode [ 423.587289][ T8609] device wg1 entered promiscuous mode [ 423.593892][ T8609] device wg2 entered promiscuous mode [ 423.601510][ T8609] device veth0_to_bridge entered promiscuous mode [ 423.610154][ T8609] device veth1_to_bridge entered promiscuous mode [ 423.618794][ T8609] device veth0_to_bond entered promiscuous mode [ 423.626269][ T8609] device bond_slave_0 entered promiscuous mode [ 423.632950][ T8609] device veth1_to_bond entered promiscuous mode [ 423.639959][ T8609] device bond_slave_1 entered promiscuous mode [ 423.646664][ T8609] device veth0_to_team entered promiscuous mode [ 423.653814][ T8609] device team_slave_0 entered promiscuous mode [ 423.660299][ T8609] device veth1_to_team entered promiscuous mode [ 423.667316][ T8609] device team_slave_1 entered promiscuous mode [ 423.674086][ T8609] device veth0_to_batadv entered promiscuous mode [ 423.681653][ T8609] device batadv_slave_0 entered promiscuous mode [ 423.689304][ T8609] device veth1_to_batadv entered promiscuous mode [ 423.689398][ T24] audit: type=1326 audit(65961.491:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.718947][ T8609] device batadv_slave_1 entered promiscuous mode [ 423.726401][ T24] audit: type=1326 audit(65961.491:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.749595][ T24] audit: type=1326 audit(65961.491:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.751773][ T8609] device xfrm0 entered promiscuous mode [ 423.780391][ T24] audit: type=1326 audit(65961.491:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.803714][ T8609] device veth0_to_hsr entered promiscuous mode [ 423.811234][ T8609] device hsr_slave_0 entered promiscuous mode [ 423.818566][ T8609] device veth1_to_hsr entered promiscuous mode [ 423.827070][ T8631] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 423.837152][ T8609] device hsr_slave_1 entered promiscuous mode [ 423.845127][ T8609] device veth1_virt_wifi entered promiscuous mode [ 423.852748][ T24] audit: type=1326 audit(65961.491:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 423.876232][ T8609] device veth0_virt_wifi entered promiscuous mode [ 423.881336][ T8631] EXT4-fs (loop0): shut down requested (2) [ 423.888676][ T8609] device veth1_vlan entered promiscuous mode [ 423.889505][ T8631] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 423.908596][ T8609] device vlan0 entered promiscuous mode [ 423.914493][ T8609] device vlan1 entered promiscuous mode [ 423.921474][ T8609] device veth0_macvtap entered promiscuous mode [ 423.928726][ T8609] device macsec0 entered promiscuous mode [ 423.936987][ T8633] netem: change failed [ 424.120749][ T7972] FAT-fs (loop2): Invalid FSINFO signature: 0x000002c0, 0x00000000 (sector = 1) [ 424.130901][ T8640] EXT4-fs error (device loop9): ext4_orphan_get:1395: inode #15: comm syz.9.2107: iget: bad i_size value: 38620345925642 [ 424.161106][ T8640] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.2107: couldn't read orphan inode 15 (err -117) [ 424.183506][ T8640] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 424.251533][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 424.289178][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 424.309343][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 424.319260][ T7972] tipc: Left network mode [ 424.323556][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 424.342422][ T8653] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 424.362659][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 424.376385][ T8631] overlayfs: failed to resolve './bus': -2 [ 424.658333][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.675178][ T6177] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap [ 424.687845][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.698935][ T8661] device bridge_slave_0 entered promiscuous mode [ 424.718666][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.731942][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.742424][ T6177] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 424.820768][ T6177] EXT4-fs (loop9): This should not happen!! Data will be lost [ 424.820768][ T6177] [ 424.833982][ T8661] device bridge_slave_1 entered promiscuous mode [ 424.896255][ T8669] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2115'. [ 424.956733][ T6177] EXT4-fs (loop9): Total free blocks count 0 [ 424.966822][ T6177] EXT4-fs (loop9): Free/Dirty block details [ 424.972925][ T6177] EXT4-fs (loop9): free_blocks=0 [ 424.977978][ T6177] EXT4-fs (loop9): dirty_blocks=16008 [ 424.992379][ T6177] EXT4-fs (loop9): Block reservation details [ 424.994636][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 424.998675][ T6177] EXT4-fs (loop9): i_reserved_data_blocks=16008 [ 425.009251][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 425.024463][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 425.038105][ T494] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 425.044192][ T8631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 425.051465][ T494] EXT4-fs (loop9): This should not happen!! Data will be lost [ 425.051465][ T494] [ 425.102738][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.110501][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.121309][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.129881][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.146817][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.153915][ T494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.177858][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.195935][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.219442][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.231054][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.238121][ T494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.246457][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 425.254690][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.271365][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.279607][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.296138][ T8661] device veth0_vlan entered promiscuous mode [ 425.304681][ T7972] device bridge_slave_1 left promiscuous mode [ 425.313183][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.328504][ T8679] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 425.391434][ T7972] device bridge_slave_0 left promiscuous mode [ 425.397896][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.408486][ T7972] device bridge0 left promiscuous mode [ 425.414044][ T7972] device veth1_macvtap left promiscuous mode [ 425.420169][ T7972] device veth0_vlan left promiscuous mode [ 425.893590][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.959145][ T8690] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2121'. [ 426.101195][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.121066][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.140889][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.159671][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.187619][ T8661] device veth1_macvtap entered promiscuous mode [ 426.250427][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.269008][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.301057][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.309697][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.321156][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.329601][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.341035][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.164819][ T8683] F2FS-fs (loop0): invalid crc value [ 427.230168][ T8683] F2FS-fs (loop0): Found nat_bits in checkpoint [ 427.335433][ T8683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 428.981642][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 428.989444][ T24] audit: type=1400 audit(65966.056:3658): avc: denied { ioctl } for pid=8722 comm="syz.9.2129" path="socket:[45406]" dev="sockfs" ino=45406 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 429.292727][ T24] audit: type=1400 audit(65966.966:3659): avc: denied { read write } for pid=8722 comm="syz.9.2129" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 429.339595][ T24] audit: type=1400 audit(65966.966:3660): avc: denied { open } for pid=8722 comm="syz.9.2129" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 429.387571][ T24] audit: type=1400 audit(65966.966:3661): avc: denied { ioctl } for pid=8722 comm="syz.9.2129" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 429.628872][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 429.638103][ T24] audit: type=1400 audit(65967.616:3662): avc: denied { mounton } for pid=8737 comm="syz.0.2132" path="/166/file0" dev="tmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 429.666837][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.691880][ T24] audit: type=1400 audit(65967.676:3663): avc: denied { create } for pid=8737 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.713294][ T8747] fuse: Invalid rootmode [ 429.724603][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 429.741036][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.752483][ T24] audit: type=1400 audit(65967.706:3664): avc: denied { write } for pid=8737 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.777600][ T8748] overlayfs: failed to resolve './file1/file0': -2 [ 429.789832][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.838765][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.851998][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.862177][ T24] audit: type=1400 audit(65967.846:3665): avc: denied { compute_member } for pid=8743 comm="syz.8.2134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 429.862393][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.891211][ T52] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 430.052395][ T24] audit: type=1400 audit(65968.036:3666): avc: denied { watch } for pid=8751 comm="syz.0.2136" path="/167/file0" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 430.082352][ T24] audit: type=1400 audit(65968.056:3667): avc: denied { execute } for pid=8751 comm="syz.0.2136" name="file0" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 430.160763][ T52] usb 10-1: Using ep0 maxpacket: 16 [ 430.167540][ T8748] overlayfs: failed to resolve './file1/file0': -2 [ 430.175182][ T8748] overlayfs: failed to resolve './file1': -2 [ 430.290774][ T52] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.301339][ T52] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.480812][ T52] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.490125][ T52] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.498497][ T52] usb 10-1: Product: syz [ 430.514806][ T52] usb 10-1: Manufacturer: syz [ 430.523697][ T52] usb 10-1: SerialNumber: syz [ 430.530305][ T8741] F2FS-fs (loop1): invalid crc value [ 430.568815][ T8741] F2FS-fs (loop1): Found nat_bits in checkpoint [ 430.622435][ T8741] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 432.500403][ T8781] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 432.665804][ T8781] EXT4-fs (loop0): 1 truncate cleaned up [ 432.671666][ T8781] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue [ 433.009057][ T8794] EXT4-fs (loop9): Test dummy encryption mode enabled [ 433.045152][ T8794] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 433.064916][ T8794] EXT4-fs (loop9): can't mount with both data=journal and delalloc [ 433.150758][ T52] usb 10-1: 0:2 : does not exist [ 433.160781][ T52] usb 10-1: USB disconnect, device number 4 [ 433.246513][ T8807] bridge0: port 4(vlan3) entered disabled state [ 433.252913][ T8807] bridge0: port 3(vlan2) entered disabled state [ 433.259204][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.266806][ T8807] device bridge0 left promiscuous mode [ 433.432438][ T933] udevd[933]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 433.433595][ T8809] syz.0.2153[8809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.448973][ T8809] syz.0.2153[8809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.653169][ T8813] overlayfs: unrecognized mount option "userxattr" or missing value [ 433.956517][ T8817] fuse: Unknown parameter 'use00000000000000000000' [ 434.003618][ T7064] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 434.067126][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 434.067139][ T24] audit: type=1400 audit(65972.046:3713): avc: denied { unlink } for pid=5458 comm="syz-executor" name="file0" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 434.116958][ T8822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8822 comm=syz.1.2157 [ 434.130311][ T8823] syz.3.2155[8823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.130378][ T8823] syz.3.2155[8823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.318711][ T24] audit: type=1400 audit(65972.296:3714): avc: denied { mount } for pid=8826 comm="syz.1.2158" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 434.387754][ T8829] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 434.420800][ T7064] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 434.438540][ T24] audit: type=1400 audit(65972.366:3715): avc: denied { relabelfrom } for pid=8828 comm="syz.0.2159" name="NETLINK" dev="sockfs" ino=45597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.444171][ T7064] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 434.491810][ T24] audit: type=1400 audit(65972.386:3716): avc: denied { relabelto } for pid=8828 comm="syz.0.2159" name="NETLINK" dev="sockfs" ino=45597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 434.537089][ T24] audit: type=1400 audit(65972.396:3717): avc: denied { map } for pid=8828 comm="syz.0.2159" path="socket:[45597]" dev="sockfs" ino=45597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.576527][ T24] audit: type=1400 audit(65972.396:3718): avc: denied { read accept } for pid=8828 comm="syz.0.2159" path="socket:[45597]" dev="sockfs" ino=45597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.601501][ T7064] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.603748][ T24] audit: type=1400 audit(65972.396:3719): avc: denied { wake_alarm } for pid=8828 comm="syz.0.2159" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.614731][ T7064] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 434.645142][ T7064] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.660137][ T7064] usb 10-1: config 0 descriptor?? [ 434.665663][ T24] audit: type=1400 audit(65972.446:3720): avc: denied { mounton } for pid=8826 comm="syz.1.2158" path="/131/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 434.716046][ T24] audit: type=1400 audit(65972.446:3721): avc: denied { mount } for pid=8826 comm="syz.1.2158" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 434.739500][ T24] audit: type=1400 audit(65972.466:3722): avc: denied { setopt } for pid=8831 comm="syz.0.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.776212][ T7064] usb 10-1: MIDIStreaming interface descriptor not found [ 434.990226][ T1797] usb 10-1: USB disconnect, device number 5 [ 435.445929][ T8851] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 435.520966][ T8851] syz.0.2165[8851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.521038][ T8851] syz.0.2165[8851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.605674][ T8861] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 435.625606][ T8861] EXT4-fs (loop9): orphan cleanup on readonly fs [ 435.632508][ T8861] EXT4-fs warning (device loop9): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 435.647407][ T8861] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 435.654855][ T8861] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2169: bg 0: block 40: padding at end of block bitmap is not set [ 435.669344][ T8861] EXT4-fs error (device loop9) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 435.678679][ T8861] EXT4-fs (loop9): 1 truncate cleaned up [ 435.684411][ T8861] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,nobarrier,,errors=continue [ 435.969679][ T8875] device wireguard0 entered promiscuous mode [ 436.074717][ T8879] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2173'. [ 436.784067][ T8913] EXT4-fs (loop0): 1 orphan inode deleted [ 436.790016][ T8913] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 436.971236][ T8921] incfs_lookup_dentry err:-5 [ 436.975877][ T8921] incfs: Can't find or create .index dir in ./file0 [ 436.983073][ T8921] incfs: mount failed -5 [ 436.992103][ T8923] fuse: Unknown parameter 'use00000000000000000000' [ 437.090731][ T7047] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 437.561066][ T7047] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 437.741227][ T7047] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 437.770540][ T7047] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.810753][ T7047] usb 10-1: Product: syz [ 437.830483][ T7047] usb 10-1: Manufacturer: syz [ 437.849979][ T7047] usb 10-1: SerialNumber: syz [ 437.890221][ T7047] usb 10-1: config 0 descriptor?? [ 437.941171][ T7047] hub 10-1:0.0: bad descriptor, ignoring hub [ 437.948898][ T7047] hub: probe of 10-1:0.0 failed with error -5 [ 437.963969][ T7047] snd-usb-audio: probe of 10-1:0.0 failed with error -2 [ 438.271327][ T7067] usb 10-1: USB disconnect, device number 6 [ 438.560689][ T7068] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 438.736499][ T8961] fuse: Unknown parameter 'user_i00000000000000000000' [ 439.044031][ T7068] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.080144][ T7068] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.147407][ T7068] usb 1-1: config 0 interface 0 has no altsetting 0 [ 439.161373][ T7068] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 439.225663][ T7068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.236177][ T24] kauditd_printk_skb: 167 callbacks suppressed [ 439.236192][ T24] audit: type=1400 audit(65977.216:3889): avc: denied { ioctl } for pid=8969 comm="syz.3.2200" path="socket:[44714]" dev="sockfs" ino=44714 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 439.271536][ T7068] usb 1-1: config 0 descriptor?? [ 439.313790][ T24] audit: type=1326 audit(65977.276:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.0.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff86334bacb code=0x7ffc0000 [ 439.346866][ T24] audit: type=1326 audit(65977.276:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.0.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff86334bacb code=0x7ffc0000 [ 439.370035][ T24] audit: type=1326 audit(65977.276:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.0.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff86334bacb code=0x7ffc0000 [ 439.393114][ T24] audit: type=1326 audit(65977.276:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.0.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff86334bacb code=0x7ffc0000 [ 439.416244][ T24] audit: type=1326 audit(65977.276:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388d5faec9 code=0x7ffc0000 [ 439.439629][ T24] audit: type=1326 audit(65977.276:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388d5faec9 code=0x7ffc0000 [ 439.462842][ T24] audit: type=1326 audit(65977.326:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.0.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff86337e785 code=0x7ffc0000 [ 439.494226][ T8966] F2FS-fs (loop9): Unrecognized mount option "discard_" or missing value [ 439.546788][ T24] audit: type=1400 audit(65977.526:3897): avc: denied { create } for pid=8965 comm="syz.9.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 439.575629][ T24] audit: type=1326 audit(65977.546:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.0.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 439.874612][ T9002] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 439.887824][ T9002] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 439.893716][ T9015] fuse: Unknown parameter 'user_i00000000000000000000' [ 439.896634][ T9002] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 439.915636][ T9002] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 440.650897][ T7068] usbhid 1-1:0.0: can't add hid device: -71 [ 440.657071][ T7068] usbhid: probe of 1-1:0.0 failed with error -71 [ 440.666945][ T7068] usb 1-1: USB disconnect, device number 27 [ 440.700753][ T1782] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 440.816593][ T9059] device wg2 left promiscuous mode [ 440.819558][ T9060] fuse: Unknown parameter 'user_i00000000000000000000' [ 440.835572][ T9059] device wg2 entered promiscuous mode [ 440.923291][ T9063] tipc: Started in network mode [ 440.931802][ T9063] tipc: Own node identity 963e784a3d5, cluster identity 4711 [ 440.939721][ T9063] tipc: Enabled bearer , priority 0 [ 440.959168][ T9063] device syzkaller0 entered promiscuous mode [ 441.268267][ T9077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2226'. [ 441.280238][ T9061] tipc: Resetting bearer [ 441.311194][ T9061] tipc: Disabling bearer [ 441.383945][ T1782] usb 2-1: device descriptor read/64, error -71 [ 442.100665][ T1782] usb 2-1: device descriptor read/64, error -71 [ 443.780693][ T1787] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 444.070654][ T1787] usb 1-1: device descriptor read/64, error -71 [ 444.330059][ T24] kauditd_printk_skb: 188 callbacks suppressed [ 444.330072][ T24] audit: type=1400 audit(65982.306:4087): avc: denied { accept } for pid=9138 comm="syz.3.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 444.470714][ T1787] usb 1-1: device descriptor read/64, error -71 [ 445.680728][ T1787] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 445.950957][ T1787] usb 1-1: device descriptor read/64, error -71 [ 446.340732][ T1787] usb 1-1: device descriptor read/64, error -71 [ 446.460962][ T1787] usb usb1-port1: attempt power cycle [ 446.504088][ T24] audit: type=1326 audit(65984.486:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 446.516716][ T9156] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 446.620741][ T24] audit: type=1326 audit(65984.506:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 446.657867][ T24] audit: type=1326 audit(65984.506:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 446.771416][ T9164] EXT4-fs (loop9): dax option not supported [ 446.886411][ T24] audit: type=1326 audit(65984.506:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 446.941773][ T24] audit: type=1326 audit(65984.506:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 446.968260][ T24] audit: type=1326 audit(65984.506:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 446.991610][ T24] audit: type=1326 audit(65984.506:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 447.017830][ T24] audit: type=1326 audit(65984.506:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 447.042944][ T24] audit: type=1326 audit(65984.506:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019be7ec9 code=0x7ffc0000 [ 448.655493][ T9202] FAULT_INJECTION: forcing a failure. [ 448.655493][ T9202] name failslab, interval 1, probability 0, space 0, times 0 [ 448.668229][ T9202] CPU: 0 PID: 9202 Comm: syz.1.2263 Not tainted syzkaller #0 [ 448.675685][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 448.685752][ T9202] Call Trace: [ 448.689070][ T9202] __dump_stack+0x21/0x24 [ 448.693405][ T9202] dump_stack_lvl+0x169/0x1d8 [ 448.698086][ T9202] ? thaw_kernel_threads+0x220/0x220 [ 448.703628][ T9202] ? show_regs_print_info+0x18/0x18 [ 448.708927][ T9202] ? memset+0x35/0x40 [ 448.712923][ T9202] dump_stack+0x15/0x1c [ 448.717107][ T9202] should_fail+0x3c1/0x510 [ 448.721536][ T9202] ? __se_sys_memfd_create+0xf2/0x3a0 [ 448.726915][ T9202] __should_failslab+0xa4/0xe0 [ 448.731683][ T9202] should_failslab+0x9/0x20 [ 448.736209][ T9202] __kmalloc+0x60/0x330 [ 448.740374][ T9202] ? strnlen_user+0x13b/0x1c0 [ 448.745063][ T9202] __se_sys_memfd_create+0xf2/0x3a0 [ 448.750278][ T9202] __x64_sys_memfd_create+0x5b/0x70 [ 448.755486][ T9202] do_syscall_64+0x31/0x40 [ 448.759911][ T9202] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 448.765813][ T9202] RIP: 0033:0x7efe764deec9 [ 448.770233][ T9202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.789846][ T9202] RSP: 002b:00007efe74f04e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 448.798274][ T9202] RAX: ffffffffffffffda RBX: 00000000000004b4 RCX: 00007efe764deec9 [ 448.806261][ T9202] RDX: 00007efe74f04ef0 RSI: 0000000000000000 RDI: 00007efe76562960 [ 448.814246][ T9202] RBP: 0000200000000c80 R08: 00007efe74f04bb7 R09: 00007efe74f04e40 [ 448.822228][ T9202] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 448.830208][ T9202] R13: 00007efe74f04ef0 R14: 00007efe74f04eb0 R15: 00002000000000c0 [ 449.102226][ T7972] tipc: Left network mode [ 449.394092][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 449.394107][ T24] audit: type=1400 audit(65987.376:4148): avc: denied { watch } for pid=9206 comm="syz.8.2267" path="/32/file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 449.620311][ T24] audit: type=1400 audit(65987.596:4149): avc: denied { map } for pid=9209 comm="syz.9.2268" path="/proc/203/task" dev="proc" ino=47138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 449.650674][ T1787] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 449.831463][ T24] audit: type=1400 audit(65987.746:4150): avc: denied { associate } for pid=9209 comm="syz.9.2268" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 449.928881][ T24] audit: type=1400 audit(65987.746:4151): avc: denied { mount } for pid=9209 comm="syz.9.2268" name="/" dev="ramfs" ino=47141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 450.046491][ T9205] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.053767][ T1787] usb 1-1: Using ep0 maxpacket: 32 [ 450.071086][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.094839][ T9205] device bridge_slave_0 entered promiscuous mode [ 450.128406][ T9205] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.138786][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.146414][ T9205] device bridge_slave_1 entered promiscuous mode [ 450.197810][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2273'. [ 450.207511][ T1787] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 450.215950][ T1787] usb 1-1: config 0 has no interface number 0 [ 450.222471][ T1787] usb 1-1: config 0 interface 184 has no altsetting 0 [ 450.233612][ T24] audit: type=1400 audit(65988.216:4152): avc: denied { create } for pid=9229 comm="syz.9.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 450.252983][ T24] audit: type=1400 audit(65988.226:4153): avc: denied { write } for pid=9229 comm="syz.9.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 450.272530][ T24] audit: type=1400 audit(65988.226:4154): avc: denied { mount } for pid=9229 comm="syz.9.2273" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 450.338203][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.347150][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.368402][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.387660][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.408422][ T1787] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 450.427397][ T1787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.436483][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.443574][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.461524][ T1787] usb 1-1: Product: syz [ 450.465728][ T1787] usb 1-1: Manufacturer: syz [ 450.466138][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.470347][ T1787] usb 1-1: SerialNumber: syz [ 450.478910][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.496403][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.503605][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.511529][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.519625][ T1787] usb 1-1: config 0 descriptor?? [ 450.526441][ T24] audit: type=1400 audit(65988.506:4155): avc: denied { ioctl } for pid=9227 comm="syz.8.2272" path="socket:[46322]" dev="sockfs" ino=46322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.568430][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.579370][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.607858][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.621814][ T1787] smsc75xx v1.0.0 [ 450.629932][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.639322][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.648223][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.657257][ T9205] device veth0_vlan entered promiscuous mode [ 450.666249][ T7972] bridge0: port 4(vlan3) entered disabled state [ 450.674704][ T7972] bridge0: port 3(vlan2) entered disabled state [ 450.681666][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.710829][ T1787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 450.730175][ T1787] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 450.747213][ T1787] usb 1-1: USB disconnect, device number 31 [ 450.898222][ T9247] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 451.171409][ T24] audit: type=1326 audit(65989.156:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.8.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388d5faec9 code=0x7ffc0000 [ 451.218628][ T24] audit: type=1326 audit(65989.156:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.8.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388d5faec9 code=0x7ffc0000 [ 451.219816][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.271049][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.281151][ T9205] device veth1_macvtap entered promiscuous mode [ 451.294767][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.304426][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.314201][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.345782][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.368259][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.383573][ T9253] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 451.605686][ T9263] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.782320][ T1782] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 452.780712][ T1782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.797090][ T1782] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 452.806450][ T1782] usb 4-1: config 1 has no interface number 0 [ 452.813027][ T1782] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.824309][ T9242] F2FS-fs (loop1): invalid crc value [ 452.826360][ T1782] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 452.841068][ T1782] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 452.850476][ T1782] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.872822][ T9242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 453.020891][ T1782] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.031203][ T1782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.050396][ T1782] usb 4-1: Product: syz [ 453.060693][ T1782] usb 4-1: Manufacturer: syz [ 453.072637][ T1782] usb 4-1: SerialNumber: syz [ 453.110755][ T9258] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 453.162053][ T9242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 453.266148][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2290'. [ 453.587085][ T9258] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 453.620889][ T9302] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 454.203413][ T1782] cdc_ncm 4-1:1.1: bind() failure [ 455.045904][ T1788] usb 4-1: USB disconnect, device number 21 [ 455.133758][ T9328] ip6t_REJECT: ECHOREPLY is not supported [ 455.144895][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 455.144908][ T24] audit: type=1400 audit(65993.126:4209): avc: denied { bind } for pid=9327 comm="syz.0.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 455.446018][ T24] audit: type=1400 audit(65993.426:4210): avc: denied { nlmsg_write } for pid=9330 comm="syz.0.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 455.483529][ T9336] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 455.623292][ T24] audit: type=1326 audit(65993.606:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 455.648239][ T24] audit: type=1326 audit(65993.606:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 455.677082][ T24] audit: type=1326 audit(65993.606:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 455.733819][ T24] audit: type=1326 audit(65993.606:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 455.758823][ T24] audit: type=1326 audit(65993.606:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 455.782270][ T24] audit: type=1326 audit(65993.606:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 455.805596][ T24] audit: type=1326 audit(65993.606:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 455.829679][ T24] audit: type=1326 audit(65993.626:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 456.015666][ T9360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2310'. [ 456.025505][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 456.034497][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 456.043702][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 456.479289][ T9361] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2307: bg 0: block 393: padding at end of block bitmap is not set [ 456.495826][ T9361] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 456.510217][ T9361] EXT4-fs (loop3): 2 truncates cleaned up [ 456.516089][ T9361] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 456.903521][ T7047] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 457.330769][ T7047] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.348206][ T7047] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.450807][ T7047] usb 10-1: New USB device found, idVendor=056a, idProduct=f43b, bcdDevice=ff.ff [ 457.461189][ T7047] usb 10-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 457.470287][ T7047] usb 10-1: Manufacturer: syz [ 457.485849][ T7047] usb 10-1: config 0 descriptor?? [ 457.552963][ T9380] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 457.668776][ T9391] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 457.685834][ T9391] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 457.900685][ T7047] usbhid 10-1:0.0: can't add hid device: -71 [ 457.907035][ T7047] usbhid: probe of 10-1:0.0 failed with error -71 [ 457.932587][ T7047] usb 10-1: USB disconnect, device number 7 [ 458.730993][ T9383] F2FS-fs (loop3): invalid crc value [ 458.746232][ T9383] F2FS-fs (loop3): Found nat_bits in checkpoint [ 458.771195][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2320'. [ 458.794312][ T9383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 459.020744][ T1782] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 459.340765][ T7064] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 459.650643][ T7064] usb 1-1: device descriptor read/64, error -71 [ 459.670657][ T1782] usb 10-1: Using ep0 maxpacket: 32 [ 459.681676][ T9427] EXT4-fs (loop3): Ignoring removed bh option [ 459.687962][ T9427] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 459.695783][ T9427] EXT4-fs (loop3): Ignoring removed bh option [ 459.702083][ T9427] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 459.819568][ T9427] 9pnet: Insufficient options for proto=fd [ 459.830825][ T1782] usb 10-1: unable to get BOS descriptor or descriptor too short [ 459.861326][ T9430] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 459.941298][ T1782] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 459.950135][ T1782] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.962750][ T1782] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.130750][ T7064] usb 1-1: device descriptor read/64, error -71 [ 460.151872][ T9441] FAULT_INJECTION: forcing a failure. [ 460.151872][ T9441] name failslab, interval 1, probability 0, space 0, times 0 [ 460.164574][ T9441] CPU: 1 PID: 9441 Comm: syz.1.2330 Not tainted syzkaller #0 [ 460.171946][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.182004][ T9441] Call Trace: [ 460.185305][ T9441] __dump_stack+0x21/0x24 [ 460.189637][ T9441] dump_stack_lvl+0x169/0x1d8 [ 460.194320][ T9441] ? show_regs_print_info+0x18/0x18 [ 460.199529][ T9441] ? preempt_schedule_irq+0xbb/0x110 [ 460.204819][ T9441] dump_stack+0x15/0x1c [ 460.208975][ T9441] should_fail+0x3c1/0x510 [ 460.213394][ T9441] ? __d_alloc+0x2d/0x6a0 [ 460.217725][ T9441] __should_failslab+0xa4/0xe0 [ 460.222490][ T9441] should_failslab+0x9/0x20 [ 460.226995][ T9441] kmem_cache_alloc+0x3d/0x2e0 [ 460.231767][ T9441] __d_alloc+0x2d/0x6a0 [ 460.235925][ T9441] ? current_time+0x18c/0x2a0 [ 460.240610][ T9441] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 460.246257][ T9441] d_alloc_pseudo+0x1d/0x70 [ 460.250765][ T9441] alloc_file_pseudo+0xc8/0x1f0 [ 460.255620][ T9441] ? alloc_empty_file_noaccount+0x80/0x80 [ 460.261438][ T9441] ? shmem_get_inode+0x693/0x9d0 [ 460.266380][ T9441] ? __kasan_check_write+0x14/0x20 [ 460.271514][ T9441] ? clear_nlink+0x8a/0xe0 [ 460.276031][ T9441] __shmem_file_setup+0x1df/0x2b0 [ 460.281115][ T9441] shmem_file_setup+0x2f/0x40 [ 460.285799][ T9441] __se_sys_memfd_create+0x1e6/0x3a0 [ 460.291094][ T9441] __x64_sys_memfd_create+0x5b/0x70 [ 460.296307][ T9441] do_syscall_64+0x31/0x40 [ 460.300738][ T9441] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 460.306647][ T9441] RIP: 0033:0x7efe764deec9 [ 460.311081][ T9441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.330711][ T9441] RSP: 002b:00007efe74f04e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 460.339145][ T9441] RAX: ffffffffffffffda RBX: 00000000000004b4 RCX: 00007efe764deec9 [ 460.347141][ T9441] RDX: 00007efe74f04ef0 RSI: 0000000000000000 RDI: 00007efe76562960 [ 460.355117][ T9441] RBP: 0000200000000c80 R08: 00007efe74f04bb7 R09: 00007efe74f04e40 [ 460.363266][ T9441] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 460.371241][ T9441] R13: 00007efe74f04ef0 R14: 00007efe74f04eb0 R15: 00002000000000c0 [ 460.528475][ T1782] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.539185][ T1782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.540782][ T7064] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 460.559276][ T1782] usb 10-1: Product: syz [ 460.565275][ T1782] usb 10-1: Manufacturer: syz [ 460.570066][ T1782] usb 10-1: SerialNumber: syz [ 460.923543][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 460.923557][ T24] audit: type=1326 audit(65998.906:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 460.978530][ T9444] EXT4-fs (loop3): Ignoring removed bh option [ 461.002336][ T24] audit: type=1326 audit(65998.946:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.032301][ T9444] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x000000000000bd40,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,bh,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 461.061728][ T7064] usb 1-1: device descriptor read/64, error -71 [ 461.068524][ T24] audit: type=1326 audit(65998.946:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.081253][ T9407] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 461.100351][ T24] audit: type=1326 audit(65998.946:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.149226][ T24] audit: type=1326 audit(65998.946:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.174818][ T24] audit: type=1326 audit(65998.946:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.198048][ T24] audit: type=1326 audit(65998.946:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.255210][ T24] audit: type=1326 audit(65998.946:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.278560][ T24] audit: type=1326 audit(65998.946:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.587692][ T24] audit: type=1326 audit(65998.946:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f54de7d9ec9 code=0x7ffc0000 [ 461.662811][ T9455] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 461.720647][ T7064] usb 1-1: device descriptor read/64, error -71 [ 461.840740][ T7064] usb usb1-port1: attempt power cycle [ 461.850772][ T52] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 462.280845][ T52] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 462.326354][ T52] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.466175][ T52] usb 9-1: config 0 has no interface number 0 [ 462.530716][ T1782] usb 10-1: 0:2 : does not exist [ 462.535766][ T1782] usb 10-1: unit 8 not found! [ 462.557126][ T1782] usb 10-1: USB disconnect, device number 8 [ 462.630823][ T1793] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 462.650772][ T52] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 462.660005][ T52] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.668056][ T52] usb 9-1: Product: syz [ 462.672409][ T52] usb 9-1: Manufacturer: syz [ 462.677067][ T52] usb 9-1: SerialNumber: syz [ 462.684576][ T52] usb 9-1: config 0 descriptor?? [ 462.816827][ T9473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 463.021012][ T1793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.032646][ T1793] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 463.043358][ T1793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.080670][ T9473] EXT4-fs (loop3): 1 truncate cleaned up [ 463.086438][ T9473] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue [ 463.222668][ T1793] usb 2-1: config 0 descriptor?? [ 463.358472][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 463.376230][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.461055][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 463.883811][ T52] usb 9-1: USB disconnect, device number 13 [ 463.896126][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.905724][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.914098][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.922633][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.931286][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.017995][ T9483] overlayfs: missing 'lowerdir' [ 464.111642][ T1793] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 464.127374][ T1793] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input17 [ 464.203941][ T1793] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 464.712764][ T9496] F2FS-fs (loop3): invalid crc value [ 464.733837][ T9496] F2FS-fs (loop3): Found nat_bits in checkpoint [ 464.797045][ T9496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 465.110670][ T7056] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 465.186752][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2352'. [ 465.227991][ T9524] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 465.244549][ T9521] attempt to access beyond end of device [ 465.244549][ T9521] loop9: rw=2049, want=250, limit=128 [ 465.255701][ T9521] attempt to access beyond end of device [ 465.255701][ T9521] loop9: rw=2049, want=154, limit=128 [ 465.400849][ T9528] xt_hashlimit: max too large, truncated to 1048576 [ 465.977575][ T24] kauditd_printk_skb: 128 callbacks suppressed [ 465.977588][ T24] audit: type=1400 audit(66004.951:4355): avc: denied { map } for pid=9523 comm="syz.3.2348" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 466.262924][ T7056] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.290773][ T24] audit: type=1400 audit(66005.201:4356): avc: denied { getopt } for pid=9527 comm="syz.8.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 466.395918][ T1784] usb 2-1: USB disconnect, device number 28 [ 466.478504][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 466.567765][ T9540] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue [ 466.666834][ T9555] FAULT_INJECTION: forcing a failure. [ 466.666834][ T9555] name failslab, interval 1, probability 0, space 0, times 0 [ 466.680016][ T9555] CPU: 0 PID: 9555 Comm: syz.8.2357 Not tainted syzkaller #0 [ 466.687390][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.697463][ T9555] Call Trace: [ 466.700784][ T9555] __dump_stack+0x21/0x24 [ 466.705130][ T9555] dump_stack_lvl+0x169/0x1d8 [ 466.709812][ T9555] ? thaw_kernel_threads+0x220/0x220 [ 466.715105][ T9555] ? show_regs_print_info+0x18/0x18 [ 466.720400][ T9555] dump_stack+0x15/0x1c [ 466.724564][ T9555] should_fail+0x3c1/0x510 [ 466.728988][ T9555] ? security_file_alloc+0x33/0x120 [ 466.734194][ T9555] __should_failslab+0xa4/0xe0 [ 466.738970][ T9555] should_failslab+0x9/0x20 [ 466.743658][ T9555] kmem_cache_alloc+0x3d/0x2e0 [ 466.748433][ T9555] ? __alloc_file+0x28/0x320 [ 466.753034][ T9555] security_file_alloc+0x33/0x120 [ 466.758172][ T9555] __alloc_file+0xb5/0x320 [ 466.762599][ T9555] alloc_empty_file+0x97/0x180 [ 466.767371][ T9555] alloc_file+0x59/0x540 [ 466.771637][ T9555] alloc_file_pseudo+0x17a/0x1f0 [ 466.776581][ T9555] ? alloc_empty_file_noaccount+0x80/0x80 [ 466.782332][ T9555] ? shmem_get_inode+0x693/0x9d0 [ 466.787277][ T9555] ? __kasan_check_write+0x14/0x20 [ 466.792405][ T9555] ? clear_nlink+0x8a/0xe0 [ 466.796919][ T9555] __shmem_file_setup+0x1df/0x2b0 [ 466.801965][ T9555] shmem_file_setup+0x2f/0x40 [ 466.806649][ T9555] __se_sys_memfd_create+0x1e6/0x3a0 [ 466.811942][ T9555] __x64_sys_memfd_create+0x5b/0x70 [ 466.817170][ T9555] do_syscall_64+0x31/0x40 [ 466.821617][ T9555] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 466.827601][ T9555] RIP: 0033:0x7f388d5faec9 [ 466.832023][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.851635][ T9555] RSP: 002b:00007f388c020e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 466.860056][ T9555] RAX: ffffffffffffffda RBX: 00000000000004b4 RCX: 00007f388d5faec9 [ 466.868042][ T9555] RDX: 00007f388c020ef0 RSI: 0000000000000000 RDI: 00007f388d67e960 [ 466.876023][ T9555] RBP: 0000200000000c80 R08: 00007f388c020bb7 R09: 00007f388c020e40 [ 466.884003][ T9555] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 466.891990][ T9555] R13: 00007f388c020ef0 R14: 00007f388c020eb0 R15: 00002000000000c0 [ 467.167871][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2356'. [ 467.471331][ T7056] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.737297][ T9532] F2FS-fs (loop9): invalid crc value [ 467.754542][ T9532] F2FS-fs (loop9): Found nat_bits in checkpoint [ 467.803223][ T9532] F2FS-fs (loop9): Start checkpoint disabled! [ 467.810166][ T9532] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 467.860682][ T24] audit: type=1400 audit(66006.821:4357): avc: denied { ioctl } for pid=9531 comm="syz.9.2354" path="/81/file0/file0" dev="loop9" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 467.902279][ T7056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.910299][ T7056] usb 1-1: Product: syz [ 467.914501][ T7056] usb 1-1: Manufacturer: syz [ 467.919093][ T7056] usb 1-1: SerialNumber: syz [ 467.925044][ T24] audit: type=1400 audit(66006.881:4358): avc: denied { ioctl } for pid=9567 comm="syz.0.2361" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=46952 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 467.970704][ T7056] usb 1-1: can't set config #1, error -71 [ 467.975286][ T9560] device bridge1 entered promiscuous mode [ 468.075022][ T6177] attempt to access beyond end of device [ 468.075022][ T6177] loop9: rw=2049, want=45104, limit=40427 [ 468.178938][ T7056] usb 1-1: USB disconnect, device number 35 [ 468.271662][ T24] audit: type=1400 audit(66007.251:4359): avc: denied { set_context_mgr } for pid=9576 comm="syz.8.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 468.292307][ T9578] binder: BINDER_SET_CONTEXT_MGR already set [ 468.298352][ T9578] binder: 9576:9578 ioctl 4018620d 200000000040 returned -16 [ 468.306499][ T9578] binder: 9576:9578 ioctl c0306201 200000000240 returned -11 [ 468.340311][ T24] audit: type=1400 audit(66007.271:4360): avc: denied { map } for pid=9576 comm="syz.8.2365" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 468.492018][ T9581] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2363: bg 0: block 393: padding at end of block bitmap is not set [ 468.507987][ T9581] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 468.519931][ T9581] EXT4-fs (loop3): 2 truncates cleaned up [ 468.525787][ T9581] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 468.982477][ T9585] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 469.070361][ T24] audit: type=1400 audit(66007.961:4361): avc: denied { bind } for pid=9584 comm="syz.1.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 469.124675][ T9589] fuse: Bad value for 'fd' [ 469.142819][ T24] audit: type=1326 audit(66007.981:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 469.165887][ T24] audit: type=1326 audit(66007.981:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 469.262974][ T24] audit: type=1326 audit(66007.981:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 469.413901][ T9607] binfmt_misc: register: failed to install interpreter file ./file0 [ 469.572875][ T9609] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 469.726601][ T9598] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.2370: casefold flag without casefold feature [ 469.739478][ T9598] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2370: couldn't read orphan inode 15 (err -117) [ 469.751477][ T9598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 470.148001][ T9632] 9pnet_virtio: no channels available for device syz [ 470.421653][ T9] EXT4-fs error (device loop9): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 470.484189][ T9] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 470.633840][ T9] EXT4-fs (loop9): This should not happen!! Data will be lost [ 470.633840][ T9] [ 470.664066][ T9] EXT4-fs (loop9): Total free blocks count 0 [ 470.680932][ T9] EXT4-fs (loop9): Free/Dirty block details [ 470.729828][ T9] EXT4-fs (loop9): free_blocks=4293918720 [ 470.777781][ T9] EXT4-fs (loop9): dirty_blocks=16 [ 470.787864][ T9] EXT4-fs (loop9): Block reservation details [ 470.812203][ T9] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 471.520860][ T9655] fuse: Bad value for 'fd' [ 473.448623][ T9675] SELinux: Context is not valid (left unmapped). [ 473.683960][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 473.683974][ T24] audit: type=1400 audit(66012.661:4386): avc: denied { connect } for pid=9677 comm="syz.0.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 473.723104][ T9674] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.2389: casefold flag without casefold feature [ 473.736367][ T9674] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2389: couldn't read orphan inode 15 (err -117) [ 473.748687][ T9674] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 473.756030][ T24] audit: type=1400 audit(66012.731:4387): avc: denied { read write } for pid=9684 comm="syz.9.2391" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 473.789299][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 473.797773][ T24] audit: type=1400 audit(66012.761:4388): avc: denied { open } for pid=9684 comm="syz.9.2391" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 473.824074][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 473.834549][ T24] audit: type=1400 audit(66012.761:4389): avc: denied { read } for pid=9684 comm="syz.9.2391" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 473.847295][ T9691] netlink: 'syz.0.2395': attribute type 1 has an invalid length. [ 473.857760][ T24] audit: type=1400 audit(66012.761:4390): avc: denied { open } for pid=9684 comm="syz.9.2391" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 473.865260][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 473.898689][ T24] audit: type=1400 audit(66012.761:4391): avc: denied { ioctl } for pid=9684 comm="syz.9.2391" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 473.928136][ T24] audit: type=1326 audit(66012.911:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.0.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 473.951244][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 473.958691][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 473.966218][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 473.971505][ T24] audit: type=1326 audit(66012.911:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.0.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 473.996953][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.006794][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.014337][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.021903][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.023331][ T24] audit: type=1326 audit(66012.911:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.0.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 474.029946][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.060049][ T24] audit: type=1326 audit(66012.911:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.0.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff86334bec9 code=0x7ffc0000 [ 474.083215][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.090859][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.098463][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.106043][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.114004][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.123762][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.132787][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.143716][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.151486][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.159140][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.159168][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.174108][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.174125][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.174140][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.174156][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.174172][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.174190][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.174219][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.226186][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.233638][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.241089][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.248505][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.256036][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.263462][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.271224][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.278861][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.331317][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.338779][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.346448][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.384648][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.392198][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.399670][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.407228][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.415125][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.422612][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.430035][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.437499][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.444964][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.452424][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.459883][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.467597][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.543211][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 474.680975][ T1787] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 475.021631][ T1787] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 475.171007][ T1787] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 475.179256][ T1787] usb 1-1: can't read configurations, error -61 [ 475.370733][ T1787] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 475.412744][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 475.420279][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 475.427753][ T7064] hid-generic 0003:0003:0008.0010: unknown main item tag 0x0 [ 475.435414][ T9718] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 475.435798][ T7064] hid-generic 0003:0003:0008.0010: hidraw0: USB HID v0.02 Device [syz1] on syz0 [ 475.524269][ T9722] fido_id[9722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 475.650792][ T1787] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 475.758221][ T9738] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.2407: casefold flag without casefold feature [ 475.771162][ T9738] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2407: couldn't read orphan inode 15 (err -117) [ 475.783144][ T9738] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 475.817650][ T9734] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 475.840760][ T1787] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 475.841941][ T9734] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 475.849721][ T1787] usb 1-1: can't read configurations, error -61 [ 475.863363][ T1787] usb usb1-port1: attempt power cycle [ 475.870213][ T9734] F2FS-fs (loop9): invalid crc value [ 475.876120][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2409'. [ 475.887873][ T9734] F2FS-fs (loop9): Found nat_bits in checkpoint [ 475.889605][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2409'. [ 475.928665][ T9734] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 475.935846][ T9734] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 476.028902][ T9753] attempt to access beyond end of device [ 476.028902][ T9753] loop9: rw=2049, want=80056, limit=40427 [ 476.046272][ T9734] attempt to access beyond end of device [ 476.046272][ T9734] loop9: rw=2049, want=81920, limit=40427 [ 476.076982][ T9734] attempt to access beyond end of device [ 476.076982][ T9734] loop9: rw=2049, want=53248, limit=40427 [ 476.284866][ T9754] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2410: bg 0: block 393: padding at end of block bitmap is not set [ 476.301269][ T9754] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 476.313378][ T9754] EXT4-fs (loop1): 2 truncates cleaned up [ 476.319292][ T9754] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 476.638291][ T9757] attempt to access beyond end of device [ 476.638291][ T9757] loop9: rw=524288, want=78080, limit=40427 [ 476.798102][ T9757] attempt to access beyond end of device [ 476.798102][ T9757] loop9: rw=0, want=77840, limit=40427 [ 476.920524][ T9757] attempt to access beyond end of device [ 476.920524][ T9757] loop9: rw=0, want=77840, limit=40427 [ 477.029916][ T9757] attempt to access beyond end of device [ 477.029916][ T9757] loop9: rw=0, want=77840, limit=40427 [ 477.130773][ T9753] attempt to access beyond end of device [ 477.130773][ T9753] loop9: rw=2049, want=64992, limit=40427 [ 477.150005][ T9753] attempt to access beyond end of device [ 477.150005][ T9753] loop9: rw=0, want=77840, limit=40427 [ 477.161327][ T9734] attempt to access beyond end of device [ 477.161327][ T9734] loop9: rw=2049, want=65192, limit=40427 [ 477.200739][ T1787] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 477.660707][ T7047] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 477.690657][ T1787] usb 1-1: device not accepting address 38, error -71 [ 477.780704][ T7067] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 478.020638][ T7067] usb 2-1: Using ep0 maxpacket: 16 [ 478.030830][ T7047] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 478.060651][ T1787] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 478.130777][ T7047] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.139970][ T7047] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.148103][ T7047] usb 10-1: SerialNumber: syz [ 478.152967][ T7067] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 478.280715][ T1787] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 478.288970][ T1787] usb 1-1: config 0 has no interface number 0 [ 478.330753][ T7067] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.339889][ T7067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.347925][ T7067] usb 2-1: Product: syz [ 478.352157][ T7067] usb 2-1: Manufacturer: syz [ 478.356745][ T7067] usb 2-1: SerialNumber: syz [ 478.460822][ T1787] usb 1-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 478.470047][ T1787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.478351][ T1787] usb 1-1: Product: syz [ 478.482812][ T1787] usb 1-1: Manufacturer: syz [ 478.492828][ T1787] usb 1-1: SerialNumber: syz [ 478.507035][ T1787] usb 1-1: config 0 descriptor?? [ 478.517559][ T1791] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 478.525752][ T1791] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.561215][ T1787] usb-storage 1-1:0.145: USB Mass Storage device detected [ 478.569159][ T1787] usb-storage 1-1:0.145: device ignored [ 478.603653][ T9781] udc-core: couldn't find an available UDC or it's busy [ 478.610768][ T9781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 478.621455][ T7067] cdc_ncm 2-1:1.0: bind() failure [ 478.627402][ T7067] cdc_ncm 2-1:1.1: bind() failure [ 478.823182][ T1787] usb 1-1: USB disconnect, device number 39 [ 478.823613][ T7067] usb 2-1: USB disconnect, device number 29 [ 478.859573][ T9798] device wg2 entered promiscuous mode [ 478.872513][ T7047] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 478.894257][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 478.894270][ T24] audit: type=1400 audit(66017.871:4406): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 478.922423][ T24] audit: type=1400 audit(66017.901:4407): avc: denied { write } for pid=9799 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 478.945071][ T9800] xt_bpf: check failed: parse error [ 478.960492][ T24] audit: type=1400 audit(66017.901:4408): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.989855][ T24] audit: type=1400 audit(66017.901:4409): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=14580 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.014643][ T24] audit: type=1400 audit(66017.901:4410): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=14580 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.038655][ T24] audit: type=1400 audit(66017.901:4411): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=14580 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.071594][ T24] audit: type=1400 audit(66017.931:4412): avc: denied { setopt } for pid=9799 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 479.092113][ T24] audit: type=1400 audit(66017.931:4413): avc: denied { write } for pid=9799 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 479.113625][ T24] audit: type=1400 audit(66017.931:4414): avc: denied { read } for pid=9803 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.137986][ T24] audit: type=1400 audit(66017.931:4415): avc: denied { open } for pid=9803 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.281655][ T7056] usb 10-1: USB disconnect, device number 9 [ 479.288215][ T7056] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 479.400718][ T1787] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 479.640626][ T1787] usb 1-1: Using ep0 maxpacket: 16 [ 479.641260][ T9868] FAULT_INJECTION: forcing a failure. [ 479.641260][ T9868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.658980][ T9868] CPU: 1 PID: 9868 Comm: syz.1.2432 Not tainted syzkaller #0 [ 479.666464][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.676535][ T9868] Call Trace: [ 479.679853][ T9868] __dump_stack+0x21/0x24 [ 479.684197][ T9868] dump_stack_lvl+0x169/0x1d8 [ 479.688886][ T9868] ? show_regs_print_info+0x18/0x18 [ 479.694094][ T9868] ? stack_trace_save+0x98/0xe0 [ 479.698954][ T9868] ? strncpy_from_kernel_nofault+0x8a/0x1c0 [ 479.704860][ T9868] dump_stack+0x15/0x1c [ 479.709020][ T9868] should_fail+0x3c1/0x510 [ 479.713450][ T9868] should_fail_usercopy+0x1a/0x20 [ 479.718480][ T9868] _copy_from_user+0x20/0xd0 [ 479.723075][ T9868] ___sys_recvmsg+0x129/0x4f0 [ 479.727774][ T9868] ? __sys_recvmsg+0x250/0x250 [ 479.732534][ T9868] ? __fdget+0x1a1/0x230 [ 479.736770][ T9868] ? do_recvmmsg+0x15b/0x790 [ 479.741349][ T9868] do_recvmmsg+0x347/0x790 [ 479.745761][ T9868] ? __sys_recvmmsg+0x280/0x280 [ 479.750603][ T9868] ? memset+0x35/0x40 [ 479.754580][ T9868] ? bpf_trace_run2+0xb8/0x200 [ 479.759334][ T9868] ? fput_many+0x15a/0x1a0 [ 479.760744][ T1787] usb 1-1: config 3 has an invalid interface number: 38 but max is 2 [ 479.763751][ T9868] ? bpf_trace_run1+0x200/0x200 [ 479.763766][ T9868] __x64_sys_recvmmsg+0x18d/0x240 [ 479.763784][ T9868] ? do_recvmmsg+0x790/0x790 [ 479.772064][ T1787] usb 1-1: config 3 has an invalid interface number: 141 but max is 2 [ 479.776705][ T9868] ? syscall_trace_enter+0x108/0x170 [ 479.783430][ T1787] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 479.786307][ T9868] do_syscall_64+0x31/0x40 [ 479.794835][ T1787] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 479.799759][ T9868] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 479.808946][ T1787] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 479.812950][ T9868] RIP: 0033:0x7efe764deec9 [ 479.812964][ T9868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.812972][ T9868] RSP: 002b:00007efe74f05038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 479.822140][ T1787] usb 1-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 479.827553][ T9868] RAX: ffffffffffffffda RBX: 00007efe76736180 RCX: 00007efe764deec9 [ 479.838053][ T1787] usb 1-1: config 3 has no interface number 0 [ 479.842010][ T9868] RDX: 0000000000000008 RSI: 0000200000002380 RDI: 0000000000000003 [ 479.842019][ T9868] RBP: 00007efe74f05090 R08: 0000000000000000 R09: 0000000000000000 [ 479.842027][ T9868] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001 [ 479.842035][ T9868] R13: 00007efe76736218 R14: 00007efe76736180 R15: 00007fffdce03328 [ 479.925092][ T1787] usb 1-1: config 3 has no interface number 1 [ 479.931241][ T1787] usb 1-1: config 3 interface 38 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 479.942158][ T1787] usb 1-1: config 3 interface 38 altsetting 8 endpoint 0x1 has an invalid bInterval 189, changing to 7 [ 479.960095][ T1787] usb 1-1: config 3 interface 38 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 479.976162][ T1787] usb 1-1: config 3 interface 38 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 479.987153][ T1787] usb 1-1: config 3 interface 38 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 479.997848][ T1787] usb 1-1: config 3 interface 141 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 480.008622][ T1787] usb 1-1: config 3 interface 141 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 480.019680][ T1787] usb 1-1: config 3 interface 141 altsetting 7 endpoint 0x5 has an invalid bInterval 129, changing to 7 [ 480.031872][ T1787] usb 1-1: config 3 interface 141 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 480.042641][ T1787] usb 1-1: config 3 interface 141 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 480.053815][ T1787] usb 1-1: config 3 interface 141 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 480.068031][ T1787] usb 1-1: config 3 interface 141 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 480.081505][ T1787] usb 1-1: config 3 interface 38 has no altsetting 0 [ 480.088195][ T1787] usb 1-1: config 3 interface 141 has no altsetting 0 [ 480.250703][ T1787] usb 1-1: New USB device found, idVendor=0403, idProduct=8050, bcdDevice=42.fe [ 480.259862][ T1787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.268118][ T1787] usb 1-1: Product: 斪뇌蠺텼朘퉰䫭׸ए잷頗椄朓䍺着뫽㼃冧圶莊囓섈᪵탕璪܄ಖ텳諒⾘茛醙췦瑼鏥⨸껞栙Œ㳂귳쏲䝨ⳡ䇒쀺뉿⛢眆뻮┅칳᝼戛끋몺ㅻ懜瀢耑ª䦴췍̋ꎻ옴灷娄⫣ؓᠿ鷖륊 [ 480.300621][ T1787] usb 1-1: Manufacturer: Х [ 480.552567][ T9882] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 480.651240][ T1787] ftdi_sio 1-1:3.38: FTDI USB Serial Device converter detected [ 480.659486][ T1787] usb 1-1: Detected FT2232C [ 480.680741][ T1787] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 480.700753][ T1787] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 480.710932][ T1787] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 480.763807][ T1787] ftdi_sio 1-1:3.141: FTDI USB Serial Device converter detected [ 480.773806][ T1787] usb 1-1: Detected FT2232C [ 480.790826][ T1787] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 480.810781][ T1787] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 480.822142][ T1787] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 480.857810][ T1787] usb 1-1: USB disconnect, device number 40 [ 480.884998][ T1787] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 480.898233][ T1787] ftdi_sio 1-1:3.38: device disconnected [ 480.911807][ T1787] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 480.923539][ T1787] ftdi_sio 1-1:3.141: device disconnected [ 481.951075][ T1787] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 483.178217][ T9932] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 483.227009][ T9936] incfs: Can't find or create .index dir in ./file0 [ 483.234022][ T9936] incfs: mount failed -14 [ 483.430360][ T9943] xt_ecn: cannot match TCP bits for non-tcp packets [ 483.564725][ T9947] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 483.583256][ T9947] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: block 3: comm syz.1.2459: lblock 3 mapped to illegal pblock 3 (length 3) [ 483.597767][ T9947] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 483.610420][ T9947] EXT4-fs (loop1): This should not happen!! Data will be lost [ 483.610420][ T9947] [ 483.621997][ T9947] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2459: lblock 3 mapped to illegal pblock 3 (length 1) [ 483.636563][ T9947] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2459: lblock 3 mapped to illegal pblock 3 (length 1) [ 483.651309][ T9947] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2459: lblock 3 mapped to illegal pblock 3 (length 1) [ 483.666889][ T9947] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2459: lblock 3 mapped to illegal pblock 3 (length 1) [ 483.681801][ T9952] EXT4-fs error (device loop1): ext4_ext_remove_space:2924: inode #15: comm syz.1.2459: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 483.700196][ T9952] EXT4-fs error (device loop1) in ext4_setattr:5707: Corrupt filesystem [ 483.715176][ T1979] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm kworker/u4:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 483.729285][ T1979] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 483.741726][ T1979] EXT4-fs (loop1): This should not happen!! Data will be lost [ 483.741726][ T1979] [ 483.790863][ T1787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.801203][ T1787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.880707][ T1787] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 483.889856][ T1787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.898176][ T1787] usb 4-1: SerialNumber: syz [ 484.134916][ T52] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 484.260137][ T9962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9962 comm=syz.9.2463 [ 484.550727][ T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.560932][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.640700][ T52] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 484.649813][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 484.658313][ T52] usb 2-1: SerialNumber: syz [ 484.902601][ T24] kauditd_printk_skb: 83 callbacks suppressed [ 484.902615][ T24] audit: type=1400 audit(66023.881:4499): avc: denied { remount } for pid=9955 comm="syz.1.2461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 484.941463][ T52] usb 2-1: 0:2 : does not exist [ 484.961932][ T52] usb 2-1: USB disconnect, device number 30 [ 485.381447][ T1787] usb 4-1: 0:2 : does not exist [ 485.386381][ T1787] usb 4-1: unit 15 not found! [ 485.416335][ T1787] usb 4-1: USB disconnect, device number 22 [ 485.477608][ T1713] udevd[1713]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 485.538578][ T9992] netlink: 'syz.9.2471': attribute type 4 has an invalid length. [ 485.810657][ T1787] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 485.937804][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 486.290208][ T24] audit: type=1400 audit(66025.261:4500): avc: denied { read } for pid=10007 comm="syz.0.2476" path="socket:[49532]" dev="sockfs" ino=49532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 486.341297][ T24] audit: type=1400 audit(66025.321:4501): avc: denied { accept } for pid=10007 comm="syz.0.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 486.480713][ T1787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.490896][ T1787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.590992][ T1787] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.612891][ T1787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.621409][ T1787] usb 4-1: SerialNumber: syz [ 486.847035][ T24] audit: type=1326 audit(66025.821:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 486.870169][ T24] audit: type=1326 audit(66025.821:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 486.893715][ T24] audit: type=1326 audit(66025.821:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 486.917332][ T24] audit: type=1326 audit(66025.821:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 486.940700][ T24] audit: type=1326 audit(66025.821:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 486.941606][ T1787] usb 4-1: 0:2 : does not exist [ 486.963970][ T24] audit: type=1326 audit(66025.821:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 486.992417][ T24] audit: type=1326 audit(66025.821:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe764deec9 code=0x7ffc0000 [ 486.995367][ T1787] usb 4-1: USB disconnect, device number 23 [ 487.231147][ T1713] udevd[1713]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 487.267005][ T933] udevd[933]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 488.572566][T10063] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 488.585199][T10063] EXT4-fs (loop1): orphan cleanup on readonly fs [ 488.596821][T10063] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2493: bg 0: block 393: padding at end of block bitmap is not set [ 488.613204][T10063] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 488.625809][T10063] EXT4-fs (loop1): 2 truncates cleaned up [ 488.631928][T10063] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 489.327123][T10079] syz.0.2498[10079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.327182][T10079] syz.0.2498[10079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.417010][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.439035][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.447209][T10080] device bridge_slave_0 entered promiscuous mode [ 489.455038][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.464162][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.472124][T10080] device bridge_slave_1 entered promiscuous mode [ 489.558965][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.566080][T10080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.573412][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.580684][T10080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.628012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.647556][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.656327][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.660775][ T1791] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 489.678161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.695321][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.702522][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.712699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.721315][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.728363][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.752125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.760309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.778370][T10080] device veth0_vlan entered promiscuous mode [ 489.786196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.795423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 489.803910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 489.811927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 489.828463][T10080] device veth1_macvtap entered promiscuous mode [ 489.836578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 489.850093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.906631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.941801][ T24] kauditd_printk_skb: 144 callbacks suppressed [ 489.941815][ T24] audit: type=1326 audit(66028.921:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.0.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff86334bacb code=0x7ffc0000 [ 489.972543][ T24] audit: type=1326 audit(66028.951:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.0.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff86334bacb code=0x7ffc0000 [ 490.006439][T10124] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2509'. [ 490.008534][ T24] audit: type=1326 audit(66028.981:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.008565][ T24] audit: type=1326 audit(66028.981:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.008584][ T24] audit: type=1326 audit(66028.981:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.008603][ T24] audit: type=1326 audit(66028.981:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.008622][ T24] audit: type=1326 audit(66028.981:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.008648][ T24] audit: type=1326 audit(66028.981:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.008667][ T24] audit: type=1326 audit(66028.981:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.008687][ T24] audit: type=1326 audit(66028.981:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.9.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 490.191161][ T1791] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 490.236171][ T1791] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 490.246575][ T1791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.410895][ T1791] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.420070][ T1791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.428205][ T1791] usb 1-1: Product: syz [ 490.432505][ T1791] usb 1-1: Manufacturer: syz [ 490.437140][ T1791] usb 1-1: SerialNumber: syz [ 490.689632][T10087] udc-core: couldn't find an available UDC or it's busy [ 490.698907][T10087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 490.780754][ T1791] usb 1-1: 0:2 : does not exist [ 490.789658][ T1791] usb 1-1: USB disconnect, device number 41 [ 490.852575][T10148] 9pnet: Insufficient options for proto=fd [ 491.565940][T10160] loop2: [ 491.577459][T10080] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 491.585219][T10080] FAT-fs (loop7): Filesystem has been set read-only [ 491.592281][T10080] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 491.675075][T10170] FAULT_INJECTION: forcing a failure. [ 491.675075][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.688398][T10170] CPU: 0 PID: 10170 Comm: syz.3.2522 Not tainted syzkaller #0 [ 491.695875][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.705941][T10170] Call Trace: [ 491.709248][T10170] __dump_stack+0x21/0x24 [ 491.713586][T10170] dump_stack_lvl+0x169/0x1d8 [ 491.718268][T10170] ? show_regs_print_info+0x18/0x18 [ 491.723483][T10170] dump_stack+0x15/0x1c [ 491.727646][T10170] should_fail+0x3c1/0x510 [ 491.732063][T10170] should_fail_usercopy+0x1a/0x20 [ 491.737113][T10170] _copy_from_user+0x20/0xd0 [ 491.741725][T10170] strndup_user+0xb1/0x150 [ 491.746164][T10170] __se_sys_mount+0x9c/0x380 [ 491.750795][T10170] ? __x64_sys_mount+0xd0/0xd0 [ 491.755562][T10170] ? __bpf_trace_sys_enter+0x62/0x70 [ 491.760939][T10170] __x64_sys_mount+0xbf/0xd0 [ 491.765535][T10170] do_syscall_64+0x31/0x40 [ 491.769974][T10170] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 491.775869][T10170] RIP: 0033:0x7f54de7d9ec9 [ 491.780275][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.799921][T10170] RSP: 002b:00007f54dd242038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 491.808443][T10170] RAX: ffffffffffffffda RBX: 00007f54dea30fa0 RCX: 00007f54de7d9ec9 [ 491.816414][T10170] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 491.824391][T10170] RBP: 00007f54dd242090 R08: 0000200000000780 R09: 0000000000000000 [ 491.832388][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.840357][T10170] R13: 00007f54dea31038 R14: 00007f54dea30fa0 R15: 00007ffc387bc958 [ 492.090315][T10180] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 492.163801][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.183132][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.191576][T10183] device bridge_slave_0 entered promiscuous mode [ 492.203713][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.211095][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.218668][T10183] device bridge_slave_1 entered promiscuous mode [ 492.292851][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.299967][T10183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.307324][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.314401][T10183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.385361][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.397439][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.422231][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.250699][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.259153][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.291632][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.298719][ T7972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.307388][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.315914][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.324435][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.331499][ T7972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.339481][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.354435][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.382577][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.400859][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.443844][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 493.463255][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 493.495902][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.514317][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.536504][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.552940][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.561659][T10202] netlink: 'syz.9.2530': attribute type 2 has an invalid length. [ 493.570800][T10183] device veth0_vlan entered promiscuous mode [ 493.600446][T10202] netlink: 1208 bytes leftover after parsing attributes in process `syz.9.2530'. [ 493.612311][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.623893][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.655896][T10183] device veth1_macvtap entered promiscuous mode [ 493.679445][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.694573][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.722499][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.738643][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.896532][ T9] device bridge_slave_1 left promiscuous mode [ 493.902776][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.911065][ T9] device bridge_slave_0 left promiscuous mode [ 493.918194][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.931852][ T9] device veth1_macvtap left promiscuous mode [ 493.937955][ T9] device veth0_vlan left promiscuous mode [ 494.057143][T10210] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2527'. [ 494.532542][T10215] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 494.578725][T10220] FAULT_INJECTION: forcing a failure. [ 494.578725][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 494.591523][T10220] CPU: 0 PID: 10220 Comm: syz.3.2534 Not tainted syzkaller #0 [ 494.599096][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.609143][T10220] Call Trace: [ 494.612526][T10220] __dump_stack+0x21/0x24 [ 494.616863][T10220] dump_stack_lvl+0x169/0x1d8 [ 494.621538][T10220] ? show_regs_print_info+0x18/0x18 [ 494.626732][T10220] dump_stack+0x15/0x1c [ 494.630884][T10220] should_fail+0x3c1/0x510 [ 494.635323][T10220] ? __se_sys_mount+0x153/0x380 [ 494.640185][T10220] __should_failslab+0xa4/0xe0 [ 494.644960][T10220] should_failslab+0x9/0x20 [ 494.649473][T10220] kmem_cache_alloc_trace+0x3a/0x2e0 [ 494.654757][T10220] __se_sys_mount+0x153/0x380 [ 494.659438][T10220] ? __x64_sys_mount+0xd0/0xd0 [ 494.664200][T10220] ? __bpf_trace_sys_enter+0x62/0x70 [ 494.669484][T10220] __x64_sys_mount+0xbf/0xd0 [ 494.674077][T10220] do_syscall_64+0x31/0x40 [ 494.678491][T10220] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 494.684376][T10220] RIP: 0033:0x7f54de7d9ec9 [ 494.688797][T10220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.708405][T10220] RSP: 002b:00007f54dd242038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 494.716850][T10220] RAX: ffffffffffffffda RBX: 00007f54dea30fa0 RCX: 00007f54de7d9ec9 [ 494.724815][T10220] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 494.732870][T10220] RBP: 00007f54dd242090 R08: 0000200000000780 R09: 0000000000000000 [ 494.740837][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.748823][T10220] R13: 00007f54dea31038 R14: 00007f54dea30fa0 R15: 00007ffc387bc958 [ 494.762618][ T1785] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 494.824468][T10229] mip6: mip6_destopt_init_state: spi is not 0: 3540254720 [ 494.834322][T10231] tipc: Started in network mode [ 494.839291][T10231] tipc: Own node identity ce2588cf78b5, cluster identity 4711 [ 494.847038][T10231] tipc: Enabled bearer , priority 0 [ 494.864100][T10231] device syzkaller0 entered promiscuous mode [ 494.875199][T10230] tipc: Resetting bearer [ 494.887517][T10230] tipc: Disabling bearer [ 494.999187][T10225] syz.0.2535[10225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.999266][T10225] syz.0.2535[10225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.030899][ T24] kauditd_printk_skb: 176 callbacks suppressed [ 495.030913][ T24] audit: type=1326 audit(66034.011:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe764deacb code=0x7ffc0000 [ 495.654649][ T1785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.705290][ T1785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.717376][ T24] audit: type=1326 audit(66034.461:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe764deacb code=0x7ffc0000 [ 495.942801][ T24] audit: type=1326 audit(66034.551:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe764deacb code=0x7ffc0000 [ 496.115658][ T24] audit: type=1326 audit(66034.591:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe764deacb code=0x7ffc0000 [ 496.199385][ T24] audit: type=1326 audit(66034.611:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe764deacb code=0x7ffc0000 [ 496.302500][ T24] audit: type=1326 audit(66034.631:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe764deacb code=0x7ffc0000 [ 496.523395][T10257] FAULT_INJECTION: forcing a failure. [ 496.523395][T10257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.536820][T10257] CPU: 1 PID: 10257 Comm: syz.3.2545 Not tainted syzkaller #0 [ 496.544287][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.554344][T10257] Call Trace: [ 496.557653][T10257] __dump_stack+0x21/0x24 [ 496.561989][T10257] dump_stack_lvl+0x169/0x1d8 [ 496.566671][T10257] ? show_regs_print_info+0x18/0x18 [ 496.571881][T10257] dump_stack+0x15/0x1c [ 496.576033][T10257] should_fail+0x3c1/0x510 [ 496.580540][T10257] should_fail_alloc_page+0x4f/0x60 [ 496.585739][T10257] __alloc_pages_nodemask+0x109/0x5f0 [ 496.591118][T10257] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 496.596696][T10257] ? bpf_trace_run2+0x200/0x200 [ 496.601563][T10257] ? __this_cpu_preempt_check+0x13/0x20 [ 496.607475][T10257] ? tracing_record_taskinfo_sched_switch+0x2a5/0x3a0 [ 496.614329][T10257] wp_page_copy+0x1d0/0x15d0 [ 496.618924][T10257] ? __switch_to_asm+0x34/0x60 [ 496.623707][T10257] ? __schedule+0xb4f/0x1310 [ 496.628322][T10257] ? trace_spf_pte_lock+0x110/0x110 [ 496.633560][T10257] ? __kasan_check_read+0x11/0x20 [ 496.638597][T10257] ? preempt_schedule_irq+0xbb/0x110 [ 496.643891][T10257] ? preempt_schedule_notrace+0x110/0x110 [ 496.649618][T10257] do_wp_page+0x9a6/0xc80 [ 496.653973][T10257] handle_pte_fault+0x12ef/0x3750 [ 496.659011][T10257] __handle_speculative_fault+0xdd6/0x12c0 [ 496.664825][T10257] ? finish_fault+0xa70/0xa70 [ 496.669510][T10257] ? do_user_addr_fault+0x20d/0xc80 [ 496.674714][T10257] do_user_addr_fault+0x7e7/0xc80 [ 496.679762][T10257] ? switch_fpu_return+0x197/0x340 [ 496.684968][T10257] ? switch_fpu_return+0x197/0x340 [ 496.690089][T10257] ? fpu__clear_all+0x20/0x20 [ 496.694881][T10257] ? do_kern_addr_fault+0x80/0x80 [ 496.700004][T10257] ? __kasan_check_read+0x11/0x20 [ 496.705033][T10257] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 496.710674][T10257] exc_page_fault+0x5a/0xc0 [ 496.715184][T10257] ? asm_exc_page_fault+0x8/0x30 [ 496.720142][T10257] asm_exc_page_fault+0x1e/0x30 [ 496.724992][T10257] RIP: 0033:0x7f54de69bcb0 [ 496.729419][T10257] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 496.749033][T10257] RSP: 002b:00007f54dd1ff4a0 EFLAGS: 00010202 [ 496.755106][T10257] RAX: 0000000000005005 RBX: 00007f54dd1ff540 RCX: 0000000000000013 [ 496.763173][T10257] RDX: 00000000000017ff RSI: 0000000000000400 RDI: 00007f54dd1ff5e0 [ 496.771147][T10257] RBP: 0000000000000014 R08: 00007f54d4de0000 R09: 0000000000000004 [ 496.779293][T10257] R10: 0000200000000c82 R11: 00000000000004b2 R12: 0000000000000301 [ 496.787269][T10257] R13: 00007f54de878b80 R14: 0000000000000013 R15: 00007f54dd1ff5e0 [ 496.795597][T10257] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 497.055403][T10260] FAULT_INJECTION: forcing a failure. [ 497.055403][T10260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.092621][T10257] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2545: bg 0: block 393: padding at end of block bitmap is not set [ 497.108491][T10257] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 497.119398][T10257] EXT4-fs (loop3): 2 truncates cleaned up [ 497.125240][T10257] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 497.181364][T10260] CPU: 0 PID: 10260 Comm: syz.0.2546 Not tainted syzkaller #0 [ 497.188862][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.199007][T10260] Call Trace: [ 497.202310][T10260] __dump_stack+0x21/0x24 [ 497.206642][T10260] dump_stack_lvl+0x169/0x1d8 [ 497.211514][T10260] ? show_regs_print_info+0x18/0x18 [ 497.216739][T10260] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 497.222817][T10260] dump_stack+0x15/0x1c [ 497.226973][T10260] should_fail+0x3c1/0x510 [ 497.231393][T10260] should_fail_usercopy+0x1a/0x20 [ 497.236419][T10260] _copy_from_user+0x20/0xd0 [ 497.241014][T10260] __se_sys_mount+0x176/0x380 [ 497.245722][T10260] ? __x64_sys_mount+0xd0/0xd0 [ 497.250480][T10260] ? __bpf_trace_sys_enter+0x62/0x70 [ 497.255798][T10260] __x64_sys_mount+0xbf/0xd0 [ 497.260390][T10260] do_syscall_64+0x31/0x40 [ 497.264807][T10260] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 497.270711][T10260] RIP: 0033:0x7ff86334bec9 [ 497.275126][T10260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.294817][T10260] RSP: 002b:00007ff861db4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 497.303226][T10260] RAX: ffffffffffffffda RBX: 00007ff8635a2fa0 RCX: 00007ff86334bec9 [ 497.311198][T10260] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 497.319162][T10260] RBP: 00007ff861db4090 R08: 0000200000000780 R09: 0000000000000000 [ 497.327129][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.335094][T10260] R13: 00007ff8635a3038 R14: 00007ff8635a2fa0 R15: 00007fff6d3a5128 [ 497.371058][ T24] audit: type=1326 audit(66036.331:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe764deacb code=0x7ffc0000 [ 497.395043][ T1785] usb 2-1: string descriptor 0 read error: -71 [ 497.470976][ T1785] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 497.482068][ T1785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 497.490085][T10268] binder: 10266:10268 ioctl c0046209 9999999999999999 returned -22 [ 497.514690][ T1785] usb 2-1: can't set config #1, error -71 [ 497.521870][ T1785] usb 2-1: USB disconnect, device number 31 [ 497.553458][ T24] audit: type=1326 audit(66036.531:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.9.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 497.577331][ T24] audit: type=1326 audit(66036.561:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.9.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 497.602081][T10267] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 497.611292][ T24] audit: type=1326 audit(66036.561:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.9.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5274202ec9 code=0x7ffc0000 [ 497.692866][T10263] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 497.703043][T10267] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 497.723461][ T9205] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 497.741907][T10274] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 497.751295][T10263] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 497.781558][T10274] EXT4-fs (loop9): 1 truncate cleaned up [ 497.787258][T10274] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue [ 497.797405][ T9205] FAT-fs (loop3): Filesystem has been set read-only [ 497.822915][T10263] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.2547: mark_inode_dirty error [ 497.850115][ T9205] ------------[ cut here ]------------ [ 497.855805][T10263] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 497.864490][ T9205] kernel BUG at fs/namei.c:2786! [ 497.869485][ T9205] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 497.875554][ T9205] CPU: 0 PID: 9205 Comm: syz-executor Not tainted syzkaller #0 [ 497.883091][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.893153][ T9205] RIP: 0010:may_delete+0x7b1/0x7c0 [ 497.898256][ T9205] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 10 24 f5 ff e9 d0 fd ff ff e8 66 34 bb ff 0f 0b e8 5f 34 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 497.917852][ T9205] RSP: 0018:ffffc9000153fca0 EFLAGS: 00010293 [ 497.923913][ T9205] RAX: ffffffff81a87141 RBX: ffff8881090eb880 RCX: ffff8881001e93c0 [ 497.931879][ T9205] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 497.939856][ T9205] RBP: ffffc9000153fd20 R08: dffffc0000000000 R09: ffffed102172ef21 [ 497.947824][ T9205] R10: ffffed102172ef21 R11: 1ffff1102172ef20 R12: ffff88811a5b4c40 [ 497.955791][ T9205] R13: 1ffff1102121d710 R14: ffff8881090eb898 R15: ffff88812cfe3030 [ 497.963759][ T9205] FS: 0000555577cd8500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 497.972687][ T9205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.979267][ T9205] CR2: ffffffffdfa50000 CR3: 0000000121986000 CR4: 00000000003506b0 [ 497.987235][ T9205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 497.995208][ T9205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.003194][ T9205] Call Trace: [ 498.006486][ T9205] ? __kasan_check_write+0x14/0x20 [ 498.011591][ T9205] vfs_rmdir+0x2c/0x3e0 [ 498.015757][ T9205] incfs_kill_sb+0xfe/0x210 [ 498.020255][ T9205] deactivate_locked_super+0xa0/0x100 [ 498.025630][ T9205] deactivate_super+0xaf/0xe0 [ 498.030318][ T9205] cleanup_mnt+0x446/0x500 [ 498.034754][ T9205] __cleanup_mnt+0x19/0x20 [ 498.039270][ T9205] task_work_run+0x127/0x190 [ 498.043876][ T9205] exit_to_user_mode_loop+0xcb/0xe0 [ 498.049074][ T9205] exit_to_user_mode_prepare+0x76/0xa0 [ 498.054686][ T9205] syscall_exit_to_user_mode+0x1d/0x40 [ 498.060330][ T9205] do_syscall_64+0x3d/0x40 [ 498.064749][ T9205] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 498.070647][ T9205] RIP: 0033:0x7f54de7db1f7 [ 498.075067][ T9205] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 498.094675][ T9205] RSP: 002b:00007ffc387baaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 498.103096][ T9205] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f54de7db1f7 [ 498.111323][ T9205] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc387babb0 [ 498.119291][ T9205] RBP: 00007ffc387babb0 R08: 0000000000000000 R09: 0000000000000000 [ 498.127261][ T9205] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc387bbca0 [ 498.135234][ T9205] R13: 00007f54de85cd7d R14: 0000555577cd84a8 R15: 00007ffc387bcd70 [ 498.143221][ T9205] Modules linked in: [ 498.149978][ T9205] ---[ end trace e3b2e10b5e167cbd ]--- [ 498.155561][ T9205] RIP: 0010:may_delete+0x7b1/0x7c0 [ 498.157394][T10263] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.2547: mark_inode_dirty error [ 498.161000][ T9205] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 10 24 f5 ff e9 d0 fd ff ff e8 66 34 bb ff 0f 0b e8 5f 34 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 498.180078][T10285] SELinux: Context unconfined is not valid (left unmapped). [ 498.200009][ T9205] RSP: 0018:ffffc9000153fca0 EFLAGS: 00010293 [ 498.206549][ T9205] RAX: ffffffff81a87141 RBX: ffff8881090eb880 RCX: ffff8881001e93c0 [ 498.214906][ T9205] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 498.222974][ T9205] RBP: ffffc9000153fd20 R08: dffffc0000000000 R09: ffffed102172ef21 [ 498.231005][ T9205] R10: ffffed102172ef21 R11: 1ffff1102172ef20 R12: ffff88811a5b4c40 [ 498.238998][ T9205] R13: 1ffff1102121d710 R14: ffff8881090eb898 R15: ffff88812cfe3030 [ 498.247228][ T9205] FS: 0000555577cd8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 498.259597][ T9205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.266543][ T9205] CR2: ffffffffdfa50000 CR3: 0000000121986000 CR4: 00000000003506a0 [ 498.274715][ T9205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.282739][ T9205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.290771][ T9205] Kernel panic - not syncing: Fatal exception [ 498.297057][ T9205] Kernel Offset: disabled [ 498.301390][ T9205] Rebooting in 86400 seconds..