last executing test programs: 8.004372377s ago: executing program 3 (id=35): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c0, &(0x7f0000000c40)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sigaltstack(&(0x7f00000052c0)={0x0, 0x80000000}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6ba0fecf9b1fae34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='sched_switch\x00', r7}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) 6.714591184s ago: executing program 3 (id=40): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x4000019) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000080), &(0x7f0000000440)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 6.63117637s ago: executing program 3 (id=42): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r3, r10, 0x0) write$FUSE_GETXATTR(r11, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x60fd}}, 0x18) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 6.557923305s ago: executing program 0 (id=43): io_setup(0xffff, &(0x7f0000000080)=0x0) io_setup(0x8, &(0x7f00000002c0)) (async) io_getevents(r0, 0x7, 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) 6.430739975s ago: executing program 3 (id=44): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r1, &(0x7f00000002c0)=""/189, 0xbd, 0x2020, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x80}}, 0x48800) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) 5.547214702s ago: executing program 0 (id=48): r0 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x0, 0x4ed, &(0x7f0000001140)="$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") open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r1 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) write(r1, 0x0, 0x80fe) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0xffffffff, 0x4, @private0, @mcast2, 0x7800, 0x20, 0x80000000, 0xd}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xdc, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x4}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x100}, 0x4000000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r8, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r8, 0x26, &(0x7f0000000080)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.503410305s ago: executing program 3 (id=49): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000080)='$#}&]\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bff671000000000007020000f8ffffffb7c66cd8019b55e921016cfe518674b8c9a004007b1d0000008500400003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@noacl}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) 5.30288459s ago: executing program 0 (id=50): mkdir(&(0x7f0000000080)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) accept4(r2, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x80, 0x80800) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xfffffffffffffff5}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_IOCTL(r2, &(0x7f0000000940)={0x20, 0x0, 0x0, {0x81, 0x0, 0x9, 0xf}}, 0x20) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0xd, 0x2, 0xfbb6, 0x4e3, 0x0, 0x0, 0x20, 0xab83}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000007000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003b70237a31ace8e67028835964f5e0e8"], 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f00000001c0), &(0x7f0000000180)=@tcp=r5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000500000000020000000000000802000000000000000000000a0300000000005f1861"], 0x0, 0x52}, 0x28) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r4, &(0x7f0000000080), 0x20000000}, 0x20) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x20, 0x83a4}, {0x6, 0x7f}]}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'pim6reg0\x00', &(0x7f0000000280)=@ethtool_rx_ntuple={0x35, {0x3, @tcp_ip4_spec={@local, @broadcast, 0x4e21, 0x4e20, 0x5}, @tcp_ip4_spec={@empty, @private=0xa010101, 0x4e23, 0x4e22, 0x3}, 0x5, 0x98, 0x0, 0x8, 0xfffffffffffffffe}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1, 0x0) 5.183159939s ago: executing program 0 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000cc0)={0x0, "835f5c46bfc289f3ec19efa6bc2dbf17"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468315f746f5f626174616476006800038064000380100001800800010002000000040003"], 0x94}}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000cc0)={0x0, "835f5c46bfc289f3ec19efa6bc2dbf17"}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468315f746f5f626174616476006800038064000380100001800800010002000000040003"], 0x94}}, 0x804) (async) 5.181340609s ago: executing program 0 (id=52): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)}}], 0x2, 0x2400c042) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=ANY=[@ANYBLOB="1800000004000000993300000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0240000005000000000000000000008000"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x34, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000200)={0x40, 0xa, 0x27, "d88bd6b8dac0e7191dd166e35f30b3af92184862efcb1aa95ab609a27d8efa23b4a9ebe79bb3dc"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.935374988s ago: executing program 1 (id=58): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) timer_create(0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (rerun: 64) fcntl$setlease(r2, 0x400, 0x2) 4.900867241s ago: executing program 1 (id=59): r0 = syz_io_uring_setup(0x1eae, &(0x7f0000000480)={0x0, 0x9d2d, 0x1, 0x2, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000001080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1682, 0x0, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000ec1d8b97328189f019b5c513f6bcc84595468ec1dd9324589d637e2ddc598230df59fbd7518a36ed27ab18d6e2bc8ac4618da2400d89334bfe46b27d67b6c7f27528317f487d0b473889c5ce73134adc3e13"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000c00150000000020ffff0000"], 0xc4}}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r7, 0x20, 0x0, 0x8000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) fdatasync(r8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x0, 0x33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) close(r2) 4.387857779s ago: executing program 1 (id=65): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x240040c4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) ppoll(&(0x7f0000000040)=[{r5, 0x2046}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1, 0x8, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}, {@bh}]}, 0x1, 0x527, &(0x7f0000000280)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000005c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r8, &(0x7f0000000080)="cc", 0x1, 0x200980) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0x80000001, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000a80)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @local}, 0x2, 0x3, 0x0, 0x2}}, 0xffffffffffffffc0, &(0x7f0000000280)=[{&(0x7f0000000b00)="2d99610dd6e7ee304e45a15c46aeb205b7b7ee555c797c74ca7d8545db3c8279ca94116e48ac68339551e84911ebcd4bae9282aee4d59fb8157db8355d1ec5de9a825fad7a65ff407de4f2cd441523562cb4a5c8d88b94d5b1c64626a2781c613378eb02d7af64cc647529d5ad5b75c4df87f6affbe9e08b990eac846b5ad5c89c42a7b85e99eb5e9c135702f4f68ba69c", 0x91}, {&(0x7f0000000000)="62be7ccb5bc4586d997cf94c8e289f2fbe01060ebf79cf29279c355016cd67d10c5e5f5d6a5f747d059982c2571185feed519c2b5c88", 0x36}, {&(0x7f0000000080)="099e2f0347dea83e7c19e68ae309860e60c959f7c923f0c7c7", 0x19}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2f8}, 0x8010) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="3b9eccc918ce8c", 0x7}, {&(0x7f0000000880)="18a4f0b78971028f5a7515a187860deadc71d63a6914248b041c38a414177f07271a77a63cb415e8fac179d1d3", 0x2d}], 0x2}, 0x20000044) 3.643209986s ago: executing program 4 (id=70): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000001700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000001c0)=']', 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000003540)=""/4096, &(0x7f0000000180)=0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@grpjquota}, {@grpjquota}, {@noquota}, {@init_itable}, {@noload}, {@nodiscard}]}, 0x0, 0x50c, &(0x7f0000000200)="$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") writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) userfaultfd(0x80001) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 3.44452036s ago: executing program 1 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) (async) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x2, 0x40) (async, rerun: 64) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) (async, rerun: 64) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000040)={[0xb]}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c68d4095f639c7ddaa0d10b9b3f0d1f20bd1b72012aaaa70b845455ec52e27fdb0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r4, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f0000000500)=[&(0x7f0000000340)='syzkaller\x00', &(0x7f00000003c0)='#\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\xff\xff'], 0x0, 0x3b1cc4c4}}, 0x30) r6 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000680)={{{@in=@local, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x14, 0x2, 0x10, 0x80, 0x3c, r4, r6}, {0x100, 0xb7d, 0x6, 0xffffffffffffff01, 0x3, 0x1000, 0x3ff, 0x4}, {0xffffffffffffffff, 0x8, 0x2, 0x1}, 0x7, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in6=@mcast2, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3506, 0x1, 0x2, 0x5, 0x0, 0x6, 0x80}}, 0xe8) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x1000, &(0x7f0000000580)={'trans=xen,', {[{@cache_none}, {@cache_mmap}, {@version_u}, {@version_u}], [{@subj_role={'subj_role', 0x3d, 'sched_switch\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x36, 0x37, 0x30, 0x62, 0x37, 0x57, 0x30], 0x2d, [0x34, 0x0, 0x37, 0x30], 0x2d, [0x32, 0xdf09e2b8127e043c, 0x50, 0x61], 0x2d, [0x31, 0x0, 0x38, 0x62], 0x2d, [0x63, 0x30, 0x62, 0x31, 0x33, 0x34, 0x63, 0x66]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r6}}]}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000c060101000000020073007a32000900020073797a3000000000fa4edbd2e5cf7f9670980e5f2e2e1c231bda4c255ff42ac9d41e21"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000011) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00e4ff00000000000000000000042000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="180042b9e83eb560049900000000000d000000030018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x400000000000000) (rerun: 32) 1.3328054s ago: executing program 3 (id=72): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002040)={0x1, 0x0, [{0x40000104, 0x0, 0x7}]}) syz_usb_connect(0x1, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) 1.180173391s ago: executing program 4 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/slabinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000f40)=[{r3, 0x1006}], 0x1, 0x0, 0x0, 0x0) pwritev(r3, &(0x7f00000004c0)=[{}, {&(0x7f0000000280)="f38dfadb2ed492c104a5efe3146edb281162ec0105ec849697d2e1550b66a6be9eb789ae579740b5e6c9fdf95310bafbb72d6d01005bfa5ba1629d297d36277025", 0x41}, {&(0x7f0000000140)="e9", 0x1}, {&(0x7f0000000300)="4948493e12dc384ebf06e5ffcade3090aae9ce43138b83f6cf8b3ebf2e16ab3597bcda0c5085a95024f7fb33768a670e3005f5a1b57f5fe026affb2e04f90cc3b12308b4337ac3420ef9de6e88", 0x4d}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000000380)="26e773d2650a42a15efc2e9c0f5909a710c8e66fa847adbcae485ea8509482f0a4507b", 0x23}, {&(0x7f00000003c0)="15af64e900414198f38e8c1d755a71d80403f11c5381430aec515583c598d604f0c8ec64a47e32612784c05a0f45ab8718dc2ecd21210583ac6e45cb550ca062f6e5414598de1eab71d179867438d38fb18eede0dc8b077f098641973eb87db53aac571cc4bad153e7d845c14a85b339fe3308857c98bc08c870c4e7d7397ef3a4af0d180d55e9ae2aabe60c18ea0240a9", 0x91}, {&(0x7f0000000480)="83a47683b8a654cca3f098b069382b15b3fc9351ae46d8152b5d51a896934fcf1eaee59610cbf0bcc7e9362d8449", 0x2e}], 0x8, 0x1, 0x5) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0xe42, 0x1ff) 1.107476736s ago: executing program 1 (id=75): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x1ffffffffffffebe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540100001900010000000000000000001d010000080005000480000015000400010000800202000031171e44b2b50e8f040000001e0106"], 0x154}}, 0x8044) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5}, 0x10) geteuid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.size\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r1, 0x4, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x300}, 0x8000, 0x0, 0x0, 0x300}}) 1.020815153s ago: executing program 4 (id=77): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@nogrpid}, {@bh}, {@barrier}]}, 0x0, 0x52c, &(0x7f0000000640)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off}]}) mlock2(&(0x7f000027b000/0x4000)=nil, 0x4000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000180)='./file1\x00', 0x14977e, 0x0) 1.017532543s ago: executing program 1 (id=78): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@code={0xa, 0x54, {"36664c0f3a16cb0df047f650000f35c422b500ec430f001ef266420f0179000f35c46279bf53ff66baf80cb89a571d8cef66bafc0c66b8970066efb8010000000f01d9"}}], 0x54}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc9ffb}]}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) lstat(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000680)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000240)={{0x8, 0x26e0b4d7}, {0x5, 0x6}, 0x3, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x80, 0xa, 0x0, 0x7ffffffffffffffe], 0x60000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000480)={[0x1000, 0x8, 0x5c7, 0x8, 0x1, 0x1, 0x2, 0x7, 0x28000, 0x8, 0x9, 0x1f, 0x1a76, 0x7ff, 0xf, 0x35, 0x2, 0x6, 0xd5, 0x3, 0x18000, 0x1, 0xff, 0x7, 0x4, 0xb, 0xde, 0x8000, 0x400, 0x1, 0x8, 0x3, 0x10, 0x9, 0x5, 0x5, 0x5, 0x3, 0xc0, 0x4, 0x8000, 0x8001, 0xe3, 0x6, 0x7, 0x2, 0x7ff, 0x10001, 0xb, 0x1, 0x6, 0x7, 0x9, 0x9, 0x2, 0x1, 0x7ff, 0xb54c, 0x0, 0x5, 0x4c2873b, 0x1, 0x8, 0x9, 0x3, 0x6, 0x6, 0x8, 0x1, 0x9, 0x57, 0x2, 0x2, 0x3, 0x9f00, 0x7, 0x8000, 0x80000000, 0xf1e, 0x7ff, 0x5, 0xc18, 0x5, 0xd, 0x14dc, 0xd63, 0x4a, 0xfffffffd, 0x6000000, 0x3, 0x101, 0xfff, 0x2, 0x1ff, 0xe55e, 0x9, 0x6, 0x7, 0x2, 0xfffffff7, 0x9, 0x4, 0x13b, 0xfff, 0x2, 0x6, 0x1, 0xd32, 0x5, 0x7ff, 0xa0f9, 0x129, 0xfff, 0x6, 0x4, 0xfffffffa, 0x2, 0x1, 0x4, 0x724, 0x9, 0x7, 0xfa, 0x6, 0xfffffff9, 0x20000000, 0xd0, 0x6, 0x5, 0x6, 0x7f, 0x4, 0x7, 0x5, 0x73, 0x8, 0x7, 0x1, 0x7, 0x1, 0x5, 0x2b, 0x6, 0xa, 0x7, 0x8001, 0x2, 0x0, 0xffff6c47, 0x9, 0x3, 0xd16f, 0x7, 0x9dbf, 0xca79, 0x7ff, 0x7fffffff, 0x401, 0x800, 0xfffffff9, 0x7fffffff, 0x5, 0x4, 0x1, 0x2, 0x3, 0xc15, 0x7c, 0x9, 0x3, 0x3, 0x3, 0x6, 0x80, 0xffffa210, 0x3, 0x80000001, 0xfffffff8, 0x5, 0x2, 0x8001, 0x5, 0x3, 0xa, 0x5, 0x800, 0x400, 0x4, 0x6, 0xfffffff8, 0x2, 0xe1, 0x1e61, 0xa0e1, 0x8, 0x3, 0x0, 0x9, 0x7fff, 0x401, 0x1, 0x7ff, 0x2, 0x800, 0x101, 0x2, 0x4, 0xe, 0x8, 0xfffffff7, 0xf8, 0x6, 0x800, 0xd8, 0x77, 0x1, 0x3, 0x5e964203, 0xdd, 0x4ea2, 0x4, 0x8d06, 0x80000001, 0x800, 0x1000, 0x4, 0x2, 0xf615814b, 0x45c1, 0x7f, 0x0, 0x5840212e, 0x6, 0x101, 0x9d16, 0xe, 0xf, 0x7, 0x9, 0xffff, 0xa, 0x9, 0x7ff, 0x4be, 0xfffffff7, 0x7, 0x1, 0x6, 0x7, 0x400, 0x1, 0x2, 0xb, 0x5, 0x750ce90f, 0x3, 0x856f, 0x0, 0x8, 0x9, 0x543, 0xb4e, 0x40, 0x80, 0x8, 0xfffffffc, 0xfffffff7, 0x6, 0xffffff4d, 0xd53d, 0xc, 0x0, 0x10, 0x71, 0x38f, 0x5, 0x100, 0x4, 0x9, 0x21f, 0x3, 0xd7f, 0x5, 0xd8a, 0x2, 0xbff, 0x5, 0x166, 0x8, 0x8000, 0x8, 0x1, 0x7fffffff, 0x8, 0x9, 0x80000000, 0x6f243166, 0x7, 0xa, 0x3, 0x3, 0x1, 0x6, 0x8, 0x1e, 0x3, 0xbb6f, 0x5, 0x7f, 0xfff, 0x2, 0x5, 0x4, 0x7, 0x3, 0x4, 0x5, 0x1, 0xfffffffc, 0xffff, 0x3, 0x8, 0x3, 0x8, 0x1, 0x2, 0x1, 0x7, 0xd, 0x4, 0x7, 0x10000001, 0x5, 0x5, 0x101, 0x0, 0x81, 0x4, 0x2, 0x6, 0x47, 0x2, 0x5, 0x1, 0x8, 0x9, 0x6, 0x1, 0x0, 0xb, 0x3, 0x10, 0x5, 0x9, 0x7fff, 0xffffffff, 0x5, 0xfffffff9, 0x7fff, 0x1, 0xc, 0xf, 0x1061d5af, 0x401, 0x5, 0x3, 0x6, 0x0, 0x9, 0x9, 0x2, 0x1, 0x7, 0x0, 0x9, 0x0, 0xc, 0x0, 0xf, 0x2, 0x1, 0x0, 0x3, 0x1a4e, 0x98a, 0xfffffffe, 0x3d, 0x2000, 0x401, 0xfffff801, 0xfffffff9, 0xfe3, 0x3, 0xc, 0x10000, 0x2, 0x2, 0x0, 0x7, 0x78, 0x1, 0x100, 0xfda, 0x9, 0x200, 0x7, 0x1000, 0x2, 0xfff, 0x9, 0x7, 0x2a, 0xfffffff9, 0x2000000, 0xffff53f7, 0x9, 0xf0a6, 0x6, 0x0, 0x8, 0x2, 0xff, 0x0, 0x3340, 0xfffffff9, 0xffffff21, 0x6, 0x8, 0x91ac, 0x3, 0x5, 0x2, 0x3, 0x80000000, 0x70f450b2, 0x10001, 0xffff, 0x3ff, 0x3, 0x7, 0x2, 0x9, 0x7, 0xffffffff, 0x100, 0x6, 0x3, 0x7, 0x7, 0x0, 0x2, 0xf, 0x0, 0xfffff3d4, 0x4, 0x1, 0xfffffffc, 0xa, 0x6, 0x9, 0x3, 0xff, 0x200000, 0xb, 0x1ff, 0x7, 0xb, 0xfffffffc, 0x3, 0x5, 0x7fffffff, 0x3, 0x7, 0x1000, 0x5, 0x6, 0x6, 0xffff5ab0, 0x7, 0x1, 0x5, 0x80, 0x8, 0x4, 0x1, 0x4, 0x7, 0x4, 0xffffe096, 0x8, 0x1, 0xe0, 0x5, 0x1ff, 0x2, 0x2, 0x3, 0x2, 0x6, 0x6, 0x2, 0x41d31c71, 0x5, 0x9, 0x706, 0x68, 0x9e4, 0x7fff, 0x5, 0x80000001, 0x80000000, 0x9, 0x215, 0x3, 0x3, 0x1cc, 0x5, 0x9, 0xb000, 0x7ff, 0x370, 0x0, 0xc3, 0x10001, 0xfff, 0x9, 0x80000001, 0x1, 0x3db7, 0xb, 0x4, 0xa4b1, 0x5, 0x6, 0xff1b, 0x9, 0x9, 0x0, 0x4, 0x0, 0xe4, 0x1, 0x9, 0x3, 0x8, 0x1, 0xfff, 0xe385, 0x8, 0x1, 0x6, 0x4, 0x8, 0x1, 0xd23, 0x7fffffff, 0x100, 0x4, 0xfff, 0x8000, 0x1, 0x1, 0x1, 0xfffffffc, 0x2, 0x7, 0x401, 0x5, 0x2, 0x167, 0xffffffc0, 0x5, 0xa2a, 0x5, 0x100, 0xfffffffb, 0x4, 0x9, 0xa000, 0x3, 0x0, 0x2, 0x1, 0xac, 0x2, 0xb, 0x3, 0x8, 0x3, 0x1, 0x5, 0x5, 0x5, 0x9000000, 0x5, 0x2, 0xfffffffd, 0x2, 0x2, 0x0, 0x80000000, 0x7fff, 0x200, 0x8, 0x200, 0x2, 0x9, 0x8, 0xa, 0x7, 0xe, 0x8, 0x7, 0x9d, 0x0, 0x0, 0x5, 0x6, 0x80000001, 0x88d, 0x953b, 0x9, 0x84, 0x9, 0x2, 0x7, 0x5, 0x1, 0x8001, 0x4, 0x5d9, 0xf455, 0xb981, 0x7, 0x1, 0x3, 0x1, 0x7, 0x1, 0x6, 0x10, 0x1, 0x9, 0x2, 0x2, 0x8, 0x2, 0xaa9, 0x9, 0x4, 0x8, 0x3, 0x0, 0xffffffff, 0x2, 0x2, 0xff, 0x5, 0x8, 0x2, 0x8001, 0x3ff, 0x5, 0x1, 0x6, 0x4, 0x4, 0x7, 0xa0, 0x7f, 0x2, 0x7fcd, 0x21, 0xf7e7, 0xb, 0xc48a, 0x4, 0xda, 0xd, 0x4, 0x80, 0x6, 0xd8, 0xffff, 0xbb8b, 0x100, 0xdc28a1a, 0x0, 0x4, 0xfffffffc, 0x101, 0x7f, 0x8, 0x3, 0x0, 0x1, 0xd, 0x401, 0x81, 0x7, 0xea8, 0x9, 0x696, 0x5, 0x5, 0xd, 0xffffffff, 0xe, 0x2, 0x1, 0x8, 0x6, 0x80, 0xfff, 0x2, 0x3ff, 0x9, 0x7, 0x0, 0x40, 0x9, 0x7, 0x5, 0x8, 0x9, 0x100, 0x1, 0xfffff801, 0x6, 0xff, 0x6, 0x6, 0x0, 0x5, 0x2, 0x583c, 0xfffffffd, 0x691d, 0xffffffff, 0x100, 0x1, 0x400, 0x5, 0x7, 0x6, 0x4, 0x8, 0xa8, 0x7, 0xb7, 0xfffffffb, 0x6, 0x1ff, 0x2, 0xfffffff9, 0x0, 0x10000, 0x10, 0x28000, 0x800, 0x2, 0x8, 0x7, 0xe, 0x2, 0x7ffe, 0x5, 0x200, 0x38, 0x6, 0x3, 0x6, 0x7, 0x4, 0x7ff, 0x3, 0x8, 0x5, 0x2, 0xfff, 0x3, 0x2, 0x3c5c, 0x2, 0x1, 0xbe, 0x9, 0x0, 0x6, 0x5, 0x4, 0x3, 0x9, 0x6, 0x1e, 0xf9, 0x8001, 0x3ff, 0x4, 0x10000, 0xfff, 0x8, 0x4, 0x6, 0x7, 0x7, 0x8, 0x1ff, 0x3, 0x7, 0x71, 0x400, 0x40, 0x552e, 0x8, 0x5, 0x2, 0x9, 0x1, 0x4, 0x100, 0x1, 0x8, 0x2cd, 0x2, 0x3, 0x10, 0x7, 0x4, 0x9, 0x0, 0x8, 0x7, 0xc, 0x7, 0x2, 0x7, 0xff, 0x7, 0x4, 0xe, 0xd, 0xff, 0x6, 0xd1, 0xd, 0xdb11, 0x3, 0x4, 0x3, 0x1800, 0x4, 0x10000, 0x8, 0xffffffff, 0xa, 0x7fff, 0x7, 0x4, 0x9, 0x2, 0x70, 0x1, 0x9, 0x2, 0x0, 0x1, 0x2, 0x40, 0x0, 0xaa0, 0x6, 0x6, 0x10000, 0x9d, 0xa0, 0x10, 0x7, 0x8001, 0x2, 0x0, 0x7, 0x5479, 0x578, 0xa, 0x4, 0xcd4, 0x1ff, 0x6, 0x4, 0x3a31d1a9, 0x3ff, 0x5, 0x5, 0x3, 0x3, 0x6, 0x7, 0x1, 0x0, 0x10, 0x3, 0x7, 0x4, 0x6999, 0xfffffffd, 0x0, 0x811, 0x9, 0x7, 0x80000001, 0x1, 0x2, 0xffffffff, 0x9, 0x6, 0x7fffffff, 0x5, 0x6, 0x7, 0x3, 0xfffffc01, 0x2928c3a8, 0x4, 0x8, 0x648a, 0x101, 0x6, 0x4, 0x1, 0xf1f, 0x0, 0x7, 0x0, 0x80000001, 0x8, 0x8, 0x7, 0x9, 0x8, 0xb, 0x0, 0x0, 0x3, 0xfff, 0x9, 0x9, 0x6, 0x0, 0x8c, 0x8, 0x6, 0x1ff, 0x9, 0x2, 0x401, 0x1, 0x1, 0x7f, 0x9, 0x8, 0x5, 0x10000, 0xfffff18c, 0x1, 0x10000, 0x0, 0x3, 0x5, 0x7, 0x1, 0x401, 0x3ff, 0xff, 0x7, 0xffffffff, 0x8, 0xfffffff8, 0xa7, 0x2, 0x7, 0x0, 0x3, 0x1, 0x273, 0x2360, 0x2, 0x8000, 0x6, 0xfffffffb, 0xfffffffa, 0xa0dc, 0x3d, 0x5, 0x4, 0x70, 0x9, 0x8, 0x7fffffff, 0x2, 0xffffffff, 0x6, 0x10, 0xb2, 0x2, 0x5, 0x1ff, 0x77, 0x19b58842, 0x5, 0x8, 0x10001, 0xffffffdc, 0x8000, 0x6, 0xee3, 0xd, 0x7, 0x2, 0x9, 0x8001, 0x7, 0x2, 0xe0]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x2, 0x2, 0xc, 0x7, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) syz_usb_control_io(r6, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x10000, {0xa, 0x0, 0x18}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x88}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 998.078814ms ago: executing program 2 (id=79): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) sched_setscheduler(r0, 0xe, &(0x7f0000000100)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 981.135846ms ago: executing program 2 (id=80): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000020000000000000000000000850000001700000085000000050000009500000000000000053145b220525c52e1e3ea73"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) syz_clone3(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x5c4}], 0x1}}], 0x2, 0x4004040) 964.216337ms ago: executing program 4 (id=81): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0x2, 0x7fffffff, 0x500000, 0x8001, 0x0}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r2, r3, 0x0, 0x4, &(0x7f0000000380)='/{\\\x00'}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0xf, 0xa2, [@remote, @remote, @broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x5, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r6, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 838.902277ms ago: executing program 4 (id=82): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x803}}]}, 0xfb, 0x46f, &(0x7f0000000480)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 764.951922ms ago: executing program 4 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x0, 0x8000, 0x7, 0x4, 0x1, 0x0, 0x80000001, 0x81}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40080e0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='hugetlb'}, {@subsystem='cpuacct'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}]}) 162.066848ms ago: executing program 0 (id=84): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) lseek(r0, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000ea000200000000000000c35de6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xc2000, 0x0) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) 48.970966ms ago: executing program 2 (id=85): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') (async) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/53, 0x35) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000200)={0x3, 0xa, 0x80, 0x9, 0x4, "b7e295e03f609a00c647f47b8f0ddf0f1687e2"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2001000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.059026ms ago: executing program 2 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd8300, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r2}, 0x20) r4 = accept$nfc_llcp(r2, &(0x7f0000000180), &(0x7f0000000200)=0x60) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000240)={0xee9, 0x10001}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000300)={@loopback, 0x0}, &(0x7f0000000340)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @loopback, @loopback}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_macvtap\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x78a0, 0x1, 0x1, 0x3, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @remote, {[@generic={0x82, 0x5, "b15b19"}, @timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x1, [{@multicast2, 0xb}, {@private=0xa010102, 0x3}]}, @timestamp={0x44, 0xc, 0x78, 0x0, 0xe, [0x27, 0xffffffa8]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'veth0_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000008c0)={&(0x7f0000000280), 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x15c, r5, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4008050}, 0x1) pselect6(0x40, &(0x7f0000000900)={0x7, 0x3, 0x8, 0x80, 0x5c, 0x7, 0x200, 0x19}, &(0x7f0000000940)={0x8, 0x8000, 0x6, 0x4a234014, 0x10000000000000, 0xae, 0x100000001, 0x5}, &(0x7f0000000980)={0x7, 0xa620, 0x9, 0x80000001, 0xff13, 0x6, 0xf, 0x3ff}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x92]}, 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a80)={r0, 0x9, 0x4f, 0x6cc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='hwmon_attr_show_string\x00', r16, 0x0, 0x3}, 0x18) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0xffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x8c, &(0x7f0000000c00)=""/140, 0x41000, 0x80, '\x00', r10, @fallback=0x18, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x4, 0xe, 0x5, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000d00)=[r2, r1], 0x0, 0x10, 0x494d}, 0x94) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000e00)={0x0, @local, @loopback}, &(0x7f0000000e40)=0xc) read$FUSE(r2, &(0x7f0000000e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002ec0)={0x50, 0xffffffffffffffda, r17, {0x7, 0x2b, 0xfffffff7, 0x2200000, 0x5, 0x9, 0x2, 0x81, 0x0, 0x0, 0x10, 0xa0}}, 0x50) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r16, 0x8983, &(0x7f0000002f40)) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000002f80)={0x74, 0x0, 0x24}) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003180)={0x11, 0x10, &(0x7f0000003040)=@raw=[@exit, @ldst={0x1, 0x2, 0x1, 0x5, 0x1, 0x100, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}, @call={0x85, 0x0, 0x0, 0xa5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000030c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r16, 0x8, &(0x7f0000003100)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=[r16, r2, r16, r3, r16], 0x0, 0x10, 0x68}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003240)={&(0x7f0000003000)='thermal_zone_trip\x00', r18, 0x0, 0x40}, 0x18) 32.095787ms ago: executing program 2 (id=87): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x3, 0x4, 0x40110, 0xffffffffffffffff, 0x5000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xe}, 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="58010000100013040000000000000000e000000100000000000000000000000000000000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) (async, rerun: 32) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x600) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) r7 = syz_pidfd_open(r2, 0x0) process_mrelease(r7, 0x700000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) ptrace$ARCH_SHSTK_ENABLE(0x1e, r8, 0x1, 0x5001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 20.524455][ T30] audit: type=1400 audit(1765524616.064:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.525670][ T273] cgroup: Unknown subsys name 'net' [ 20.547094][ T30] audit: type=1400 audit(1765524616.064:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.574368][ T30] audit: type=1400 audit(1765524616.094:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.574526][ T273] cgroup: Unknown subsys name 'devices' [ 20.781133][ T273] cgroup: Unknown subsys name 'hugetlb' [ 20.786749][ T273] cgroup: Unknown subsys name 'rlimit' [ 21.013225][ T30] audit: type=1400 audit(1765524616.554:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.036397][ T30] audit: type=1400 audit(1765524616.554:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.061262][ T30] audit: type=1400 audit(1765524616.554:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.066067][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.093107][ T30] audit: type=1400 audit(1765524616.634:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.118517][ T30] audit: type=1400 audit(1765524616.634:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.130058][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.144313][ T30] audit: type=1400 audit(1765524616.664:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.178226][ T30] audit: type=1400 audit(1765524616.664:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.056762][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.063875][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.071390][ T281] device bridge_slave_0 entered promiscuous mode [ 24.079088][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.086174][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.093579][ T281] device bridge_slave_1 entered promiscuous mode [ 24.183789][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.190991][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.198254][ T282] device bridge_slave_0 entered promiscuous mode [ 24.205232][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.212370][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.219826][ T282] device bridge_slave_1 entered promiscuous mode [ 24.255123][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.262293][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.269675][ T283] device bridge_slave_0 entered promiscuous mode [ 24.287127][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.294194][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.301696][ T283] device bridge_slave_1 entered promiscuous mode [ 24.350077][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.357118][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.364520][ T287] device bridge_slave_0 entered promiscuous mode [ 24.372507][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.379557][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.386946][ T287] device bridge_slave_1 entered promiscuous mode [ 24.393598][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.400665][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.407909][ T284] device bridge_slave_0 entered promiscuous mode [ 24.426972][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.434043][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.441526][ T284] device bridge_slave_1 entered promiscuous mode [ 24.524477][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.531540][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.538836][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.545876][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.585997][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.593062][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.600488][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.607508][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.633434][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.640503][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.647775][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.654815][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.676008][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.683427][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.690933][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.698033][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.705424][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.712832][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.721543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.728896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.759121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.767284][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.774312][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.781904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.790802][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.797816][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.805166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.813260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.851801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.860349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.868326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.875944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.883465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.890855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.898921][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.905962][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.913280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.921524][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.928526][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.943399][ T281] device veth0_vlan entered promiscuous mode [ 24.951244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.958639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.967078][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.974145][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.981750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.990410][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.997419][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.004924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.014212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.035181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.042747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.050997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.061092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.069260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.078586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.086971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.095153][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.102194][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.110186][ T281] device veth1_macvtap entered promiscuous mode [ 25.120462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.128150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.135907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.144127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.152249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.160119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.182271][ T283] device veth0_vlan entered promiscuous mode [ 25.189080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.197687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.206068][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.213135][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.221167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.229651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.237739][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.244776][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.252339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.260391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.268284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.276643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.284906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.293034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.301121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.309490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.317588][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.324649][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.332258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.340778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.348693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.356508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.363980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.381836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.390090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.397970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.406060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.414973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.423250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.431693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.440002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.455518][ T287] device veth0_vlan entered promiscuous mode [ 25.468619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.476854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.484543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.492411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.500970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.509178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.517696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.535463][ T283] device veth1_macvtap entered promiscuous mode [ 25.542386][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 25.542398][ T30] audit: type=1400 audit(1765524621.084:82): avc: denied { mounton } for pid=281 comm="syz-executor" path="/root/syzkaller.7rBqTu/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 25.544099][ T287] device veth1_macvtap entered promiscuous mode [ 25.551949][ T30] audit: type=1400 audit(1765524621.084:83): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 25.600868][ T30] audit: type=1400 audit(1765524621.084:84): avc: denied { mounton } for pid=281 comm="syz-executor" path="/root/syzkaller.7rBqTu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.601509][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 25.626297][ T30] audit: type=1400 audit(1765524621.094:85): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 25.657339][ T282] device veth0_vlan entered promiscuous mode [ 25.665497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.669531][ T30] audit: type=1400 audit(1765524621.094:86): avc: denied { mounton } for pid=281 comm="syz-executor" path="/root/syzkaller.7rBqTu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 25.674208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.708269][ T30] audit: type=1400 audit(1765524621.094:87): avc: denied { mounton } for pid=281 comm="syz-executor" path="/root/syzkaller.7rBqTu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 25.709068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.743110][ T30] audit: type=1400 audit(1765524621.094:88): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.743135][ T30] audit: type=1400 audit(1765524621.144:89): avc: denied { mounton } for pid=281 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 25.763322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.785627][ T30] audit: type=1400 audit(1765524621.174:90): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 25.793982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.815874][ T30] audit: type=1400 audit(1765524621.174:91): avc: denied { mounton } for pid=281 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 25.824220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.855479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.863795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.872135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.880476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.888688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.896762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.904933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.912444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.924731][ T284] device veth0_vlan entered promiscuous mode [ 25.936663][ T282] device veth1_macvtap entered promiscuous mode [ 25.945223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.953539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.961751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.970154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.978314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.987660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.995672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.009604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.017913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.026784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.035150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.483279][ T284] device veth1_macvtap entered promiscuous mode [ 26.495961][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.504794][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.513557][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.521316][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.529795][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.538143][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.546596][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.555098][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.563713][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.792028][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.801592][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.032287][ T353] loop2: detected capacity change from 0 to 128 [ 27.146585][ T353] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.217982][ T353] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 27.389438][ T20] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 28.545749][ T369] loop4: detected capacity change from 0 to 512 [ 28.602766][ T369] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 28.616087][ T373] loop1: detected capacity change from 0 to 256 [ 28.623198][ T369] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 28.633455][ T369] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.10: Corrupt directory, running e2fsck is recommended [ 28.646446][ T369] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 28.659745][ T369] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.10: corrupted in-inode xattr [ 28.672482][ T369] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.10: couldn't read orphan inode 15 (err -117) [ 28.715001][ T369] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,dioread_lock,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 28.751760][ T373] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 28.989731][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.011000][ T369] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.039542][ T369] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 29.044375][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.050070][ T369] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.10: Corrupt directory, running e2fsck is recommended [ 29.072968][ T390] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.084699][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.097797][ T390] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 29.108597][ T20] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 29.117857][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.126093][ T390] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.10: Corrupt directory, running e2fsck is recommended [ 29.158533][ T20] usb 1-1: config 0 descriptor?? [ 29.159947][ T385] loop3: detected capacity change from 0 to 40427 [ 29.170924][ T369] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.183313][ T369] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 29.193753][ T369] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.10: Corrupt directory, running e2fsck is recommended [ 29.207307][ T390] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.220131][ T369] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #2: block 3: comm syz.4.10: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 29.241634][ T385] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.257518][ T385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.267071][ T385] F2FS-fs (loop3): invalid crc value [ 29.275731][ T385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.282960][ T397] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.319998][ T385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.327322][ T385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.630330][ T20] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 29.637418][ T20] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 29.644685][ T20] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 29.651887][ T6] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 29.659425][ T20] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 29.666459][ T20] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 29.674214][ T20] cypress 0003:04B4:07B1.0001: hidraw0: USB HID v1.01 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 29.699358][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.871609][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 29.914094][ T367] usb 1-1: USB disconnect, device number 2 [ 29.939333][ T6] usb 5-1: device descriptor read/64, error -71 [ 29.949364][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 30.109377][ T42] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.119466][ T42] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 243, changing to 11 [ 30.130914][ T42] usb 4-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.144024][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.150699][ T42] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 30.160019][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.170326][ T42] usb 4-1: config 0 descriptor?? [ 30.329333][ T6] usb 5-1: device descriptor read/64, error -71 [ 30.629425][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 30.629469][ T30] audit: type=1326 audit(1765524626.154:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=419 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db7fc749 code=0x7ffc0000 [ 30.676956][ T42] a4tech 0003:09DA:0006.0002: hidraw0: USB HID v0.07 Device [HID 09da:0006] on usb-dummy_hcd.3-1/input0 [ 30.683529][ T30] audit: type=1326 audit(1765524626.154:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=419 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db7fc749 code=0x7ffc0000 [ 30.749378][ T6] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 30.759275][ T30] audit: type=1400 audit(1765524626.294:209): avc: denied { create } for pid=430 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.779869][ T30] audit: type=1400 audit(1765524626.304:210): avc: denied { ioctl } for pid=430 comm="syz.2.22" path="socket:[16628]" dev="sockfs" ino=16628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.805029][ T30] audit: type=1400 audit(1765524626.304:211): avc: denied { setopt } for pid=430 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.824836][ T30] audit: type=1400 audit(1765524626.304:212): avc: denied { write } for pid=430 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.844225][ T30] audit: type=1400 audit(1765524626.324:213): avc: denied { name_bind } for pid=430 comm="syz.2.22" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.866728][ T30] audit: type=1400 audit(1765524626.324:214): avc: denied { node_bind } for pid=430 comm="syz.2.22" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.890186][ T406] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.897600][ T406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.899889][ T433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'. [ 30.905774][ T406] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.922601][ T406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.935692][ T30] audit: type=1326 audit(1765524626.474:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=434 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db7fc749 code=0x7ffc0000 [ 30.959083][ T30] audit: type=1326 audit(1765524626.474:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=434 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7db7fc749 code=0x7ffc0000 [ 30.983009][ T20] usb 4-1: USB disconnect, device number 2 [ 31.059426][ T6] usb 5-1: device descriptor read/64, error -71 [ 31.327150][ T453] netlink: 'syz.0.29': attribute type 27 has an invalid length. [ 31.343259][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.350523][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.449358][ T6] usb 5-1: device descriptor read/64, error -71 [ 31.637139][ T6] usb usb5-port1: attempt power cycle [ 32.049359][ T6] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 32.161041][ T453] syz.0.29 (453) used greatest stack depth: 21536 bytes left [ 32.169484][ T42] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.197656][ T464] loop0: detected capacity change from 0 to 512 [ 32.229422][ T6] usb 5-1: device descriptor read/8, error -71 [ 32.242585][ T464] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 32.250851][ T464] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 32.259575][ T464] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.33: attempt to clear invalid blocks 2 len 1 [ 32.272481][ T464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 32.286999][ T464] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.33: invalid indirect mapped block 1819239214 (level 0) [ 32.301171][ T464] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.33: invalid indirect mapped block 1819239214 (level 1) [ 32.315491][ T464] EXT4-fs (loop0): 1 truncate cleaned up [ 32.321174][ T464] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 32.387822][ T468] loop4: detected capacity change from 0 to 1024 [ 32.411031][ T468] ======================================================= [ 32.411031][ T468] WARNING: The mand mount option has been deprecated and [ 32.411031][ T468] and is ignored by this kernel. Remove the mand [ 32.411031][ T468] option from the mount to silence this warning. [ 32.411031][ T468] ======================================================= [ 32.439372][ T6] usb 5-1: device descriptor read/8, error -71 [ 32.713015][ T468] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,noblock_validity,,errors=continue. Quota mode: none. [ 32.740226][ T468] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.792005][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.803159][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.814215][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.827098][ T42] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 32.836213][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.846550][ T42] usb 3-1: config 0 descriptor?? [ 32.862059][ T479] loop3: detected capacity change from 0 to 512 [ 33.729458][ T20] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 33.752044][ T479] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.110392][ T42] cypress 0003:04B4:07B1.0003: unknown main item tag 0x0 [ 34.117495][ T42] cypress 0003:04B4:07B1.0003: unknown main item tag 0x0 [ 34.139341][ T42] cypress 0003:04B4:07B1.0003: unknown main item tag 0x0 [ 34.146419][ T42] cypress 0003:04B4:07B1.0003: unknown main item tag 0x0 [ 34.169341][ T42] cypress 0003:04B4:07B1.0003: unknown main item tag 0x0 [ 34.169421][ T20] usb 2-1: device descriptor read/64, error -71 [ 34.177246][ T42] cypress 0003:04B4:07B1.0003: hidraw0: USB HID v1.01 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 34.276042][ T501] syz.3.42 (501) used greatest stack depth: 21216 bytes left [ 34.360137][ T60] usb 3-1: USB disconnect, device number 2 [ 34.397962][ T493] loop4: detected capacity change from 0 to 131072 [ 34.460087][ T493] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 34.468332][ T493] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 34.477479][ T493] F2FS-fs (loop4): invalid crc value [ 34.484498][ T493] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.506149][ T493] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 34.513380][ T493] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 34.520563][ T493] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 34.540345][ T489] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 34.562667][ T489] SELinux: ebitmap: truncated map [ 34.574072][ T489] SELinux: failed to load policy [ 34.599338][ T20] usb 2-1: device descriptor read/64, error -71 [ 34.747294][ T515] loop4: detected capacity change from 0 to 512 [ 34.840248][ T515] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 34.849503][ T515] EXT4-fs (loop4): Ignoring removed bh option [ 34.855626][ T515] EXT4-fs (loop4): Ignoring removed orlov option [ 34.862114][ T515] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 34.871379][ T515] EXT4-fs (loop4): Ignoring removed nobh option [ 34.875754][ T20] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 34.877720][ T515] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 34.894194][ T515] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 34.914214][ T519] loop2: detected capacity change from 0 to 512 [ 34.921375][ T515] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,grpjquota=./file0,bh,orlov,usrjquota=./file1,i_version,inode_readahead_blks=0x0000000000040000,nobh,mblk_io_submit,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 34.944615][ T515] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.963374][ T519] EXT4-fs (loop2): Ignoring removed bh option [ 34.974935][ T515] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.45: iget: bad i_size value: 2533274857506816 [ 34.990997][ T519] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 35.004214][ T519] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.107830][ T526] loop0: detected capacity change from 0 to 512 [ 35.143451][ T527] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.45: iget: bad i_size value: 2533274857506816 [ 35.156139][ T527] overlayfs: failed to resolve './file0': -117 [ 35.164649][ T20] usb 2-1: device descriptor read/64, error -71 [ 35.193024][ T528] incfs: Error accessing: ./bus. [ 35.202255][ T528] incfs: mount failed -20 [ 35.203115][ T526] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.220015][ T526] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.48: invalid indirect mapped block 4294967295 (level 1) [ 35.234108][ T526] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.48: invalid indirect mapped block 4294967295 (level 1) [ 35.248385][ T526] EXT4-fs (loop0): 2 truncates cleaned up [ 35.254164][ T526] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 35.469344][ T340] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.579637][ T20] usb 2-1: device descriptor read/64, error -71 [ 35.658235][ T545] Zero length message leads to an empty skb [ 35.673023][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 35.673036][ T30] audit: type=1400 audit(1765524631.214:393): avc: denied { connect } for pid=548 comm="syz.4.54" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.697703][ T551] netlink: 68 bytes leftover after parsing attributes in process `syz.4.55'. [ 35.708295][ T20] usb usb2-port1: attempt power cycle [ 35.724831][ T30] audit: type=1400 audit(1765524631.264:394): avc: denied { read } for pid=552 comm="syz.1.57" dev="nsfs" ino=4026532391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.757886][ T30] audit: type=1400 audit(1765524631.264:395): avc: denied { open } for pid=552 comm="syz.1.57" path="net:[4026532391]" dev="nsfs" ino=4026532391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.788408][ T30] audit: type=1400 audit(1765524631.294:396): avc: denied { bind } for pid=552 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.789448][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.842596][ T555] syz.4.56 (555) used greatest stack depth: 20608 bytes left [ 35.869901][ T30] audit: type=1400 audit(1765524631.414:397): avc: denied { read } for pid=561 comm="syz.1.59" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.880097][ T562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 35.892383][ T340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.911606][ T340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.920895][ T565] tipc: Started in network mode [ 35.926283][ T30] audit: type=1400 audit(1765524631.414:398): avc: denied { open } for pid=561 comm="syz.1.59" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.931147][ T562] loop1: detected capacity change from 0 to 512 [ 35.949664][ T565] tipc: Node identity 7f000001, cluster identity 4711 [ 35.962361][ T565] tipc: Enabling of bearer rejected, failed to enable media [ 35.970682][ T30] audit: type=1400 audit(1765524631.414:399): avc: denied { ioctl } for pid=561 comm="syz.1.59" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.997644][ T30] audit: type=1400 audit(1765524631.424:400): avc: denied { write } for pid=561 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.997713][ T562] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 36.017841][ T30] audit: type=1400 audit(1765524631.424:401): avc: denied { nlmsg_write } for pid=561 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.044817][ T562] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.044841][ T562] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 36.044853][ T562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.044860][ T562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.053566][ T562] EXT4-fs (loop1): 1 truncate cleaned up [ 36.059664][ T565] input: syz0 as /devices/virtual/input/input5 [ 36.072115][ T562] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 36.082658][ T340] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.118109][ T30] audit: type=1400 audit(1765524631.654:402): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=607 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.122876][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 36.148560][ T565] tipc: Enabling of bearer rejected, failed to enable media [ 36.152283][ T340] usb 4-1: SerialNumber: syz [ 36.259386][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.389150][ T597] loop1: detected capacity change from 0 to 512 [ 36.458668][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.470341][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.478316][ T42] usb 1-1: Product: syz [ 36.482530][ T42] usb 1-1: Manufacturer: syz [ 36.487124][ T42] usb 1-1: SerialNumber: syz [ 36.527932][ T597] EXT4-fs (loop1): Ignoring removed bh option [ 36.541266][ T597] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 36.541495][ T598] loop3: detected capacity change from 0 to 1024 [ 36.554545][ T597] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.578491][ T597] EXT4-fs error (device loop1): ext4_do_update_inode:5249: inode #18: comm syz.1.65: corrupted inode contents [ 36.590465][ T597] EXT4-fs error (device loop1): ext4_dirty_inode:6085: inode #18: comm syz.1.65: mark_inode_dirty error [ 36.601898][ T597] EXT4-fs error (device loop1): ext4_do_update_inode:5249: inode #18: comm syz.1.65: corrupted inode contents [ 36.606982][ T598] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 36.606982][ T598] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.606982][ T598] [ 36.624330][ T597] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #18: comm syz.1.65: mark_inode_dirty error [ 36.631499][ T598] EXT4-fs (loop3): Ignoring removed orlov option [ 36.649688][ T428] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 36.652022][ T597] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #18: comm syz.1.65: mark inode dirty (error -117) [ 36.660707][ T598] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,noacl,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,nodioread_nolock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 36.669839][ T597] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 37.059596][ T428] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.070099][ T428] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.155188][ T613] loop4: detected capacity change from 0 to 512 [ 37.159386][ T428] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 37.171435][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.180686][ T428] usb 3-1: SerialNumber: syz [ 37.198168][ T613] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 37.223155][ T428] usb 3-1: 0:2 : does not exist [ 37.232271][ T613] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.241197][ T613] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.70: bg 0: block 248: padding at end of block bitmap is not set [ 37.256449][ T613] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.70: Failed to acquire dquot type 1 [ 37.269182][ T613] EXT4-fs (loop4): 1 truncate cleaned up [ 37.276108][ T613] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,journal_ioprio=0x0000000000000004,jqfmt=vfsold,grpjquota=,grpjquota=,noquota,init_itable,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 39.493857][ T623] loop2: detected capacity change from 0 to 256 [ 39.541588][ T623] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 39.581086][ T340] usb 4-1: 0:2 : does not exist [ 39.586188][ T428] usb 3-1: USB disconnect, device number 3 [ 39.599122][ T340] usb 4-1: USB disconnect, device number 3 [ 39.659608][ T636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=636 comm=syz.2.76 [ 39.806222][ T650] loop4: detected capacity change from 0 to 512 [ 39.819455][ T42] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.825996][ T42] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 39.832709][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.840531][ T650] EXT4-fs (loop4): Ignoring removed bh option [ 39.870599][ T650] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 39.883772][ T650] EXT4-fs (loop4): 1 truncate cleaned up [ 39.890496][ T650] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000400000,bh,noquota,auto_da_alloc=0x0000000000000002,grpquota,max_dir_size_kb=0x0000000000000803,,errors=continue. Quota mode: writeback. [ 39.986483][ T614] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.994125][ T340] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 40.299335][ T614] usb 2-1: Using ep0 maxpacket: 16 [ 40.329395][ T340] usb 4-1: device descriptor read/64, error -71 [ 40.419356][ T614] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 40.429959][ T614] usb 2-1: config 4 has no interface number 0 [ 40.436103][ T614] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 40.446253][ T614] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 40.456454][ T614] usb 2-1: config 4 interface 51 has no altsetting 0 [ 40.519391][ T42] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 40.540768][ T42] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 40.586526][ T42] usb 1-1: USB disconnect, device number 3 [ 40.619520][ T614] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 40.629860][ T42] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 40.644504][ T614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.675355][ T614] usb 2-1: Product: syz [ 40.693662][ T614] usb 2-1: Manufacturer: syz [ 40.698282][ T614] usb 2-1: SerialNumber: syz [ 40.702928][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 40.702941][ T30] audit: type=1400 audit(1765524636.234:601): avc: denied { read } for pid=674 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.732264][ T340] usb 4-1: device descriptor read/64, error -71 [ 40.817922][ T30] audit: type=1400 audit(1765524636.234:602): avc: denied { open } for pid=674 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.873187][ T30] audit: type=1400 audit(1765524636.234:603): avc: denied { getattr } for pid=674 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.901670][ T694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 40.935030][ T30] audit: type=1400 audit(1765524636.294:604): avc: denied { write } for pid=668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.980456][ T30] audit: type=1400 audit(1765524636.294:605): avc: denied { add_name } for pid=668 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.024799][ T367] ================================================================== [ 41.032884][ T367] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 41.040719][ T367] Read of size 8 at addr ffff88811abbcc70 by task kworker/1:4/367 [ 41.048558][ T367] [ 41.050915][ T367] CPU: 1 PID: 367 Comm: kworker/1:4 Not tainted syzkaller #0 [ 41.054799][ T30] audit: type=1400 audit(1765524636.294:606): avc: denied { create } for pid=668 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.058286][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.058299][ T367] Workqueue: events usb_gadget_state_work [ 41.096182][ T367] Call Trace: [ 41.098961][ T30] audit: type=1400 audit(1765524636.294:607): avc: denied { write } for pid=668 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=1218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.099462][ T367] [ 41.099470][ T367] __dump_stack+0x21/0x30 [ 41.099492][ T367] dump_stack_lvl+0xee/0x150 [ 41.099506][ T367] ? show_regs_print_info+0x20/0x20 [ 41.099521][ T367] ? load_image+0x3a0/0x3a0 [ 41.099535][ T367] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 41.152257][ T367] ? kmem_cache_free_bulk+0x4f2/0x730 [ 41.153303][ T30] audit: type=1400 audit(1765524636.294:608): avc: denied { append } for pid=668 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=1218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.157636][ T367] print_address_description+0x7f/0x2c0 [ 41.157661][ T367] ? __list_del_entry_valid+0xa6/0x120 [ 41.157680][ T367] kasan_report+0xf1/0x140 [ 41.182049][ T30] audit: type=1400 audit(1765524636.324:609): avc: denied { remove_name } for pid=687 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.187141][ T367] ? __list_del_entry_valid+0xa6/0x120 [ 41.192837][ T30] audit: type=1400 audit(1765524636.324:610): avc: denied { unlink } for pid=687 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.196975][ T367] __asan_report_load8_noabort+0x14/0x20 [ 41.253980][ T367] __list_del_entry_valid+0xa6/0x120 [ 41.259282][ T367] process_one_work+0x453/0xba0 [ 41.264143][ T367] worker_thread+0xa59/0x1200 [ 41.268832][ T367] kthread+0x411/0x500 [ 41.272908][ T367] ? worker_clr_flags+0x190/0x190 [ 41.277940][ T367] ? kthread_blkcg+0xd0/0xd0 [ 41.282542][ T367] ret_from_fork+0x1f/0x30 [ 41.286966][ T367] [ 41.289976][ T367] [ 41.292289][ T367] Allocated by task 42: [ 41.296428][ T367] __kasan_kmalloc+0xda/0x110 [ 41.301101][ T367] __kmalloc+0x13d/0x2c0 [ 41.305348][ T367] kvmalloc_node+0x206/0x300 [ 41.309931][ T367] alloc_netdev_mqs+0x8d/0xc90 [ 41.314690][ T367] alloc_etherdev_mqs+0x34/0x40 [ 41.319541][ T367] usbnet_probe+0x219/0x2860 [ 41.324130][ T367] usb_probe_interface+0x5ff/0xae0 [ 41.329241][ T367] really_probe+0x285/0x970 [ 41.333740][ T367] __driver_probe_device+0x198/0x280 [ 41.339043][ T367] driver_probe_device+0x54/0x3e0 [ 41.344076][ T367] __device_attach_driver+0x2a6/0x460 [ 41.349459][ T367] bus_for_each_drv+0x175/0x200 [ 41.354319][ T367] __device_attach+0x2a2/0x400 [ 41.359084][ T367] device_initial_probe+0x1a/0x20 [ 41.364122][ T367] bus_probe_device+0xc0/0x1e0 [ 41.368877][ T367] device_add+0xb31/0xed0 [ 41.373201][ T367] usb_set_configuration+0x19c2/0x1f10 [ 41.378654][ T367] usb_generic_driver_probe+0x91/0x150 [ 41.384116][ T367] usb_probe_device+0x148/0x260 [ 41.388965][ T367] really_probe+0x285/0x970 [ 41.393462][ T367] __driver_probe_device+0x198/0x280 [ 41.398741][ T367] driver_probe_device+0x54/0x3e0 [ 41.403757][ T367] __device_attach_driver+0x2a6/0x460 [ 41.409115][ T367] bus_for_each_drv+0x175/0x200 [ 41.413946][ T367] __device_attach+0x2a2/0x400 [ 41.418687][ T367] device_initial_probe+0x1a/0x20 [ 41.423690][ T367] bus_probe_device+0xc0/0x1e0 [ 41.428431][ T367] device_add+0xb31/0xed0 [ 41.432744][ T367] usb_new_device+0xd06/0x1620 [ 41.437490][ T367] hub_event+0x29c4/0x4480 [ 41.441892][ T367] process_one_work+0x6be/0xba0 [ 41.446725][ T367] worker_thread+0xa59/0x1200 [ 41.451384][ T367] kthread+0x411/0x500 [ 41.455433][ T367] ret_from_fork+0x1f/0x30 [ 41.459830][ T367] [ 41.462135][ T367] Freed by task 42: [ 41.465915][ T367] kasan_set_track+0x4a/0x70 [ 41.470486][ T367] kasan_set_free_info+0x23/0x40 [ 41.475399][ T367] ____kasan_slab_free+0x125/0x160 [ 41.480485][ T367] __kasan_slab_free+0x11/0x20 [ 41.485226][ T367] slab_free_freelist_hook+0xc2/0x190 [ 41.490576][ T367] kfree+0xc4/0x270 [ 41.494514][ T367] kvfree+0x35/0x40 [ 41.498321][ T367] netdev_freemem+0x3f/0x60 [ 41.502823][ T367] netdev_release+0x7f/0xb0 [ 41.507313][ T367] device_release+0x96/0x1c0 [ 41.511882][ T367] kobject_put+0x18a/0x270 [ 41.516278][ T367] put_device+0x1f/0x30 [ 41.520412][ T367] free_netdev+0x34b/0x450 [ 41.524809][ T367] usbnet_disconnect+0x24b/0x3a0 [ 41.529727][ T367] usb_unbind_interface+0x212/0x8c0 [ 41.534901][ T367] device_release_driver_internal+0x4c1/0x760 [ 41.540945][ T367] device_release_driver+0x19/0x20 [ 41.546030][ T367] bus_remove_device+0x2dd/0x340 [ 41.550942][ T367] device_del+0x696/0xe90 [ 41.555266][ T367] usb_disable_device+0x3a8/0x750 [ 41.560264][ T367] usb_disconnect+0x31e/0x850 [ 41.564920][ T367] hub_event+0x1a96/0x4480 [ 41.569332][ T367] process_one_work+0x6be/0xba0 [ 41.574164][ T367] worker_thread+0xd7b/0x1200 [ 41.578820][ T367] kthread+0x411/0x500 [ 41.582865][ T367] ret_from_fork+0x1f/0x30 [ 41.587259][ T367] [ 41.589558][ T367] Last potentially related work creation: [ 41.595247][ T367] kasan_save_stack+0x3a/0x60 [ 41.599911][ T367] __kasan_record_aux_stack+0xd2/0x100 [ 41.605347][ T367] kasan_record_aux_stack_noalloc+0xb/0x10 [ 41.611130][ T367] insert_work+0x51/0x310 [ 41.615437][ T367] __queue_work+0x8e5/0xc60 [ 41.619927][ T367] queue_work_on+0xd2/0x140 [ 41.624404][ T367] usbnet_link_change+0x189/0x1b0 [ 41.629404][ T367] usbnet_probe+0x1dfd/0x2860 [ 41.634055][ T367] usb_probe_interface+0x5ff/0xae0 [ 41.639155][ T367] really_probe+0x285/0x970 [ 41.643632][ T367] __driver_probe_device+0x198/0x280 [ 41.648892][ T367] driver_probe_device+0x54/0x3e0 [ 41.653892][ T367] __device_attach_driver+0x2a6/0x460 [ 41.659244][ T367] bus_for_each_drv+0x175/0x200 [ 41.664082][ T367] __device_attach+0x2a2/0x400 [ 41.668824][ T367] device_initial_probe+0x1a/0x20 [ 41.673820][ T367] bus_probe_device+0xc0/0x1e0 [ 41.678557][ T367] device_add+0xb31/0xed0 [ 41.682863][ T367] usb_set_configuration+0x19c2/0x1f10 [ 41.688299][ T367] usb_generic_driver_probe+0x91/0x150 [ 41.693732][ T367] usb_probe_device+0x148/0x260 [ 41.698558][ T367] really_probe+0x285/0x970 [ 41.703036][ T367] __driver_probe_device+0x198/0x280 [ 41.708298][ T367] driver_probe_device+0x54/0x3e0 [ 41.713299][ T367] __device_attach_driver+0x2a6/0x460 [ 41.718646][ T367] bus_for_each_drv+0x175/0x200 [ 41.723474][ T367] __device_attach+0x2a2/0x400 [ 41.728221][ T367] device_initial_probe+0x1a/0x20 [ 41.733219][ T367] bus_probe_device+0xc0/0x1e0 [ 41.737957][ T367] device_add+0xb31/0xed0 [ 41.742262][ T367] usb_new_device+0xd06/0x1620 [ 41.747111][ T367] hub_event+0x29c4/0x4480 [ 41.751505][ T367] process_one_work+0x6be/0xba0 [ 41.756332][ T367] worker_thread+0xa59/0x1200 [ 41.760987][ T367] kthread+0x411/0x500 [ 41.765041][ T367] ret_from_fork+0x1f/0x30 [ 41.769440][ T367] [ 41.771741][ T367] The buggy address belongs to the object at ffff88811abbc000 [ 41.771741][ T367] which belongs to the cache kmalloc-4k of size 4096 [ 41.785769][ T367] The buggy address is located 3184 bytes inside of [ 41.785769][ T367] 4096-byte region [ffff88811abbc000, ffff88811abbd000) [ 41.799203][ T367] The buggy address belongs to the page: [ 41.804817][ T367] page:ffffea00046aee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11abb8 [ 41.815034][ T367] head:ffffea00046aee00 order:3 compound_mapcount:0 compound_pincount:0 [ 41.823339][ T367] flags: 0x4000000000010200(slab|head|zone=1) [ 41.829393][ T367] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 41.837954][ T367] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 41.846510][ T367] page dumped because: kasan: bad access detected [ 41.852898][ T367] page_owner tracks the page as allocated [ 41.858588][ T367] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 101, ts 36395915531, free_ts 36327210192 [ 41.878965][ T367] post_alloc_hook+0x192/0x1b0 [ 41.883730][ T367] prep_new_page+0x1c/0x110 [ 41.888211][ T367] get_page_from_freelist+0x2cc5/0x2d50 [ 41.893730][ T367] __alloc_pages+0x18f/0x440 [ 41.898296][ T367] new_slab+0xa1/0x4d0 [ 41.902343][ T367] ___slab_alloc+0x381/0x810 [ 41.906910][ T367] __slab_alloc+0x49/0x90 [ 41.911214][ T367] kmem_cache_alloc_trace+0x146/0x270 [ 41.916560][ T367] uevent_show+0x160/0x330 [ 41.920955][ T367] dev_attr_show+0x56/0xd0 [ 41.925346][ T367] sysfs_kf_seq_show+0x266/0x3d0 [ 41.930258][ T367] kernfs_seq_show+0x119/0x160 [ 41.934999][ T367] seq_read_iter+0x490/0xd30 [ 41.939567][ T367] kernfs_fop_read_iter+0x147/0x470 [ 41.944743][ T367] vfs_read+0x68b/0xbe0 [ 41.948877][ T367] ksys_read+0x140/0x240 [ 41.953094][ T367] page last free stack trace: [ 41.957742][ T367] free_unref_page_prepare+0x542/0x550 [ 41.963187][ T367] free_unref_page+0xa2/0x550 [ 41.967838][ T367] __free_pages+0x6c/0x100 [ 41.972229][ T367] __free_slab+0xe8/0x1e0 [ 41.976534][ T367] __unfreeze_partials+0x160/0x190 [ 41.981707][ T367] put_cpu_partial+0xc6/0x120 [ 41.986361][ T367] __slab_free+0x1d4/0x290 [ 41.990754][ T367] ___cache_free+0x104/0x120 [ 41.995329][ T367] qlink_free+0x4d/0x90 [ 41.999460][ T367] qlist_free_all+0x5f/0xb0 [ 42.003943][ T367] kasan_quarantine_reduce+0x14a/0x170 [ 42.009378][ T367] __kasan_slab_alloc+0x2f/0xf0 [ 42.014203][ T367] slab_post_alloc_hook+0x4f/0x2b0 [ 42.019378][ T367] kmem_cache_alloc+0xf7/0x260 [ 42.024116][ T367] getname_flags+0xb9/0x500 [ 42.028596][ T367] user_path_at_empty+0x30/0x1c0 [ 42.033509][ T367] [ 42.035812][ T367] Memory state around the buggy address: [ 42.041415][ T367] ffff88811abbcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.049449][ T367] ffff88811abbcb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.057482][ T367] >ffff88811abbcc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.065513][ T367] ^ [ 42.073201][ T367] ffff88811abbcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.081237][ T367] ffff88811abbcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.089268][ T367] ================================================================== [ 42.097299][ T367] Disabling lock debugging due to kernel taint [ 42.124980][ T706] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.132211][ T706] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.139565][ T634] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 42.148691][ T634] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 42.259432][ T340] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 42.432590][ T709] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 42.439640][ T709] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 42.460791][ T614] cdc_eem 2-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.1-1, CDC EEM Device, 06:24:0e:71:b0:16 [ 42.539328][ T340] usb 4-1: device descriptor read/64, error -71 [ 43.539749][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 43.679249][ T614] usb 2-1: USB disconnect, device number 5 [ 43.685988][ T614] cdc_eem 2-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.1-1, CDC EEM Device