last executing test programs: 8m35.937798601s ago: executing program 32 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000001640)=""/237, 0xed}, {&(0x7f0000001800)=""/253, 0xfd}, {&(0x7f0000001900)=""/229, 0xe5}], 0x8, &(0x7f0000001740)=""/98, 0x62}, 0xe}, {{&(0x7f0000001a00)=@isdn, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000001a80)=""/251, 0xfb}, {&(0x7f0000001b80)=""/151, 0x97}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5, &(0x7f0000001cc0)=""/167, 0xa7}, 0x1}, {{&(0x7f0000001d80)=@isdn, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/129, 0x81}, {&(0x7f0000001ec0)=""/71, 0x47}, {&(0x7f0000001f40)=""/252, 0xfc}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/13, 0xd}], 0x5, &(0x7f0000002180)=""/45, 0x2d}}, {{&(0x7f00000021c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002240)=""/44, 0x2c}, {&(0x7f0000002280)=""/227, 0xe3}, {&(0x7f0000002380)=""/245, 0xf5}, {&(0x7f0000002480)=""/171, 0xab}], 0x4, &(0x7f0000002580)=""/48, 0x30}}, {{&(0x7f00000025c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002640)=""/119, 0x77}, {&(0x7f00000026c0)=""/95, 0x5f}, {&(0x7f0000002740)=""/123, 0x7b}, {&(0x7f00000027c0)=""/18, 0x12}, {&(0x7f0000002800)=""/57, 0x39}, {&(0x7f0000002840)=""/54, 0x36}, {&(0x7f0000002880)=""/99, 0x63}], 0x7, &(0x7f0000002980)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a00)=""/159, 0x9f}, {&(0x7f0000003ac0)=""/5, 0x5}, {&(0x7f0000003b00)=""/126, 0x7e}, {&(0x7f0000003b80)=""/64, 0x40}, {&(0x7f0000003bc0)=""/166, 0xa6}], 0x5, &(0x7f0000003d00)=""/49, 0x31}, 0x401}, {{&(0x7f0000003d40)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003dc0)=""/76, 0x4c}], 0x1, &(0x7f0000003e80)=""/115, 0x73}}], 0x7, 0x12020, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c0400000000000500000005000000240012800b000100677265746170000014000280080004000300000006000300800000"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000040c0)=[@ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0x8, [{@loopback, 0x7}, {@empty, 0xffff}]}, @ssrr={0x89, 0xf, 0xc5, [@loopback, @broadcast, @broadcast]}, @end, @generic={0x83, 0x9, "a5dfc79e110c83"}, @cipso={0x86, 0x6, 0x2}, @rr={0x7, 0x13, 0x37, [@multicast2, @multicast2, @broadcast, @multicast2]}]}}}], 0x58}}], 0x1, 0x4040880) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000100003042dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001d20008a60000500012800900228f766c616e0000000040000280060001000000000034ed02800c0001000100000c000100ff00001b110000000c000100ff7f3900001000000800050000000000000000", @ANYRES32=r2, @ANYBLOB], 0x78}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) 6m9.554599108s ago: executing program 33 (id=2034): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000540)=""/123, 0x7b}], 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 5m22.592886583s ago: executing program 34 (id=2393): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) eventfd(0xffffffff) (async) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x80000001, 0x0, 0xfffefffc}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000007c0)={'pim6reg1\x00', 0x800}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000007c0)={'pim6reg1\x00', 0x800}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0xcc, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x40, 0x6cf, 0x400, 0x2, 0xf1, 0x100, 0x2}}, {0x8, 0x2, [0x7, 0xd1]}}, {{0x1c, 0x1, {0x2, 0x9, 0x4, 0x4, 0x1, 0xfffffffd, 0x342a9f5c, 0x5}}, {0xe, 0x2, [0x5, 0x1, 0x87, 0x800, 0x200]}}, {{0x1c, 0x1, {0x5f, 0x4, 0x3b0e, 0x6f4, 0x0, 0x1, 0x101, 0x2}}, {0x8, 0x2, [0x6, 0x1]}}]}]}, 0xcc}}, 0x0) close(r5) 4m23.974221406s ago: executing program 35 (id=2795): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r2 = dup(r1) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x8, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) (async, rerun: 32) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) (rerun: 32) 3m52.568361058s ago: executing program 36 (id=3201): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) chmod(&(0x7f0000000180)='./file1\x00', 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) unshare(0x44020000) 2m37.353857874s ago: executing program 37 (id=3888): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0xf8, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x28, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x8191c5c, 0x50, &(0x7f0000000340)=""/80, 0x40f00, 0x30, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x5, 0xd, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r1, r1, r1, r1, r1, 0x1, r1], &(0x7f0000000680)=[{0x4, 0x3, 0xa, 0x2}, {0x2, 0x4, 0xb, 0xc}, {0x4, 0x4, 0x1, 0x8}, {0x4, 0x1, 0x7, 0xb}, {0x0, 0x1, 0x8, 0x9}, {0x4, 0x1, 0x6, 0x8}], 0x10, 0x3}, 0x94) r5 = getpid() r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) kcmp(r5, r6, 0x1, r4, r2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0x1b0, 0x19, 0x923, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0x0, 0x400, 0x0, 0xa, 0x0, 0x0, 0x87}, {}, {0x0, 0x0, 0xfffffffffffffffd}}, [@sec_ctx={0xf7, 0x8, {0x7f, 0x8, 0x1, 0x6, 0xeb, "73c8b90196451d7882c5d64dec21b36e4e9c8d188c3fecc4dfbdfcae9b06693c8337229ee7be43d1c70430296634a60916cf9d87b61e6ddf8dff594d9557482b23ed0bec5f39aa7e575412b2473ae01bceddf9f19c40a9180f36d7c11cc1c9aaa236453c64882c908cb0b72331641abbac65d40d9af0455451cb119e3fca446fe8ce04fada8b41d4d08a7bfa78d700404600773232b2bcffb8f8f1491688f236771d7948d76768ec8a5e06ffdb3187a416d1d70a7a9835212d8ca31a3c450e6a892d54c0a7c29281dc5e562915a94ffd7a44023e6027090b3aacb745f882477f5942c950f07a5a1ce75f3f"}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m11.309187251s ago: executing program 38 (id=4106): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018114191c9737cf7f048757e9a0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) mount$9p_fd(0x0, 0x0, 0x0, 0xa10000, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x32, 0x33, 0x16, 0xa, 0x7, 0x100, 0x0, 0x44, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1m28.885789057s ago: executing program 39 (id=4320): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2000030, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES64=r1]) write$FUSE_BMAP(r2, &(0x7f0000000700)={0x18, 0x0, 0x0, {0x4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_gettime(r2, &(0x7f00000003c0)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x185) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r10, r5) sendmsg$inet6(r10, &(0x7f0000000580)={&(0x7f0000000440)={0xa, 0x4e22, 0x2, @loopback, 0x2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000480)="4473ad490e4f52dac9522b9d198acac257599d8ef6fe358bc4318a094790313c7405c4c13b405edd2a35c9d8f7508356704a71d0af0ff10f68eb730d2f9f4195e55a4ee7318e15352831026a8e1918a3f3918cd58610", 0x56}, {&(0x7f0000000500)="2960985117308f75ab2e77c95ffacdbc993d0e2df8bac7e849a2e3b8", 0x1c}], 0x2}, 0x4000) 1m23.164326239s ago: executing program 40 (id=4457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x148, 0x15, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xb2, 0x8, "677b9bf22622869a9b13c1a900a45dd024c39eb0f344b170d55f4bed9a24a7190b38347b4cffcab51f3be71a1573832af49c4f2a146e955dd85b3abae47c6a0e2cf4e8992cc5fee9d6e9551f18b216dd44e081e3b763f076fa0131c7db872cb84267758851c36e5fb1b0733e11d98e54a3ddb3202ec2f7a4fed3d8bfc1d5a2a65d8d3dbe96ccad1f18421703c98b684a78948ea055825910b804d6d8a929efeac83a5fae95e78f82c595551f31a3"}, @NFTA_OBJ_USERDATA={0x72, 0x8, "53ae46742def7da0c1c3e5351e87bf5f78e4421ddf0583931f14101da42500d34773bb60676e3a0f6991163938b4d39094feef923aed92e9f305adaa336f0edc9ec931540881fcf0de18ae3930202c30357a73b45bcd8f7d7160368454c0cff84f9a7b1f462ca38fafec3107c807"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x3}, 0x20000100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x0, 0x9, {{0x2d, 0x4, 0x3, 0x1, 0xb4, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0x1c, 0xb4, 0x0, 0x1, [0x5, 0x5, 0x7, 0x5, 0x9, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x9, [{@local, 0x1}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x10001}, {@local, 0x1}, {@multicast1, 0x5}, {@loopback}]}, @noop, @rr={0x7, 0x23, 0x91, [@loopback, @private=0xa010102, @remote, @loopback, @multicast1, @broadcast, @local, @loopback]}, @noop, @rr={0x7, 0x23, 0xad, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x49, [@multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24004800) r5 = syz_usb_connect$cdc_ncm(0x3, 0x7e, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x4d, 0x80, 0xe9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "3eb853"}, {0x5, 0x24, 0x0, 0xdb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x7, 0x7f}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0xfe, [0x1]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xbd, 0x5, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x6, 0x8}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0x40, 0x2}, 0xae, &(0x7f00000006c0)={0x5, 0xf, 0xae, 0x3, [@ptm_cap={0x3}, @generic={0xa3, 0x10, 0x0, "1d2330940b39671ff04df5a1eb62cc8f72073807c54edafbb1274a26172f56c4a4e0a4754b80e173a8a325dcb38a545d95b984ae8061bb629e0f396a8c7f96f0b65f1a4afd5236064ce15ab5036add33287878dd85cabe8140801059cbeca7dde5653270f7e77672c24132b3adad68dbdd62cd00a51eba86ba7fd9fd20e33e653b1be48e805e31e14102d77bb9993d0bf3c21e3c4165e0f042fd04bd17b88ccd"}, @ptm_cap={0x3}]}, 0x5, [{0x22, &(0x7f0000000780)=@string={0x22, 0x3, "97159f6cbd64159047cad5252d8eaeec1c7fba2f18dac6f144055acbaebb8caa"}}, {0xf3, &(0x7f00000007c0)=@string={0xf3, 0x3, "6aada6f2c8c958bca58523b571ed891c3d7f40ea09297554e52c0859e5b5baf55c0547f0a7d90b52734a912d6126afee04b43880101eb33fad0e8d2e80bdef21384148b86bf8fe55682a295b7096f7514266c3b1de1fb915d83a18008de8afadca4e6dc4a434d1726cdcd181e26f5e604160b1279d7c013bfa2fae440dc9084c87c9c13ce89f1b526a4697b478ec622641fb14e5a3239712ea23d6917d2b9e0a40eaea37d8db8edffc337ce4c8f157cbb371bbedc899f7f3940bff257db1e07ecf2f9bbf8de7f61515303eedc858986dfbc8d55e79e8376479f424728ac03f4d7508fbcf0ba577f684c2155b9e77c150af"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r5, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x20, 0x1, 0xc0, {0xc0, 0x31, "de4838b948cb55a5e53dd03a0ae781268882046dba8db75fb6b8bac86aa58f6f42221b5dd179a1ae445bf1aa78fd2b85ee82ab7f3fadbea12464bf894573a7e10a73b63ed8547e2e052f009c9fca1ca38ace6f060fb02e9f34686a634fbe4633d0fd4ed974ea4079511852338043a9ab0e5e28f3db54389807e61e0e116caaac3ade5905c34be77580ffd3693957c72c5ee075152bd01ab072b18c2e52e930581a41fc7dbc325548b35d5771947ca867fb0f4a5e537ba1146dba871bc019"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000b40)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xf7, 0x0, 0x0, 0x9}, @generic={0x26, 0x10, 0x1, "b9f4045dd5aedb25c4f01251baa2482d4fa1ad2556dfa32f53981d5746e2ebb0dac7e0"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x7, 0x6, 0x3, "09a50089", "fe084f9b"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x60, 0x9, 0x8, 0x22, 0x9, 0x7}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c40)={0x0, 0xc, 0x39, "012185f7e12b1e7ddc328963c6c788a30d304aaef364a6d6585a2b7610d0f096cabb7cbe8ade3d002e2b030b32b1ff993cdc1c389e1dbf75cd"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d00)={0x20, 0x0, 0x4}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x2, 0x20, [0xbc697e96a1b4ac99]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "2ab4"}, &(0x7f0000000e40)={0x40, 0xf, 0x2}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f00)={0x40, 0x19, 0x2, 'me'}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x81}}) r6 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x8, 0xf8, 0x10, 0x10}, {0x9, 0x5, 0x3, 0x2, 0x3ff, 0x67, 0x2, 0x3}, {0x9, 0x5, 0x6, 0x3, 0x8, 0x9, 0x9, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x40, 0x7, 0xa9, {0xa9, 0xf, "1be4afadd9597b3fd18d3595d72049594d430fde59a3409b1b62e9fa2350089b6c99eab730a1603e1cc94df97a81ebb8b78c67a1d2e7b137788995fc13f41e89f29b95187e26d7f79a6599ad01a94d1759eb01fbcefc44ca1d6b607c06da54d2744b3a6d264f9040b8e412a1d4d461cf96fc9b4dba6e69ccfd531443957a7e7b95280eaaa57c4cd03722767740d4c3688a56653ad3f41a10fd60c7bc07ed0c4215dbc4705f5a43"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f00000017c0)={0x1c, &(0x7f0000001280)={0x0, 0x14, 0xa3, "7f4309035958d59bbed4b2781bfd426b61b01ddd8d1aeb3908ece2e72e850cc7e83515d3e1e62f955a88c4163ee0bd0e16b1d48d1c909d3059a6db1c32d908443648d73f8219eddce8aaf33d7536245d779aa126fe8ba42ae02d877b3df25c5a4612df34aedd51329e03bb909c5aba40bb95bfb1748071c6c5d2ec0248137c1debd2f15cad0a3594bff00498ae3adb86b9dfab0658c45f4af6c18e8ff7c88d6520166c"}, &(0x7f0000001340)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001780)={0x21, 0x0, 0x3, "b5e111"}}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x2001, 0x21) clock_gettime(0x0, &(0x7f0000001880)={0x0, 0x0}) utimensat(r7, &(0x7f0000001840)='./file0\x00', &(0x7f00000018c0)={{0x77359400}, {r8, r9/1000+10000}}, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) write$P9_RREADDIR(r10, &(0x7f0000001940)={0xc5, 0x29, 0x2, {0x5, [{{0x2, 0x2, 0x7}, 0x6, 0x4b, 0x7, './file0'}, {{0x4, 0x2, 0x8}, 0x4, 0xb, 0x7, './file1'}, {{0x2, 0x4, 0x8}, 0x0, 0x7, 0x7, './file0'}, {{0x40, 0x2, 0x3}, 0x0, 0x0, 0x7, './file0'}, {{0x80, 0x4, 0x2}, 0x9, 0x2, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x5, 0x9, 0x7, './file0'}]}}, 0xc5) r11 = accept$unix(r10, 0x0, &(0x7f0000001a40)) connect$unix(r11, &(0x7f0000001a80)=@file={0x1, './file1\x00'}, 0x6e) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/power/mem_sleep', 0x111000, 0x44) r13 = getpgid(0x0) fcntl$lock(r12, 0x7, &(0x7f0000001b40)={0x2, 0x1, 0x7, 0xffffffffffffffff, r13}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) mount$9p_xen(&(0x7f0000001b80), &(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00), 0x200000, &(0x7f0000001c40)={'trans=xen,', {[{@ignoreqv}, {@posixacl}, {@posixacl}, {@access_client}], [{@smackfsroot}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}}) rename(&(0x7f0000001cc0)='./file1\x00', &(0x7f0000001d00)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f00)={r10, 0x58, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001f80)='bpf_lsm_xfrm_state_alloc\x00') r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002000)=@generic={&(0x7f0000001fc0)='./file1\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x11, 0x10, &(0x7f0000001d40)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r10}, @call={0x85, 0x0, 0x0, 0x14}, @map_val={0x18, 0xa, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r10}], &(0x7f0000001dc0)='GPL\x00', 0xe72, 0x72, &(0x7f0000001e00)=""/114, 0x41100, 0x0, '\x00', r14, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r15, r16, 0x6, 0x0, &(0x7f0000002040)=[{0x4, 0x1, 0xf, 0x7}, {0x4, 0x2, 0x9, 0x8}, {0x1, 0x4, 0x0, 0xa}, {0x4, 0x3, 0x9, 0x8}, {0x5, 0x4, 0x2, 0x8}, {0x4, 0x3, 0x10, 0x3}], 0x10, 0x3}, 0x94) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000002200)={0x14, &(0x7f0000002180)={0x20, 0xb, 0xf, {0xf, 0xc, "d1f83e871cf4d8fb68fc9b5df0"}}, &(0x7f00000021c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002440)={0x44, &(0x7f0000002240)={0x20, 0x17, 0x1f, "08c218daa142b3058c76a6668764442745f01e2f2675822b8170a805a19ad1"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0x64}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002300)={0x20, 0x80, 0x1c, {0xfff8, 0x2, 0x200, 0x5, 0xd, 0x2, 0x101, 0x1ff, 0x787, 0x0, 0x4, 0x200}}, &(0x7f0000002340)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002380)={0x20, 0x83, 0x2}, &(0x7f00000023c0)={0x20, 0x87, 0x2, 0xd}, &(0x7f0000002400)={0x20, 0x89, 0x2}}) 56.97174696s ago: executing program 2 (id=4652): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1000, 0x0}, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768bf6", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x1, 0x5, 0x8, 0x200}, {0x74, 0xd, 0x2, 0x10}, {0x6, 0xd, 0xbc, 0x4}]}) 56.138285536s ago: executing program 41 (id=4655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x88d00, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r5, @ANYRESOCT=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="00cc89ffffff0000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa2000000000000e598a4c68c6bb104f7c405ca07020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) 55.145921346s ago: executing program 2 (id=4661): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) (async) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) 54.921090009s ago: executing program 2 (id=4662): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 54.069892256s ago: executing program 2 (id=4667): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$char_usb(r1, &(0x7f0000000740)=""/133, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x20, &(0x7f0000000040)={&(0x7f0000000680)=""/125, 0x7d, 0x0, &(0x7f0000000800)=""/220, 0xdc}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x1b, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000002c0)={0x5, r7, 'id1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 54.044139597s ago: executing program 2 (id=4668): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) dup3(0xffffffffffffffff, r0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r5], 0x20}}, 0x0) 53.87269763s ago: executing program 2 (id=4673): syz_usb_connect(0x2, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="040100000cb768405e0483020b990102030109022400010000000009040040025c291d0009050900000000060009050ae5"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1a, 0x800, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r8) utimensat(r6, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x10a0c01, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=r5, @ANYRESOCT, @ANYRES16=r5], 0x23, 0x208, &(0x7f0000000440)="$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") syz_open_dev$ptys(0xc, 0x3, 0x0) r9 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_matches\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() r10 = socket$netlink(0x10, 0x3, 0x0) r11 = openat$cgroup_ro(r9, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$inet(r11, &(0x7f00000006c0)={&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f00000002c0)="bf355d4203af5fecb67e05d13f1044d26410a7932bd8ff81c4d635d08ab5082e24afe2d3a7094b2898a851ca3522626caffaa1c10deab349ca1d1dd3c969bd9c7f44983fcd65f759b3f0e88cd01857bb7952bbd26c2b9ae734b429ccdcd6d4b8859ac12cd8ce5393060815ee7c34a6447acff4b6bb4f7af7a716c51219b1dabc3195981613818e55f84b41b0081f551914087ee5c56fe8ef698d6c4ca1e7c0cda24482bc2d37d18cc513d8a1cfe451799afdeeb746e248c39af04a5ea208db53", 0xc0}, {&(0x7f0000000380)="d97fd0b1db785d1fc970209706397352430f70dc4cb51c3a5de667c44b77b1fa8b4d944a5b50c0e2fa993cad4d5817690a2ed1905a3d6868e7345ce62f24f5e59db1f7e6de2cc85a4c3709e85b282f5762dc312e2d91ca92f9e751f590abd06d2282cb162f0c60cb2c1424cda2d715e5e60c51e64390c80d5cf28aee81da88419b9d91", 0x83}], 0x2}, 0x20040894) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000015000100000000000000000002000000d83f6b2f6e2cbd78fe857fd2903158ccadb0003ce607fa4b462c6cbdb8302923392e609a71f1c10510a5967b45fac036196b7dcd7e543ab08ec3eb03d977dc190a56f044eea503747c974e9588577b006720564f91a88e27506489f1aa01a1ab1caae6bb1ce2116cced9787c306e0c88496ca413f007e9dbab17997a4c83e59b6c4e54a995a6a559b5b7471f901c", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = accept4$tipc(r9, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000780)={0x40, 0x2, 0x3}, 0x10) 52.910057319s ago: executing program 42 (id=4576): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone3(&(0x7f0000000580)={0x800000, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000440), {0x39}, &(0x7f0000000480)=""/44, 0x2c, &(0x7f00000014c0)=""/4096, &(0x7f0000000540)=[r0, r0, r0, r0], 0x4}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000) 49.846716498s ago: executing program 4 (id=4704): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xc24d2db5d25570d0, 0xa1fe9459aa13ceca, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 49.833648888s ago: executing program 4 (id=4705): syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_connect(0x2, 0x451, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xf, 0x4b, 0x36, 0x8, 0x12d1, 0xe26b, 0x1d70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43f, 0x1, 0x9, 0xc0, 0x20, 0x4, [{{0x9, 0x4, 0x4f, 0xf0, 0xc, 0xff, 0x3, 0x32, 0x3, [@generic={0x10, 0x9, "a84d8922090ee214fb5403be2ee5"}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0xff, "b4", "cb6ee1"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0x9a, "95", "cdf4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x1, 0x61, "c52607c66e967d20"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x4, 0x0, "e8b156a67c"}]}], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0x48, 0x40, 0x0, [@generic={0x8d, 0xd, "d108af620f5c24b6e7fc5e62c67e2dcfb694e7674ed0b80ff02f48ea276b7947e8ca9b1742f5e5501110ac2c843fccb8f15af2d59866c89d99645e3799d13877eef70d08cd87b29312bf0ae6d5f9f23fafd7a9399e59c8468e85f31b67f70d53b485c0911245190b14647f8cda84e2132acdc355b009ded17d5cc3ead227d4a935939dad4ee0d2669ca150"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0xc8, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x50, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xff, 0x2f, 0x80, [@generic={0x64, 0x5, "b175d62f7a95ded907c2762f101823c89edb601db66fdc037b4579896858576e15bf6da7887ded84691eb7fc74b1d286dbbfe8d3af0f92b9dd4c9f80eade884140139c6a6bca0d1e8921fa3d06091aee718c6dc915312358986734c8b9f31e263c53"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x5, 0x9, 0x2, [@generic={0xb, 0x23, "33d814df464e5388bd"}, @generic={0x7d, 0x4, "64d2a82f5e6d07e4f316a7e9b260fe6703d352c6b5f70388d34ae1c97212cf29c0bd661be16c18af96d39f04b5f95021a46ea4a2dceb9686f99a622a6236544cc0e3480b8f2633ec47f9fb261d1e01716c190cdab04c1d1f55e10b8d7a402002888abbe08d4afd62059a7b7c671ef6287a882ee80545aac3e9243e"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x7, 0x9, 0x7, [@generic={0x10, 0x11, "88fc4015be7d367caf729e3dc52e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x89, 0xc, 0x9}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x8, 0x1, 0x9, [@generic={0x9a, 0x3, "776da88dddd87cd89d46aa483d53ff1a7617c13a72d28670ce9b89fddd2dc2bdb3dd30983254c772a671b673a7a66dd70f9e38827e0d69bee32af5e82b6cba9bc37e6a50f0d45b00e4154d55ef462235c05b6c0462a6483a3e8d6805c886d4bce12d673458eae2613f3db7fbef2e4871d7fe46f96148f802f62940b9d5ea5346ac47dcd1e59f97727cf75c2d236de7fa54cd1195b127ccc1"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x40, 0x4, 0x1}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xc1, 0xd1, 0xff, [@generic={0xfe, 0x22, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x6}]}}, {{0x9, 0x5, 0xc, 0x11, 0x8, 0x9, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8d73}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x3a, 0xc0, 0x7, [@generic={0x22, 0x30, "a9975586a9f14821dc6f9492210d9f2a2cac91b768fb6c251df6c7ec3d854041"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x3c6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x8, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x6, 0x36}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x8, 0x2, 0x10, 0xfd}, 0x24, &(0x7f0000000040)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0x7, 0x5, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x75, "15ad287d91d67879d86b069ae103fce1"}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x100a}}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000e8036a24e3f09522489ee72de44a4b101da87882f5a29fb2330419256e43"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b5500005f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a0a08b55db183ec794a5d9953cd3e04ed42987344ab9528d5c797965c4696da13605033397fbc6a33784bcc44a085b6344f39a21e52b225d5dc87a8e9835a60dcdd96222ed3a16a7dd58ccfcb2846c2799f5612caed0361cbcecd6f69ec93f5075b38f872b0c25baae18776ba19eb32d5a380d696fef541e0c8bba19aa739e4314a6134ed00e4b1844f7fa03ee43a7e7c75f864bdc67aa5"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000080)='./file1\x00') r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f00000006c0)={{0x1, 0x0, 0x0, 0x3, 0x8}}) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="020000"]) 46.902374016s ago: executing program 1 (id=4719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000019080)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000004000000) unshare(0x40000300) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040) 46.425152295s ago: executing program 4 (id=4723): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'nr0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 46.117248051s ago: executing program 4 (id=4725): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733872b", 0x41, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) utime(&(0x7f0000000200)='./file0\x00', 0x0) 46.074074762s ago: executing program 4 (id=4726): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@test_dummy_encryption}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xdf, 0x475, &(0x7f0000000780)="$eJzs289vFFUcAPDvTLeAgGxFREGQKpo0/mhpQeVgYjSaeNDERA94rG0hyEINrYmQRqsxeDQk3o1HE/8CT56MejLxikcTQ0KUmIheXDO7M6VddssubNna/XySoe/NvHk/dubNvn2PCaBvDWf/JBHbI+JSRJTr0ZUJhut/rl1dmPr76sJUEtXqG78ntXR/XV2YquaK87bleY6kEeknSV5IDC7Pdu7c+VOTlcrM2Tw+Nn/63bG5c+efOnl68sTMiZkzE0ePHjk8/uwzE083qfWvFztq5ED+d+8Hs/v2vPLWxdemjl18+4evs/ru3l8/lLWjozzbMJw1/I/6Z9N47LFuF9Zj/1avtzMp9bo2tCvrGqW8c16KcgzE9YtXjpc/7mnlgDWVPbM3tz68WAU2sCR6XQOgN4ov+uz3b7HdoaHHunDlhfoPoKzd1/KtfqQUaZ5mcA3LH46IY4v/fJFt0TAPUW0ybwAAcLu+zcY/TzYb/6Wxe1m6Hfna0FBE3BMROyPi3ojYFRH3RdTS3h8RD3RY/nBD/MbxZ3r5lhrWpmz891y+trVy/FeM/mJoII/dXWv/YHL8ZGXmUP6ZjMTg5iw+3izzIouXfv6sVfnLx3/ZlpVfjAXzTC6X6hN0W4o905Pzk90alF75KGJvqVn7k6WVgCQi9kTE3s6y3lEETj7+1b5WiW7e/lV0YZ2p+mWRycJiNLS/kKy+Pjm2JSozh8aKu+JGP/504fVW5d9W+7sgu/5bV97/DSnKfybL12vnlg48324ZF375tOVvylL79/+S7P7flLxZW7PelO97f3J+/ux4xKbk1Vp8xf6J6+cW8SJ91v6Rg837/878nKz9D0ZEdhPvj4iHIuJAfu0ejohHIuLgKu3//sVH32l1bD1c/+mmz7+l+39o5fXvPDBw6rtvWpXf3vPvSC00ku+pPf9uonV1isdotufY3K1+bgAAAPB/kkbE9kjS0aVwmo6O1v8P/67YmlZm5+afOD773pnp+jsCQzGYFjNd5WXzoePJYp5jPT6RzxUXxw/n88afD9xVi49OzVame9x26HfbWvT/zG8Dva4dsOa8rwX9q7H/pz2qB3Dn+f6H/qX/Q/+6of97IEDfaNbdP2yIWwuAjaha7vgUE4SwYRjuQ//S/6F/6f/Ql27nvf61CpRWeXtfoMeBrRFRC0S6LuqzbgIH1lFvKnWhd/f4wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAl/wUAAP//xgL2dQ==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79, 0x0, 0x0, 0x48}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x1) 45.926621625s ago: executing program 1 (id=4727): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f00000001c0)="34100009bcb61764", &(0x7f0000000200)=""/166}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="6f99986f220fdbe71939b86b07c6847c9f2968b65c6cf948f1e9ad7c4d59e2a71c6e0c32790312c3f4ac8b513ea165dd35b3b0f990677f3d78724c"]) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@user_xattr}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000000400)={0x18, 0x0, r7, {0x8}}, 0x18) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r8 = openat(r5, &(0x7f0000000380)='./file1\x00', 0x5c1001, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) fallocate(r8, 0x8, 0x4000, 0x4000) 45.926364015s ago: executing program 4 (id=4728): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], &(0x7f0000000180)=""/260, 0x46, 0x104, 0x6}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], &(0x7f0000000180)=""/260, 0x46, 0x104, 0x6}, 0x28) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) (async) pipe2$9p(0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) 45.209441629s ago: executing program 1 (id=4736): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x2) io_setup(0x202, &(0x7f0000000200)=0x0) lchown(&(0x7f0000000000)='./file1\x00', 0xee01, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x191, &(0x7f00000002c0)="$eJzs3c+qElEcB/Cff5qkletoMdCmlVRPYIWCNBAULmpVYG00gtxMrXyL3qBX6XXClTsv3hHlyly4F64O1/l8Nn7xq5xzZjFnNWc+P/k+nfyYf/v77090Oo1o96Mfq0Z0oxmtKCwCADgnq/U6/q8LN/j56xNMCQA4slvu/wDAGbD/A0D92P8BoH4+fPz09lWWDd6naSdiucjH+bj4LPrhKBs8Ty919/9a5vm4tetfFH16tX8Qj7b9y9I+iWdPi37TvXmXHfQPY1I24X7jzq8BAAAAAAAAAAAAAAAAAAAAAACcWi/dKT3fp9dLrumLNBwl2+8Oz/dpx+N2yYDJUZYBAAAAAAAAAAAAAAAAAAAA99r81+/pl9ns609BEIRdqPrOBAAAAAAAAAAAAAAAAAAA9bN/6LfqmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAdfbv/z9e2IzTrHqhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU2kUAAAD//1z+TP8=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x40) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000040)) timer_settime(0x0, 0x5, 0x0, 0x0) timer_gettime(0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 45.002665743s ago: executing program 1 (id=4737): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x8000db3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 44.050812302s ago: executing program 1 (id=4738): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaacef63}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40812}, 0x20004050) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0xa20800, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) 44.050511882s ago: executing program 1 (id=4739): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) unshare(0x24020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab", 0x9) r7 = inotify_init() r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) close_range(r7, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 38.808801314s ago: executing program 43 (id=4673): syz_usb_connect(0x2, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="040100000cb768405e0483020b990102030109022400010000000009040040025c291d0009050900000000060009050ae5"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1a, 0x800, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r8) utimensat(r6, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x10a0c01, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=r5, @ANYRESOCT, @ANYRES16=r5], 0x23, 0x208, &(0x7f0000000440)="$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") syz_open_dev$ptys(0xc, 0x3, 0x0) r9 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_matches\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() r10 = socket$netlink(0x10, 0x3, 0x0) r11 = openat$cgroup_ro(r9, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$inet(r11, &(0x7f00000006c0)={&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f00000002c0)="bf355d4203af5fecb67e05d13f1044d26410a7932bd8ff81c4d635d08ab5082e24afe2d3a7094b2898a851ca3522626caffaa1c10deab349ca1d1dd3c969bd9c7f44983fcd65f759b3f0e88cd01857bb7952bbd26c2b9ae734b429ccdcd6d4b8859ac12cd8ce5393060815ee7c34a6447acff4b6bb4f7af7a716c51219b1dabc3195981613818e55f84b41b0081f551914087ee5c56fe8ef698d6c4ca1e7c0cda24482bc2d37d18cc513d8a1cfe451799afdeeb746e248c39af04a5ea208db53", 0xc0}, {&(0x7f0000000380)="d97fd0b1db785d1fc970209706397352430f70dc4cb51c3a5de667c44b77b1fa8b4d944a5b50c0e2fa993cad4d5817690a2ed1905a3d6868e7345ce62f24f5e59db1f7e6de2cc85a4c3709e85b282f5762dc312e2d91ca92f9e751f590abd06d2282cb162f0c60cb2c1424cda2d715e5e60c51e64390c80d5cf28aee81da88419b9d91", 0x83}], 0x2}, 0x20040894) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000015000100000000000000000002000000d83f6b2f6e2cbd78fe857fd2903158ccadb0003ce607fa4b462c6cbdb8302923392e609a71f1c10510a5967b45fac036196b7dcd7e543ab08ec3eb03d977dc190a56f044eea503747c974e9588577b006720564f91a88e27506489f1aa01a1ab1caae6bb1ce2116cced9787c306e0c88496ca413f007e9dbab17997a4c83e59b6c4e54a995a6a559b5b7471f901c", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = accept4$tipc(r9, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000780)={0x40, 0x2, 0x3}, 0x10) 34.704696194s ago: executing program 6 (id=4785): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000006c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20, 0x4, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) 34.622181815s ago: executing program 6 (id=4786): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000300)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x20, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x3, 0x5, 0x6, 0xfffd, 0x4}, @call={0x85, 0x0, 0x0, 0xd1}, @generic={0x6, 0x8, 0x9, 0x8001, 0x7ff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1a}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x44, &(0x7f0000000800)=""/68, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xd, 0x80000000, 0xcd}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000a00)=[{0x0, 0x1, 0xa, 0xc}, {0x1, 0xfffffffa, 0x4, 0xb}, {0x1, 0x2, 0x9, 0x2}, {0x5, 0x2, 0x5, 0x6}, {0x5, 0x3, 0x3, 0x7}, {0x4, 0x3, 0xb, 0x4}, {0x5, 0x1, 0x5, 0xa}, {0x0, 0x1}], 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r5 = getpgrp(0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/56, 0x38}], 0x2, 0x2, 0x5) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, 0x0, 0x20000000}, 0x20) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) set_tid_address(&(0x7f0000000180)) 34.590811906s ago: executing program 6 (id=4787): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x20, 0x7fffffff, 0x4, {{0x1d, 0x4, 0x0, 0x3a, 0x74, 0x65, 0x0, 0x6d, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x5f, [@private=0xa010100, @private=0xa010100]}, @rr={0x7, 0x17, 0xb6, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0xa010101]}, @ssrr={0x89, 0x7, 0x18, [@local]}, @timestamp={0x44, 0x28, 0x3d, 0x0, 0xf, [0x7fff, 0x1, 0x5, 0x6, 0x460, 0x1ff, 0x0, 0xfaad, 0x0]}, @ssrr={0x89, 0xf, 0xdb, [@empty, @remote, @multicast2]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x7fff}, 0x0) io_setup(0xffff, &(0x7f0000001080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) getpgid(0x0) r9 = dup3(r3, r2, 0x0) recvmmsg(r9, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1}, 0x96d}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/36, 0x24}], 0x1}, 0xffff}], 0x2, 0x40, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000002c0)=0x3f, 0x4) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 34.503686937s ago: executing program 6 (id=4788): socket$packet(0x11, 0x2, 0x300) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() pipe(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x14, r0, 0x1, 0xfffffffe, 0x0, {0x1c}}, 0x14}}, 0x0) gettid() open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) socket$inet6(0xa, 0x3, 0xff) 33.35880386s ago: executing program 6 (id=4792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) rmdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xff, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000c03, &(0x7f0000000000)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@dax}, {@max_batch_time}, {@grpjquota, 0x2e}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nobh}, {@nouser_xattr}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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") 33.282064102s ago: executing program 6 (id=4793): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x0, 0x40000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000010280)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES16, @ANYBLOB="0000fffffffffffffffffffffffd2e", @ANYRES16], 0x48) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000003d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sync() 30.688064872s ago: executing program 44 (id=4728): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], &(0x7f0000000180)=""/260, 0x46, 0x104, 0x6}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], &(0x7f0000000180)=""/260, 0x46, 0x104, 0x6}, 0x28) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) (async) pipe2$9p(0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) 29.061861164s ago: executing program 45 (id=4739): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) unshare(0x24020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab", 0x9) r7 = inotify_init() r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) close_range(r7, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 18.390293071s ago: executing program 9 (id=5089): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 18.298888033s ago: executing program 9 (id=5093): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0x70bd29}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008012) 18.278493493s ago: executing program 9 (id=5096): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 18.271914284s ago: executing program 46 (id=4793): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x0, 0x40000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000010280)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES16, @ANYBLOB="0000fffffffffffffffffffffffd2e", @ANYRES16], 0x48) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000003d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sync() 17.982022979s ago: executing program 9 (id=5105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0xffffff56) 17.931559941s ago: executing program 9 (id=5108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0xc) 17.830719622s ago: executing program 9 (id=5110): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x20, 0x11, 0x4, 0x8000, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext2\x00', 0x208000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.820913926s ago: executing program 8 (id=5516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) unshare(0x2a060400) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 3.686122658s ago: executing program 8 (id=5518): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000200)=""/69, 0xec0}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 3.556653961s ago: executing program 8 (id=5523): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 3.430966693s ago: executing program 8 (id=5527): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 3.375237214s ago: executing program 8 (id=5531): r0 = socket(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x11000002) 3.226817767s ago: executing program 8 (id=5538): openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sync() 2.819016385s ago: executing program 47 (id=5110): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x20, 0x11, 0x4, 0x8000, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext2\x00', 0x208000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.586721399s ago: executing program 3 (id=5588): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.56349545s ago: executing program 3 (id=5590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b020007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 1.442129282s ago: executing program 3 (id=5592): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x10) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) 930.660792ms ago: executing program 0 (id=5615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 930.464221ms ago: executing program 0 (id=5617): unshare(0x26020480) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) 894.640892ms ago: executing program 0 (id=5619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x604ab000) 838.336183ms ago: executing program 0 (id=5621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 837.948724ms ago: executing program 0 (id=5624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) truncate(0x0, 0x1000000) 778.801044ms ago: executing program 0 (id=5627): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0x0, 0xc003, 0x8, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff3d) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x6, 0x4, "a85c45a2c25cc646300200"}) r1 = syz_open_pts(r0, 0x1a1000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 778.727155ms ago: executing program 5 (id=5628): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 778.636444ms ago: executing program 5 (id=5629): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 776.937065ms ago: executing program 5 (id=5630): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 764.519465ms ago: executing program 5 (id=5631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 686.763707ms ago: executing program 5 (id=5633): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791017000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 686.540427ms ago: executing program 5 (id=5634): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) 640.912747ms ago: executing program 3 (id=5637): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 582.841539ms ago: executing program 3 (id=5638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) syslog(0x1, 0x0, 0x0) 571.917279ms ago: executing program 3 (id=5640): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f00000031c0)={0x1, 0x1, 0x8002, 0x8}) 374.694943ms ago: executing program 7 (id=5642): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 360.643233ms ago: executing program 7 (id=5643): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) r3 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000020000000000004000001800000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x64}}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) 142.819467ms ago: executing program 7 (id=5644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 142.689077ms ago: executing program 7 (id=5645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, {}, {0x0, 0x0, 0x4000000}, 0x0, 0x0, 0x2, 0x3, 0xdf}, [@encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in=@multicast1}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x14) 50.895719ms ago: executing program 7 (id=5646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000029c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040090}, 0x2008c014) 0s ago: executing program 7 (id=5647): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pwritev2(r0, 0x0, 0x0, 0x7c00, 0x0, 0x3) 0s ago: executing program 0 (id=5649): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/32], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): [ T24] audit: type=1400 audit(760.106:23005): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n20" dev="tmpfs" ino=17637 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 503.194233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.202597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.210311][ T24] audit: type=1400 audit(760.106:23006): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n20" dev="tmpfs" ino=17637 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 503.235367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.245738][T17303] device veth0_vlan entered promiscuous mode [ 503.266544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.284491][T17303] device veth1_macvtap entered promiscuous mode [ 503.291035][ T24] audit: type=1326 audit(760.196:23007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.6.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9344977be9 code=0x7ffc0000 [ 503.314487][ T24] audit: type=1326 audit(760.196:23008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.6.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9344977be9 code=0x7ffc0000 [ 503.333454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.345162][ T24] audit: type=1326 audit(760.216:23009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.6.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9344977be9 code=0x7ffc0000 [ 503.369025][ T24] audit: type=1326 audit(760.216:23010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.6.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9344977be9 code=0x7ffc0000 [ 503.393345][ T24] audit: type=1326 audit(760.216:23011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.6.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9344977be9 code=0x7ffc0000 [ 503.398357][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.434938][ T7734] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 503.442829][ T7734] usb 5-1: can't read configurations, error -61 [ 503.459833][T17291] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 503.576303][ T2770] usb 7-1: USB disconnect, device number 12 [ 503.583938][ T2770] cdc_eem 7-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.6-1, CDC EEM Device [ 503.594750][ T7734] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 503.838882][T17313] F2FS-fs (loop8): Unrecognized mount option "checkpoin'bt= [ 503.838882][T17313] isable" or missing value [ 504.084296][ T7] EXT4-fs error (device loop6): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 504.099928][ T7] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 504.112289][ T7] EXT4-fs (loop6): This should not happen!! Data will be lost [ 504.112289][ T7] [ 504.122505][ T7] EXT4-fs (loop6): Total free blocks count 0 [ 504.128789][ T7] EXT4-fs (loop6): Free/Dirty block details [ 504.134962][ T7] EXT4-fs (loop6): free_blocks=66060288 [ 504.140569][ T7] EXT4-fs (loop6): dirty_blocks=16 [ 504.146028][ T7] EXT4-fs (loop6): Block reservation details [ 504.152073][ T7] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 504.205713][T17336] exfat: Deprecated parameter 'namecase' [ 504.221499][T17336] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 504.234562][ T7734] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 504.242166][ T7734] usb 5-1: can't read configurations, error -61 [ 504.248828][ T7734] usb usb5-port1: attempt power cycle [ 504.266856][T17313] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 504.410350][T17342] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4687'. [ 504.598576][T17355] 9pnet: Insufficient options for proto=fd [ 504.694414][ T7734] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 504.805304][T17366] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 504.845670][T17366] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noauto_da_alloc,grpid,stripe=0x0000000000000000,jqfmt=vfsold,,errors=continue [ 504.964158][ T7734] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 504.977081][ T7734] usb 5-1: can't read configurations, error -61 [ 505.283907][ T7734] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 505.377305][T17386] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 505.401031][T17386] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.4699: invalid indirect mapped block 4294967295 (level 1) [ 505.416282][T17386] EXT4-fs (loop6): Remounting filesystem read-only [ 505.423169][T17386] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.4699: invalid indirect mapped block 4294967295 (level 1) [ 505.437791][T17386] EXT4-fs (loop6): 2 truncates cleaned up [ 505.443538][T17386] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff, [ 505.468792][T17386] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.4699: bg 0: block 5: invalid block bitmap [ 505.481414][T17386] EXT4-fs (loop6): Remounting filesystem read-only [ 505.494070][T17386] netem: change failed [ 505.534452][ T7734] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 505.542133][ T7734] usb 5-1: can't read configurations, error -61 [ 505.552323][ T7734] usb usb5-port1: unable to enumerate USB device [ 506.204941][T17420] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue [ 506.333442][ T7734] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 506.483312][T12846] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 506.575509][T17425] xt_TCPMSS: Only works on TCP SYN packets [ 506.693337][ T7734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.704303][ T7734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.714106][ T7734] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 506.723173][ T7734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.731955][ T7734] usb 5-1: config 0 descriptor?? [ 506.873305][T12846] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 506.883144][T12846] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 506.975407][T17409] udc-core: couldn't find an available UDC or it's busy [ 506.982405][T17409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 507.073096][T12846] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 507.082174][T12846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.090269][T12846] usb 9-1: Product: syz [ 507.094480][T12846] usb 9-1: Manufacturer: syz [ 507.099369][T12846] usb 9-1: SerialNumber: syz [ 507.112839][T12846] usb 9-1: config 0 descriptor?? [ 507.141831][T17420] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 507.204531][T17420] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 507.487068][T17420] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 507.495284][T17420] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 507.942959][T12846] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 508.363333][T17420] EXT4-fs error (device loop8): ext4_lookup:1830: inode #12: comm syz.8.4708: iget: bad i_size value: 2533274857506816 [ 508.381892][T17420] EXT4-fs error (device loop8): ext4_lookup:1830: inode #12: comm syz.8.4708: iget: bad i_size value: 2533274857506816 [ 508.395555][T17420] EXT4-fs error (device loop8): ext4_lookup:1830: inode #12: comm syz.8.4708: iget: bad i_size value: 2533274857506816 [ 508.408633][T17420] EXT4-fs error (device loop8): ext4_lookup:1830: inode #12: comm syz.8.4708: iget: bad i_size value: 2533274857506816 [ 508.424423][T17440] EXT4-fs: failed to create workqueue [ 508.429904][T17440] EXT4-fs (loop1): mount failed [ 508.434981][T12846] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 508.446812][T12846] usb 9-1: USB disconnect, device number 5 [ 508.616122][T17449] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 508.623510][T17449] EXT4-fs (loop6): Ignoring removed bh option [ 508.629893][T17449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 508.643934][T17449] EXT4-fs (loop6): 1 truncate cleaned up [ 508.649901][T17449] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,mblk_io_submit,bh,auto_da_alloc,barrier,noauto_da_alloc,nogrpid,,errors=continue [ 508.684655][T17449] syz.6.4716[17449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.684714][T17449] syz.6.4716[17449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.135718][ T24] kauditd_printk_skb: 111 callbacks suppressed [ 509.135743][ T24] audit: type=1400 audit(766.129:23123): avc: granted { setsecparam } for pid=17475 comm="syz.8.4722" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 509.222008][ T7734] usbhid 5-1:0.0: can't add hid device: -71 [ 509.228573][ T7734] usbhid: probe of 5-1:0.0 failed with error -71 [ 509.261840][ T7734] usb 5-1: USB disconnect, device number 74 [ 509.269127][ T24] audit: type=1400 audit(766.169:23124): avc: granted { setsecparam } for pid=17475 comm="syz.8.4722" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 509.487779][ T24] audit: type=1326 audit(766.479:23125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.527055][ T24] audit: type=1326 audit(766.479:23126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.550537][ T24] audit: type=1326 audit(766.479:23127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.578824][ T24] audit: type=1326 audit(766.479:23128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.602726][ T24] audit: type=1326 audit(766.479:23129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.661311][ T24] audit: type=1326 audit(766.479:23130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.727204][ T24] audit: type=1326 audit(766.479:23131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.775146][ T24] audit: type=1326 audit(766.479:23132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c73b5be9 code=0x7ffc0000 [ 509.838033][T17500] FAT-fs (loop6): Unrecognized mount option "&Ϭ V-N2S0 clpn߆ʳLyLՉȀ3ó]6[1AlBEF޻``e=z`9Jp"(TDo58ӈCҰ-X-،zq9-+C@.LR6# g/i j8ƏJ " or missing value [ 509.872907][T17492] 9pnet: Insufficient options for proto=fd [ 510.031219][T17501] EXT4-fs (loop1): Ignoring removed nobh option [ 510.042522][T17501] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 510.102420][T17501] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,user_xattr,dioread_nolock,,errors=continue [ 510.193841][T17492] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.4727: Allocating blocks 497-513 which overlap fs metadata [ 510.228357][T17492] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.4727: Allocating blocks 497-513 which overlap fs metadata [ 510.318766][T17522] FAT-fs (loop6): Directory bread(block 64) failed [ 510.325784][T17522] FAT-fs (loop6): Directory bread(block 65) failed [ 510.333329][T17522] FAT-fs (loop6): Directory bread(block 66) failed [ 510.339905][T17522] FAT-fs (loop6): Directory bread(block 67) failed [ 510.346572][T17522] FAT-fs (loop6): Directory bread(block 68) failed [ 510.353147][T17522] FAT-fs (loop6): Directory bread(block 69) failed [ 510.359715][T17522] FAT-fs (loop6): Directory bread(block 70) failed [ 510.366379][T17522] FAT-fs (loop6): Directory bread(block 71) failed [ 510.372962][T17522] FAT-fs (loop6): Directory bread(block 72) failed [ 510.379620][T17522] FAT-fs (loop6): Directory bread(block 73) failed [ 510.481898][T17525] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 510.490327][T17525] EXT4-fs (loop1): invalid journal inode [ 510.496937][T17525] EXT4-fs (loop1): can't get journal size [ 510.504338][T17525] EXT4-fs (loop1): 1 truncate cleaned up [ 510.510012][T17525] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 510.621253][ T2770] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 511.021083][ T2770] usb 9-1: not running at top speed; connect to a high speed hub [ 511.101100][ T2770] usb 9-1: config 1 interface 0 altsetting 27 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.111006][ T2770] usb 9-1: config 1 interface 0 altsetting 27 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.124245][ T2770] usb 9-1: config 1 interface 0 has no altsetting 0 [ 511.291040][ T2770] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.300303][ T2770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.308311][ T2770] usb 9-1: Product: ␁ [ 511.312563][ T2770] usb 9-1: Manufacturer: ᐄ [ 511.317235][ T2770] usb 9-1: SerialNumber: ᐄ [ 511.669800][ T2770] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 511.682577][ T2770] usb 9-1: USB disconnect, device number 6 [ 511.733223][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4740'. [ 511.742338][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4740'. [ 512.020566][ T7734] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 512.260409][ T7734] usb 7-1: Using ep0 maxpacket: 32 [ 512.360401][T12845] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 512.390545][ T7734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.401743][ T7734] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 512.410838][ T7734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.419886][ T7734] usb 7-1: config 0 descriptor?? [ 512.600271][T12845] usb 9-1: Using ep0 maxpacket: 16 [ 512.720272][T12845] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.730421][T12845] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.890222][T12845] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 512.899257][T12845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.907259][T12845] usb 9-1: Product: syz [ 512.911426][T12845] usb 9-1: Manufacturer: syz [ 512.915999][T12845] usb 9-1: SerialNumber: syz [ 512.921533][T12845] usb 9-1: config 0 descriptor?? [ 512.950124][ T7734] usbhid 7-1:0.0: can't add hid device: -71 [ 512.956136][ T7734] usbhid: probe of 7-1:0.0 failed with error -71 [ 512.963432][ T7734] usb 7-1: USB disconnect, device number 13 [ 513.172614][T12845] usb 9-1: USB disconnect, device number 7 [ 513.709756][ T7734] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 514.209507][ T7734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 514.220809][ T7734] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 514.229916][ T7734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.238756][ T7734] usb 7-1: config 0 descriptor?? [ 514.599813][ T7734] usbhid 7-1:0.0: can't add hid device: -71 [ 514.605797][ T7734] usbhid: probe of 7-1:0.0 failed with error -71 [ 514.622510][ T7734] usb 7-1: USB disconnect, device number 14 [ 514.846329][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4753'. [ 514.855583][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4753'. [ 515.409658][T17589] EXT4-fs (loop6): Ignoring removed nobh option [ 515.418300][T17589] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue [ 515.534951][T17601] device wireguard0 entered promiscuous mode [ 515.717240][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4757'. [ 515.813128][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 515.813141][ T24] audit: type=1400 audit(772.802:23191): avc: denied { write } for pid=17610 comm="syz.6.4759" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 515.903849][ T24] audit: type=1400 audit(772.892:23192): avc: denied { create } for pid=17614 comm="syz.6.4760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 516.809658][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4764'. [ 516.819281][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4764'. [ 516.874430][T17629] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.881547][T17629] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.889879][T17629] device bridge_slave_0 entered promiscuous mode [ 516.897310][T17629] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.904385][T17629] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.911980][T17629] device bridge_slave_1 entered promiscuous mode [ 516.968128][T17629] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.975198][T17629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.982497][T17629] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.989536][T17629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.013140][T17636] erofs: (device loop6): mounted with root inode @ nid 36. [ 517.022145][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.031082][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.046718][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 517.054645][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.082063][T17629] device veth0_vlan entered promiscuous mode [ 517.095784][T17629] device veth1_macvtap entered promiscuous mode [ 517.144697][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.153333][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.162677][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.171310][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.179699][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 517.187079][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 517.194855][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.203330][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.211483][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.239724][T17641] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 517.398062][ T24] audit: type=1326 audit(774.373:23193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 517.447475][ T24] audit: type=1326 audit(774.373:23194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 517.594570][ T24] audit: type=1326 audit(774.383:23195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 517.621157][ T24] audit: type=1326 audit(774.383:23196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 518.616895][ T24] audit: type=1326 audit(774.383:23197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 518.755706][ T24] audit: type=1326 audit(774.383:23198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 518.780237][ T24] audit: type=1326 audit(774.383:23199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 518.804315][ T24] audit: type=1326 audit(774.383:23200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.8.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 519.126567][T17672] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 519.134653][T17672] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 519.143782][T17672] EXT4-fs (loop9): 1 truncate cleaned up [ 519.149698][T17672] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 519.996540][T12848] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 520.676417][T12848] usb 9-1: New USB device found, idVendor=05fd, idProduct=0004, bcdDevice=26.50 [ 520.687021][T12848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.695034][T12848] usb 9-1: Product: syz [ 520.699514][T12848] usb 9-1: Manufacturer: syz [ 520.704115][T12848] usb 9-1: SerialNumber: syz [ 520.713733][T12848] usb 9-1: config 0 descriptor?? [ 520.902402][ T24] kauditd_printk_skb: 101 callbacks suppressed [ 520.902414][ T24] audit: type=1400 audit(777.894:23302): avc: denied { bind } for pid=17721 comm="syz.6.4785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.939959][T17724] syz.6.4786[17724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.940007][T17724] syz.6.4786[17724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.952270][T17724] syz.6.4786[17724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.964037][T17724] syz.6.4786[17724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.981663][T17724] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4786'. [ 521.010851][T12848] usb 9-1: USB disconnect, device number 8 [ 521.101091][ T24] audit: type=1400 audit(778.095:23303): avc: denied { ioctl } for pid=17728 comm="syz.6.4788" path="socket:[77523]" dev="sockfs" ino=77523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 521.557000][T17733] EXT4-fs (loop8): Ignoring removed nobh option [ 521.564693][T17733] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue [ 521.791033][ T24] audit: type=1326 audit(778.785:23304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 521.814706][ T24] audit: type=1326 audit(778.805:23305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 521.837997][ T24] audit: type=1326 audit(778.805:23306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 521.881704][ T24] audit: type=1326 audit(778.805:23307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 521.964673][ T24] audit: type=1326 audit(778.805:23308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 521.995838][ T24] audit: type=1326 audit(778.825:23309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 522.020960][ T24] audit: type=1326 audit(778.825:23310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 522.045598][ T24] audit: type=1326 audit(778.825:23311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4aa5fbabe9 code=0x7ffc0000 [ 522.256358][T17744] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 522.303231][T17744] exFAT-fs (loop9): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 522.303231][T17744] [ 522.315799][T17744] exFAT-fs (loop9): Filesystem has been set read-only [ 522.325791][T17751] tipc: Enabling of bearer rejected, already enabled [ 523.426738][T17770] device bridge_slave_1 left promiscuous mode [ 523.433023][T17770] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.440880][T17770] device bridge_slave_0 left promiscuous mode [ 523.447082][T17770] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.537301][T17772] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 523.607172][T17772] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4800'. [ 523.889286][T17792] EXT4-fs (loop9): Ignoring removed nobh option [ 523.906888][T17792] EXT4-fs warning (device loop9): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 523.922297][T17792] EXT4-fs (loop9): mount failed [ 523.929694][T17797] EXT4-fs error (device loop8): ext4_acquire_dquot:6226: comm syz.8.4806: Failed to acquire dquot type 0 [ 523.941937][T17797] EXT4-fs error (device loop8): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 523.956544][T17797] EXT4-fs error (device loop8) in ext4_do_update_inode:5336: error 27 [ 523.965331][T17797] EXT4-fs error (device loop8): ext4_dirty_inode:6143: inode #13: comm syz.8.4806: mark_inode_dirty error [ 523.976909][T17797] EXT4-fs error (device loop8) in ext4_do_update_inode:5336: error 27 [ 523.985250][T17797] EXT4-fs error (device loop8): __ext4_ext_dirty:182: inode #13: comm syz.8.4806: mark_inode_dirty error [ 523.996860][T17797] EXT4-fs error (device loop8) in ext4_do_update_inode:5336: error 27 [ 524.012363][T17797] EXT4-fs error (device loop8) in ext4_orphan_del:3292: error 27 [ 524.020445][T17797] EXT4-fs error (device loop8) in ext4_do_update_inode:5336: error 27 [ 524.029029][T17797] EXT4-fs error (device loop8): ext4_truncate:4390: inode #13: comm syz.8.4806: mark_inode_dirty error [ 524.040375][T17797] EXT4-fs error (device loop8) in ext4_orphan_cleanup:3108: error 27 [ 524.049104][T17797] EXT4-fs (loop8): 1 truncate cleaned up [ 524.054920][T17797] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 524.066252][T17803] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 524.269508][T17812] udc-core: couldn't find an available UDC or it's busy [ 524.276606][T17812] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 524.338612][T17814] erofs: (device loop9): mounted with root inode @ nid 36. [ 524.359249][ T41] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 524.378437][T17814] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 524.442323][T17814] x_tables: duplicate underflow at hook 1 [ 524.554267][T12850] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 524.944269][T12850] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 524.974035][T12850] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 524.989476][T12850] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 524.998602][T12850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.042584][T17818] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.049883][T17818] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.057601][T17818] device bridge_slave_0 entered promiscuous mode [ 525.064695][T17818] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.071718][T17818] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.079242][T17818] device bridge_slave_1 entered promiscuous mode [ 525.083570][T17824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17824 comm=syz.9.4811 [ 525.123382][T17818] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.130460][T17818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.137786][T17818] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.144834][T17818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.166584][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.173855][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.181498][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.189873][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.199268][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.207544][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.214577][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.223772][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.232246][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.239314][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.253838][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.270062][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.280983][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.289967][T12850] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 525.296253][T17818] device veth0_vlan entered promiscuous mode [ 525.298348][T12850] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input55 [ 525.303483][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.320358][T12850] input: failed to attach handler kbd to device input55, error: -5 [ 525.321535][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.337051][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.344104][T12850] usb 9-1: USB disconnect, device number 9 [ 525.354325][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.364079][T17818] device veth1_macvtap entered promiscuous mode [ 525.374443][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.385122][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.630252][ T6900] print_req_error: 40 callbacks suppressed [ 525.630269][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 525.649419][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 525.656795][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.662284][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.677136][ T6900] buffer_io_error: 25 callbacks suppressed [ 525.677148][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 525.684892][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.705413][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.717194][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.729687][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.741863][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.752448][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.764269][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.772456][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.784072][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.798566][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 525.812085][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 525.823678][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.833760][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.836431][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 525.842096][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 525.993584][ T24] kauditd_printk_skb: 187 callbacks suppressed [ 525.993619][ T24] audit: type=1326 audit(782.987:23496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fea63647457 code=0x7ffc0000 [ 526.073949][T17844] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 526.206873][T17844] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 526.219333][ T24] audit: type=1326 audit(782.987:23497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fea6364a38a code=0x7ffc0000 [ 526.250859][T17844] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.4814: corrupted in-inode xattr [ 526.266494][T17844] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.4814: couldn't read orphan inode 15 (err -117) [ 526.278941][T17844] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue [ 526.290829][ T24] audit: type=1326 audit(783.287:23498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea63647550 code=0x7ffc0000 [ 526.314573][ T24] audit: type=1326 audit(783.317:23499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fea63647937 code=0x7ffc0000 [ 526.341346][ T24] audit: type=1326 audit(783.317:23500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea63647550 code=0x7ffc0000 [ 526.364973][ T24] audit: type=1326 audit(783.317:23501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea636487eb code=0x7ffc0000 [ 526.388121][ T24] audit: type=1326 audit(783.317:23502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fea6364784a code=0x7ffc0000 [ 526.411365][ T24] audit: type=1326 audit(783.317:23503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 526.435237][ T24] audit: type=1326 audit(783.317:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 526.458531][ T24] audit: type=1326 audit(783.317:23505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.7.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 526.615980][T17859] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.623343][T17859] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.630838][T17859] device bridge_slave_0 entered promiscuous mode [ 526.638139][T17859] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.645247][T17859] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.652638][T17859] device bridge_slave_1 entered promiscuous mode [ 526.696289][T17859] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.703377][T17859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.710654][T17859] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.717707][T17859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.737007][T17865] erofs: (device loop8): mounted with root inode @ nid 36. [ 526.745096][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.752960][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.761938][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.853450][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.861783][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.868853][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.877028][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.885476][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.892548][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.900084][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.908268][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.051241][T17871] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue [ 527.150021][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.196892][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.214984][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.222682][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.238190][T17859] device veth0_vlan entered promiscuous mode [ 527.250344][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.259288][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.276267][T17859] device veth1_macvtap entered promiscuous mode [ 527.289830][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.297514][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.306421][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.322438][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.330866][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.545891][T17902] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4833'. [ 527.565338][T17902] 9pnet: Could not find request transport: rdma [ 527.729146][T17911] loop9: p1 p2 p3 p4 [ 527.735046][T17911] loop9: p2 start 151000334 is beyond EOD, truncated [ 527.741988][T17911] loop9: p3 start 331777 is beyond EOD, truncated [ 527.748518][T17911] loop9: p4 size 263168 extends beyond EOD, truncated [ 527.839629][T14689] udevd[14689]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 527.922629][ T7734] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 527.985296][T17940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 527.993400][T17940] System zones: 1-3, 19-19, 35-36 [ 527.998880][T17944] syz.5.4850[17944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.998954][T17944] syz.5.4850[17944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.011892][T17940] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,debug,,errors=continue [ 528.292516][ T7734] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 528.315352][ T7734] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 528.326329][ T7734] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 528.336002][ T7734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.575601][T17962] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 528.590328][T17962] EXT4-fs (loop8): barriers disabled [ 528.595828][T17962] JBD2: no valid journal superblock found [ 528.601616][T17962] EXT4-fs (loop8): error loading journal [ 528.662214][ T7734] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 528.672763][ T7734] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input56 [ 528.712290][ T7734] input: failed to attach handler kbd to device input56, error: -5 [ 528.757365][ T7734] usb 8-1: USB disconnect, device number 5 [ 528.976514][T17983] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4866'. [ 529.062399][T17993] syz.5.4871[17993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.062468][T17993] syz.5.4871[17993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.085747][T17993] syz.5.4871[17993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.098045][T17993] syz.5.4871[17993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.180309][T18005] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4877'. [ 529.207964][T18003] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 529.236534][T18003] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.4876: bg 0: block 5: invalid block bitmap [ 529.249296][T18003] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 529.251542][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4878'. [ 529.267396][T18003] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #11: comm syz.7.4876: invalid indirect mapped block 3 (level 2) [ 529.281705][T18003] EXT4-fs (loop7): 2 truncates cleaned up [ 529.291327][T18003] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue [ 529.298974][T18012] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.4879' sets config #0 [ 529.371380][T18016] device veth0_to_team entered promiscuous mode [ 529.492076][T18031] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4888'. [ 529.611810][T18038] EXT4-fs (loop7): Unrecognized mount option "hash" or missing value [ 529.713078][T18046] syz.7.4893[18046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.713185][T18046] syz.7.4893[18046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.808499][T18056] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4899'. [ 529.911018][T18050] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 530.233607][T18078] syz.8.4906[18078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 530.233825][T18078] syz.8.4906[18078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 530.945796][T18082] serio: Serial port ptm0 [ 531.008496][ T24] kauditd_printk_skb: 104 callbacks suppressed [ 531.008511][ T24] audit: type=1400 audit(788.000:23610): avc: denied { read write } for pid=18086 comm="syz.5.4909" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 531.047703][ T24] audit: type=1400 audit(788.040:23612): avc: denied { open } for pid=18086 comm="syz.5.4909" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 531.083092][T14689] print_req_error: 171 callbacks suppressed [ 531.083137][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 531.083220][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 531.095882][ T24] audit: type=1326 audit(788.030:23611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18091 comm="syz.8.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 531.150906][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.186472][T14689] buffer_io_error: 128 callbacks suppressed [ 531.186483][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 531.200749][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.214277][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.271914][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 531.280123][ T24] audit: type=1400 audit(788.040:23613): avc: denied { ioctl } for pid=18086 comm="syz.5.4909" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 531.305487][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 531.313932][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.325325][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 531.343375][ T24] audit: type=1326 audit(788.040:23614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18091 comm="syz.8.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 531.355698][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.378331][ T24] audit: type=1326 audit(788.040:23615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18091 comm="syz.8.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 531.402234][ T24] audit: type=1326 audit(788.040:23616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18091 comm="syz.8.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 531.406087][T18107] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 531.434226][ T24] audit: type=1326 audit(788.040:23617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18091 comm="syz.8.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 531.434244][ T24] audit: type=1326 audit(788.040:23618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18091 comm="syz.8.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 531.434261][ T24] audit: type=1326 audit(788.050:23619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18091 comm="syz.8.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40efcb1be9 code=0x7ffc0000 [ 531.434363][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 531.434687][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.524993][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 531.624787][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 531.653383][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 531.675387][T18112] attempt to access beyond end of device [ 531.675387][T18112] loop9: rw=0, want=1041, limit=128 [ 531.682239][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 531.690740][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 531.731389][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 531.748094][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 532.022561][T18143] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 532.751318][T18177] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 532.783082][T18177] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 532.795703][T18177] FAT-fs (loop8): Filesystem has been set read-only [ 532.796677][T18175] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 532.808372][T18177] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 532.813665][T18175] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 532.833137][T18175] JBD2: no valid journal superblock found [ 532.839089][T18175] EXT4-fs (loop7): error loading journal [ 532.921350][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4947'. [ 533.300380][T18228] netlink: 'syz.8.4964': attribute type 4 has an invalid length. [ 533.308161][T18228] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4964'. [ 533.385929][T18226] attempt to access beyond end of device [ 533.385929][T18226] loop9: rw=2049, want=153, limit=128 [ 533.435207][T18226] attempt to access beyond end of device [ 533.435207][T18226] loop9: rw=2049, want=233, limit=128 [ 533.472218][ T315] attempt to access beyond end of device [ 533.472218][ T315] loop9: rw=1, want=1041, limit=128 [ 533.738162][T18239] FAT-fs (loop9): Unrecognized mount option "n^VWtO*Iodots" or missing value [ 533.754214][ T6900] udevd[6900]: symlink '../../loop9' '/dev/disk/by-uuid/8AF2-58AF.tmp-b7:9' failed: Read-only file system [ 534.401762][T18262] 9pnet: Could not find request transport: rdma [ 534.515617][T18274] EXT4-fs (loop8): Ignoring removed bh option [ 534.525520][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 534.534898][T18274] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 534.546516][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 534.570438][T18274] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,nobarrier,noblock_validity,sb=0x0000000000000001,bh,errors=remount-ro, [ 534.598831][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 534.622567][T18284] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4992'. [ 534.725143][T18295] bpf_get_probe_write_proto: 4 callbacks suppressed [ 534.725150][T18295] syz.8.4997[18295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.731931][T18295] syz.8.4997[18295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.989994][T18316] EXT4-fs (loop9): Invalid log block size: 7 [ 535.001348][ T6900] udevd[6900]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 535.131618][T18337] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5016'. [ 535.170652][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 535.182204][T18339] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 535.194873][T18339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 535.203539][T18339] EXT4-fs (loop8): orphan cleanup on readonly fs [ 535.210221][T18339] EXT4-fs error (device loop8): ext4_orphan_get:1395: inode #13: comm syz.8.5017: iget: bad i_size value: 12154761577498 [ 535.223376][T18339] EXT4-fs error (device loop8): ext4_orphan_get:1400: comm syz.8.5017: couldn't read orphan inode 13 (err -117) [ 535.237070][T18339] EXT4-fs (loop8): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue [ 535.254710][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 535.284446][T18352] device bond_slave_1 entered promiscuous mode [ 535.291152][T18352] device bond_slave_1 left promiscuous mode [ 535.371258][T14689] udevd[14689]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 535.389458][T18348] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 535.400760][ T6900] udevd[6900]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 535.436359][T18348] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3342: comm syz.7.5020: Allocating blocks 385-513 which overlap fs metadata [ 535.452501][T18347] EXT4-fs (loop7): pa ffff8881401f43f0: logic 16, phys. 129, len 24 [ 535.460635][T18347] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 8 [ 535.487454][T18375] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5031'. [ 535.602316][ T7044] udevd[7044]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 535.644083][T18379] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 535.664129][T18389] EXT4-fs (loop9): Ignoring removed bh option [ 535.724178][T18389] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 535.899751][T18423] netem: change failed [ 535.907906][T18424] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5051'. [ 535.934834][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5054'. [ 536.041282][ T24] kauditd_printk_skb: 228 callbacks suppressed [ 536.041296][ T24] audit: type=1400 audit(793.042:23848): avc: denied { read } for pid=18440 comm="syz.5.5060" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.072717][ T24] audit: type=1400 audit(793.042:23849): avc: denied { open } for pid=18440 comm="syz.5.5060" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.101738][ T24] audit: type=1400 audit(793.042:23850): avc: denied { ioctl } for pid=18440 comm="syz.5.5060" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.143832][ T24] audit: type=1400 audit(793.142:23851): avc: denied { bind } for pid=18443 comm="syz.8.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.163361][ T24] audit: type=1400 audit(793.142:23852): avc: denied { write } for pid=18443 comm="syz.8.5061" path="socket:[79848]" dev="sockfs" ino=79848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.203161][T18448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18448 comm=syz.5.5063 [ 536.240119][ T24] audit: type=1400 audit(793.242:23853): avc: denied { write } for pid=18453 comm="syz.5.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 536.395004][ T24] audit: type=1400 audit(793.392:23854): avc: denied { write } for pid=18457 comm="syz.5.5068" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 536.582414][ T24] audit: type=1400 audit(793.582:23855): avc: denied { append } for pid=18463 comm="syz.9.5070" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 536.628498][T18468] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5072'. [ 536.665283][T18472] device veth0 entered promiscuous mode [ 536.671317][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5074'. [ 536.682377][ T6900] print_req_error: 244 callbacks suppressed [ 536.682394][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 536.703377][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 536.705057][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.715666][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.726724][ T6900] buffer_io_error: 182 callbacks suppressed [ 536.726736][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 536.737364][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 536.759686][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.771382][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 536.779828][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.790701][ T24] audit: type=1400 audit(793.782:23856): avc: denied { load_policy } for pid=18475 comm="syz.7.5076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 536.791898][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 536.815255][T18476] SELinux: ebitmap: truncated map [ 536.823487][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.829137][T18476] SELinux: failed to load policy [ 536.846715][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 536.854925][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.867812][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 536.882559][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 536.899135][ T6629] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 536.916157][ T6629] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 536.925231][ T24] audit: type=1400 audit(793.922:23857): avc: denied { setopt } for pid=18480 comm="syz.7.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.950404][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 536.959680][ T6629] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 536.968805][ T6629] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 537.033204][T18490] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 537.060122][T18490] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm : Failed to acquire dquot type 1 [ 537.071273][T18490] EXT4-fs (loop9): 1 truncate cleaned up [ 537.077068][T18490] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 537.077088][T18493] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 537.147921][T18493] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #16: comm syz.7.5084: invalid indirect mapped block 4294967295 (level 0) [ 537.164175][T18493] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #16: comm syz.7.5084: invalid indirect mapped block 4294967295 (level 1) [ 537.200524][T18493] EXT4-fs (loop7): 1 orphan inode deleted [ 537.206283][T18493] EXT4-fs (loop7): 1 truncate cleaned up [ 537.214807][T18493] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 537.279739][T18508] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 537.322166][T18508] EXT4-fs error (device loop8) in ext4_do_update_inode:5336: error 27 [ 537.335602][T18508] EXT4-fs error (device loop8): ext4_dirty_inode:6143: inode #2: comm syz.8.5090: mark_inode_dirty error [ 537.357735][T18508] EXT4-fs error (device loop8) in ext4_do_update_inode:5336: error 27 [ 537.506674][T18529] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.539423][T18529] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.553518][T18529] device bridge_slave_0 entered promiscuous mode [ 537.566386][T18529] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.573522][T18529] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.581057][T18529] device bridge_slave_1 entered promiscuous mode [ 537.682971][T18529] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.690060][T18529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.696114][T18550] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 537.697418][T18529] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.714154][T18529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.731383][T18550] EXT4-fs (loop7): 1 truncate cleaned up [ 537.737053][T18550] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./bus,bsdgroups,lazytime,noload,,errors=continue [ 537.752641][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.761108][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.768874][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.786483][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.796653][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.803741][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.811957][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.820503][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.827575][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.846598][T18562] syz.5.5109[18562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.846668][T18562] syz.5.5109[18562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.859858][T18553] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 537.897180][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.909246][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.925042][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.937844][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.946082][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.953815][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.971138][T18529] device veth0_vlan entered promiscuous mode [ 538.012178][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.034763][T18529] device veth1_macvtap entered promiscuous mode [ 538.049827][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 538.059003][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 538.106857][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.150084][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 538.191085][T18587] device pim6reg1 entered promiscuous mode [ 538.379870][T18608] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5130: bg 0: block 248: padding at end of block bitmap is not set [ 538.399860][T18608] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.5130: Failed to acquire dquot type 1 [ 538.411835][T18608] EXT4-fs (loop3): 1 truncate cleaned up [ 538.418030][T18608] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 538.526169][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x4 [ 538.534923][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x2 [ 538.543229][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.551477][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.571101][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.578984][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.587631][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.595604][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.601579][T18640] syz.5.5144[18640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.603438][T18640] syz.5.5144[18640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.604000][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.642918][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.650876][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.660477][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.669284][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.682501][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.690614][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.700024][ T2768] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 538.715667][ T2768] hid-generic 0000:3000000:0000.0022: hidraw0: HID v0.00 Device [sy] on syz0 [ 538.740570][T18649] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5148'. [ 538.789338][T18654] fido_id[18654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 538.829305][T18658] device veth0 entered promiscuous mode [ 538.838817][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5152'. [ 539.181257][T18677] loop8: p1 p2[DM] p3 p4 [ 539.209915][T18677] loop8: p1 size 196608 extends beyond EOD, truncated [ 539.279107][T18677] loop8: p2 start 4292936063 is beyond EOD, truncated [ 539.301416][T18677] loop8: p3 size 11730944 extends beyond EOD, truncated [ 539.311684][T18677] loop8: p4 size 50331648 extends beyond EOD, truncated [ 539.613107][ T6629] udevd[6629]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 539.626916][T14689] udevd[14689]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 539.660320][ T6900] udevd[6900]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 539.682805][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5170'. [ 539.870421][T18712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 539.883709][ T6900] udevd[6900]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 539.896478][T18712] EXT4-fs (loop3): 1 truncate cleaned up [ 539.902239][T18712] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nombcache,inlinecrypt,errors=remount-ro,nombcache,minixdf,noquota,usrjquota=, [ 539.919440][T18722] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5179'. [ 539.927148][T18712] EXT4-fs warning (device loop3): ext4_group_add:1682: No reserved GDT blocks, can't resize [ 540.035216][T18732] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 540.050583][ T6900] udevd[6900]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 540.064474][T18732] EXT4-fs (loop3): Ignoring removed bh option [ 540.070787][T18732] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 540.089464][ T6900] udevd[6900]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 540.106272][ T6900] udevd[6900]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 540.124964][T18743] hub 2-0:1.0: USB hub found [ 540.130870][T18743] hub 2-0:1.0: 1 port detected [ 540.131874][T18732] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue [ 540.169694][T18749] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 540.183964][T18749] EXT4-fs (loop7): 1 truncate cleaned up [ 540.190091][T18749] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,nombcache,inlinecrypt,errors=remount-ro,nombcache,minixdf,noquota,usrjquota=, [ 540.208387][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 540.208678][T18749] EXT4-fs warning (device loop7): ext4_group_add:1682: No reserved GDT blocks, can't resize [ 540.251033][T18752] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 540.374460][T18752] EXT4-fs (loop8): Ignoring removed orlov option [ 540.394621][T18752] EXT4-fs (loop8): can't enable nombcache during remount [ 540.404665][T18762] SELinux: failed to load policy [ 540.440363][ T6857] udevd[6857]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 540.468116][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 540.508678][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5196'. [ 540.518690][T18767] syz.7.5197[18767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.518768][T18767] syz.7.5197[18767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.607253][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5200'. [ 540.656694][T18775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5200'. [ 540.666427][T18778] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5202'. [ 540.705943][T18782] IPv6: NLM_F_CREATE should be specified when creating new route [ 540.838778][T18790] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 541.149634][T18812] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 541.164458][ T24] kauditd_printk_skb: 126 callbacks suppressed [ 541.164472][ T24] audit: type=1326 audit(798.165:23980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.215380][ T24] audit: type=1326 audit(798.165:23981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.241764][ T24] audit: type=1326 audit(798.175:23982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.265020][T18833] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5209'. [ 541.265210][ T24] audit: type=1326 audit(798.195:23983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.298663][ T24] audit: type=1326 audit(798.205:23984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.324796][ T24] audit: type=1326 audit(798.205:23985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.348482][ T24] audit: type=1326 audit(798.205:23986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.374431][ T24] audit: type=1326 audit(798.205:23987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.397497][ T24] audit: type=1326 audit(798.205:23988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 541.495398][ T24] audit: type=1400 audit(798.495:23989): avc: denied { execute } for pid=18845 comm="+}[@" dev="tmpfs" ino=4174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 541.630724][T18871] SELinux: ebitmap start bit (17) is not a multiple of the map unit size (64) [ 541.641698][T18871] SELinux: failed to load policy [ 541.669088][T18875] SELinux: policydb table sizes (149,0) do not match mine (8,7) [ 541.677675][T18875] SELinux: failed to load policy [ 541.953782][T18883] EXT4-fs (loop3): Ignoring removed orlov option [ 541.982271][T18883] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 542.088039][T18891] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 542.104146][T18891] EXT4-fs (loop8): 1 truncate cleaned up [ 542.110180][T18891] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota, [ 542.637554][ T6900] print_req_error: 349 callbacks suppressed [ 542.637571][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 542.652205][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 542.666512][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.678822][ T6900] buffer_io_error: 260 callbacks suppressed [ 542.678833][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 542.703755][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.717122][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 542.729283][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.741415][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 542.754080][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.772916][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 542.782144][T18922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5263'. [ 542.791351][T18922] netem: change failed [ 542.796648][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.800076][T18915] Alternate GPT is invalid, using primary GPT. [ 542.816242][T18915] loop3: p2 p3 p7 [ 542.820418][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 542.828635][T14689] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.841263][T14689] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 542.853450][ T95] Alternate GPT is invalid, using primary GPT. [ 542.859980][ T95] loop3: p2 p3 p7 [ 542.957127][ T6900] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 542.958635][ T6629] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 542.973052][ T6900] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 542.991774][ T6629] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 543.000332][ T6629] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 543.011752][T18927] tipc: Enabling of bearer rejected, failed to enable media [ 543.022121][ T6629] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 543.223167][T18962] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5280'. [ 543.272430][T18964] SELinux: failed to load policy [ 543.320985][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5286'. [ 543.777138][T18984] loop3: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 543.778348][T18984] loop3: p1 size 100663296 extends beyond EOD, truncated [ 543.876356][T18984] loop3: p2 start 591104 is beyond EOD, truncated [ 543.882940][T18984] loop3: p3 start 33572980 is beyond EOD, truncated [ 543.892350][T18984] loop3: p5 size 100663296 extends beyond EOD, truncated [ 543.904235][T18984] loop3: p6 start 591104 is beyond EOD, truncated [ 543.911386][T18984] loop3: p7 size 100663296 extends beyond EOD, truncated [ 543.921345][T18984] loop3: p8 start 591104 is beyond EOD, truncated [ 543.928300][T18984] loop3: p9 size 100663296 extends beyond EOD, truncated [ 543.938525][T18984] loop3: p10 start 591104 is beyond EOD, truncated [ 543.957727][T18984] loop3: p11 size 100663296 extends beyond EOD, truncated [ 543.969534][T18984] loop3: p12 start 591104 is beyond EOD, truncated [ 543.977453][T18984] loop3: p13 size 100663296 extends beyond EOD, truncated [ 544.002498][T18984] loop3: p14 start 591104 is beyond EOD, truncated [ 544.009853][T18984] loop3: p15 size 100663296 extends beyond EOD, truncated [ 544.048542][T18984] loop3: p16 start 591104 is beyond EOD, truncated [ 544.055296][T18984] loop3: p17 size 100663296 extends beyond EOD, truncated [ 544.063084][T18984] loop3: p18 start 591104 is beyond EOD, truncated [ 544.070030][T18984] loop3: p19 size 100663296 extends beyond EOD, truncated [ 544.077941][T18984] loop3: p20 start 591104 is beyond EOD, truncated [ 544.084775][T18984] loop3: p21 size 100663296 extends beyond EOD, truncated [ 544.092535][T18984] loop3: p22 start 591104 is beyond EOD, truncated [ 544.101014][T18984] loop3: p23 size 100663296 extends beyond EOD, truncated [ 544.131669][T18984] loop3: p24 start 591104 is beyond EOD, truncated [ 544.143697][T18984] loop3: p25 size 100663296 extends beyond EOD, truncated [ 544.165435][T18984] loop3: p26 start 591104 is beyond EOD, truncated [ 544.172173][T18984] loop3: p27 size 100663296 extends beyond EOD, truncated [ 544.181944][T18984] loop3: p28 start 591104 is beyond EOD, truncated [ 544.188512][T18984] loop3: p29 size 100663296 extends beyond EOD, truncated [ 544.196427][T18984] loop3: p30 start 591104 is beyond EOD, truncated [ 544.203184][T18984] loop3: p31 size 100663296 extends beyond EOD, truncated [ 544.212926][T18984] loop3: p32 start 591104 is beyond EOD, truncated [ 544.220655][T18984] loop3: p33 size 100663296 extends beyond EOD, truncated [ 544.234712][T18984] loop3: p34 start 591104 is beyond EOD, truncated [ 544.241246][T18984] loop3: p35 size 100663296 extends beyond EOD, truncated [ 544.254522][T18984] loop3: p36 start 591104 is beyond EOD, truncated [ 544.262591][T18984] loop3: p37 size 100663296 extends beyond EOD, truncated [ 544.271268][T18984] loop3: p38 start 591104 is beyond EOD, truncated [ 544.281442][T18984] loop3: p39 size 100663296 extends beyond EOD, truncated [ 544.293266][T18984] loop3: p40 start 591104 is beyond EOD, truncated [ 544.301478][T18984] loop3: p41 size 100663296 extends beyond EOD, truncated [ 544.325637][T18984] loop3: p42 start 591104 is beyond EOD, truncated [ 544.332173][T18984] loop3: p43 size 100663296 extends beyond EOD, truncated [ 544.349661][T18984] loop3: p44 start 591104 is beyond EOD, truncated [ 544.356424][T18984] loop3: p45 size 100663296 extends beyond EOD, truncated [ 544.381493][T18984] loop3: p46 start 591104 is beyond EOD, truncated [ 544.388534][T18984] loop3: p47 size 100663296 extends beyond EOD, truncated [ 544.422986][T18984] loop3: p48 start 591104 is beyond EOD, truncated [ 544.432309][T18984] loop3: p49 size 100663296 extends beyond EOD, truncated [ 544.440101][T18984] loop3: p50 start 591104 is beyond EOD, truncated [ 544.448556][T18984] loop3: p51 size 100663296 extends beyond EOD, truncated [ 544.456311][T18984] loop3: p52 start 591104 is beyond EOD, truncated [ 544.462886][T18984] loop3: p53 size 100663296 extends beyond EOD, truncated [ 544.497898][T19023] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 544.503195][T18984] loop3: p54 start 591104 is beyond EOD, truncated [ 544.513421][T18984] loop3: p55 size 100663296 extends beyond EOD, truncated [ 544.521080][T18984] loop3: p56 start 591104 is beyond EOD, truncated [ 544.527627][T18984] loop3: p57 size 100663296 extends beyond EOD, truncated [ 544.536794][T18984] loop3: p58 start 591104 is beyond EOD, truncated [ 544.543332][T18984] loop3: p59 size 100663296 extends beyond EOD, truncated [ 544.554537][T19023] EXT4-fs error (device loop7) in ext4_do_update_inode:5336: error 27 [ 544.562916][T19029] EXT4-fs (loop8): error: journal path ./bus is not a block device [ 544.562934][T18984] loop3: p60 start 591104 is beyond EOD, truncated [ 544.589726][T18984] loop3: p61 size 100663296 extends beyond EOD, truncated [ 544.594532][T19023] EXT4-fs error (device loop7): ext4_dirty_inode:6143: inode #18: comm syz.7.5306: mark_inode_dirty error [ 544.598135][T18984] loop3: p62 start 591104 is beyond EOD, truncated [ 544.616157][T18984] loop3: p63 size 100663296 extends beyond EOD, truncated [ 544.623931][T18984] loop3: p64 start 591104 is beyond EOD, truncated [ 544.629846][T19023] EXT4-fs error (device loop7) in ext4_do_update_inode:5336: error 27 [ 544.630508][T18984] loop3: p65 size 100663296 extends beyond EOD, truncated [ 544.631166][T18984] loop3: p66 start 591104 is beyond EOD, [ 544.639299][T19023] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2959: inode #18: comm syz.7.5306: mark_inode_dirty error [ 544.646506][T18984] truncated [ 544.652493][T19023] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #18: comm syz.7.5306: mark inode dirty (error -27) [ 544.664304][T18984] loop3: p67 size 100663296 extends beyond EOD, [ 544.667634][T19023] EXT4-fs warning (device loop7): ext4_evict_inode:303: xattr delete (err -27) [ 544.679729][T18984] truncated [ 544.698650][T18984] loop3: p68 start 591104 is beyond EOD, truncated [ 544.705214][T18984] loop3: p69 size 100663296 extends beyond EOD, truncated [ 544.713363][T18984] loop3: p70 start 591104 is beyond EOD, truncated [ 544.722418][T18984] loop3: p71 size 100663296 extends beyond EOD, truncated [ 544.726478][ T6857] udevd[6857]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 544.730626][T18984] loop3: p72 start 591104 is beyond EOD, truncated [ 544.756963][T18984] loop3: p73 size 100663296 extends beyond EOD, truncated [ 544.765000][T18984] loop3: p74 start 591104 is beyond EOD, truncated [ 544.771530][T18984] loop3: p75 size 100663296 extends beyond EOD, truncated [ 544.787668][T18984] loop3: p76 start 591104 is beyond EOD, truncated [ 544.806362][T18984] loop3: p77 size 100663296 extends beyond EOD, truncated [ 544.814571][T18984] loop3: p78 start 591104 is beyond EOD, truncated [ 544.826122][T18984] loop3: p79 size 100663296 extends beyond EOD, truncated [ 544.833939][T18984] loop3: p80 start 591104 is beyond EOD, truncated [ 544.840641][T18984] loop3: p81 size 100663296 extends beyond EOD, truncated [ 544.848290][T18984] loop3: p82 start 591104 is beyond EOD, truncated [ 544.854993][T18984] loop3: p83 size 100663296 extends beyond EOD, truncated [ 544.862594][T18984] loop3: p84 start 591104 is beyond EOD, truncated [ 544.869189][T18984] loop3: p85 size 100663296 extends beyond EOD, truncated [ 544.876940][T18984] loop3: p86 start 591104 is beyond EOD, truncated [ 544.883490][T18984] loop3: p87 size 100663296 extends beyond EOD, truncated [ 544.891283][T18984] loop3: p88 start 591104 is beyond EOD, truncated [ 544.893907][T19041] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 544.897871][T18984] loop3: p89 size 100663296 extends beyond EOD, [ 544.920528][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 544.922110][T18984] truncated [ 544.943501][T19041] EXT4-fs (loop8): 1 truncate cleaned up [ 544.949222][T19041] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 544.952355][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 544.980232][T18984] loop3: p90 start 591104 is beyond EOD, truncated [ 544.986957][T18984] loop3: p91 size 100663296 extends beyond EOD, truncated [ 544.994565][T18984] loop3: p92 start 591104 is beyond EOD, truncated [ 545.001089][T18984] loop3: p93 size 100663296 extends beyond EOD, truncated [ 545.010153][T18984] loop3: p94 start 591104 is beyond EOD, truncated [ 545.016764][T18984] loop3: p95 size 100663296 extends beyond EOD, truncated [ 545.024547][T18984] loop3: p96 start 591104 is beyond EOD, truncated [ 545.031068][T18984] loop3: p97 size 100663296 extends beyond EOD, truncated [ 545.039070][T18984] loop3: p98 start 591104 is beyond EOD, truncated [ 545.045634][T18984] loop3: p99 size 100663296 extends beyond EOD, truncated [ 545.050087][T19041] EXT4-fs error (device loop8): __ext4_iget:5008: inode #12: block 2: comm syz.8.5314: invalid block [ 545.054478][T18984] loop3: p100 start 591104 is beyond EOD, truncated [ 545.070325][T18984] loop3: p101 size 100663296 extends beyond EOD, truncated [ 545.076740][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 545.078162][T18984] loop3: p102 start 591104 is beyond EOD, truncated [ 545.095560][T18984] loop3: p103 size 100663296 extends beyond EOD, truncated [ 545.103250][T18984] loop3: p104 start 591104 is beyond EOD, truncated [ 545.114114][T18984] loop3: p105 size 100663296 extends beyond EOD, truncated [ 545.124744][T19041] EXT4-fs (loop8): Remounting filesystem read-only [ 545.131530][T18984] loop3: p106 start 591104 is beyond EOD, truncated [ 545.138327][T18984] loop3: p107 size 100663296 extends beyond EOD, truncated [ 545.146195][T18984] loop3: p108 start 591104 is beyond EOD, truncated [ 545.152851][T18984] loop3: p109 size 100663296 extends beyond EOD, truncated [ 545.160553][T18984] loop3: p110 start 591104 is beyond EOD, truncated [ 545.167498][T18984] loop3: p111 size 100663296 extends beyond EOD, truncated [ 545.175245][T18984] loop3: p112 start 591104 is beyond EOD, truncated [ 545.181976][T18984] loop3: p113 size 100663296 extends beyond EOD, truncated [ 545.189678][T18984] loop3: p114 start 591104 is beyond EOD, truncated [ 545.196889][T18984] loop3: p115 size 100663296 extends beyond EOD, truncated [ 545.205006][T18984] loop3: p116 start 591104 is beyond EOD, truncated [ 545.211789][T18984] loop3: p117 size 100663296 extends beyond EOD, truncated [ 545.219546][T18984] loop3: p118 start 591104 is beyond EOD, truncated [ 545.226232][T18984] loop3: p119 size 100663296 extends beyond EOD, truncated [ 545.233986][T18984] loop3: p120 start 591104 is beyond EOD, truncated [ 545.240596][T18984] loop3: p121 size 100663296 extends beyond EOD, truncated [ 545.248355][T18984] loop3: p122 start 591104 is beyond EOD, truncated [ 545.255003][T18984] loop3: p123 size 100663296 extends beyond EOD, truncated [ 545.262711][T18984] loop3: p124 start 591104 is beyond EOD, truncated [ 545.269386][T18984] loop3: p125 size 100663296 extends beyond EOD, truncated [ 545.277148][T18984] loop3: p126 start 591104 is beyond EOD, truncated [ 545.283764][T18984] loop3: p127 size 100663296 extends beyond EOD, truncated [ 545.298466][T18984] loop3: p128 start 591104 is beyond EOD, truncated [ 545.303433][T19059] __nla_validate_parse: 1 callbacks suppressed [ 545.303443][T19059] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5320'. [ 545.305347][T18984] loop3: p129 size 100663296 extends beyond EOD, truncated [ 545.332686][T18984] loop3: p130 start 591104 is beyond EOD, truncated [ 545.339541][T18984] loop3: p131 size 100663296 extends beyond EOD, truncated [ 545.347494][T18984] loop3: p132 start 591104 is beyond EOD, truncated [ 545.348308][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 545.354456][T18984] loop3: p133 size 100663296 extends beyond EOD, truncated [ 545.372008][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 545.374456][T18984] loop3: p134 start 591104 is beyond EOD, truncated [ 545.389093][T19061] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 545.392333][T18984] loop3: p135 size 100663296 extends beyond EOD, truncated [ 545.409102][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 545.422448][T18984] loop3: p136 start 591104 is beyond EOD, truncated [ 545.429337][T18984] loop3: p137 size 100663296 extends beyond EOD, truncated [ 545.437291][T18984] loop3: p138 start 591104 is beyond EOD, truncated [ 545.444330][T18984] loop3: p139 size 100663296 extends beyond EOD, truncated [ 545.452099][T18984] loop3: p140 start 591104 is beyond EOD, truncated [ 545.458842][T18984] loop3: p141 size 100663296 extends beyond EOD, truncated [ 545.466554][T18984] loop3: p142 start 591104 is beyond EOD, truncated [ 545.473241][T18984] loop3: p143 size 100663296 extends beyond EOD, truncated [ 545.480932][T18984] loop3: p144 start 591104 is beyond EOD, truncated [ 545.487772][T18984] loop3: p145 size 100663296 extends beyond EOD, truncated [ 545.495641][T18984] loop3: p146 start 591104 is beyond EOD, truncated [ 545.502357][T18984] loop3: p147 size 100663296 extends beyond EOD, truncated [ 545.510297][T18984] loop3: p148 start 591104 is beyond EOD, truncated [ 545.517142][T18984] loop3: p149 size 100663296 extends beyond EOD, truncated [ 545.524953][T18984] loop3: p150 start 591104 is beyond EOD, truncated [ 545.531734][T18984] loop3: p151 size 100663296 extends beyond EOD, truncated [ 545.539707][T18984] loop3: p152 start 591104 is beyond EOD, truncated [ 545.546548][T18984] loop3: p153 size 100663296 extends beyond EOD, truncated [ 545.554572][T18984] loop3: p154 start 591104 is beyond EOD, truncated [ 545.561283][T18984] loop3: p155 size 100663296 extends beyond EOD, truncated [ 545.569168][T18984] loop3: p156 start 591104 is beyond EOD, truncated [ 545.576037][T18984] loop3: p157 size 100663296 extends beyond EOD, truncated [ 545.583915][T18984] loop3: p158 start 591104 is beyond EOD, truncated [ 545.590625][T18984] loop3: p159 size 100663296 extends beyond EOD, truncated [ 545.598780][T18984] loop3: p160 start 591104 is beyond EOD, truncated [ 545.605477][T18984] loop3: p161 size 100663296 extends beyond EOD, truncated [ 545.613429][T18984] loop3: p162 start 591104 is beyond EOD, truncated [ 545.620092][T18984] loop3: p163 size 100663296 extends beyond EOD, truncated [ 545.628049][T18984] loop3: p164 start 591104 is beyond EOD, truncated [ 545.634717][T18984] loop3: p165 size 100663296 extends beyond EOD, truncated [ 545.642378][T18984] loop3: p166 start 591104 is beyond EOD, truncated [ 545.649052][T18984] loop3: p167 size 100663296 extends beyond EOD, truncated [ 545.656737][T18984] loop3: p168 start 591104 is beyond EOD, truncated [ 545.663340][T18984] loop3: p169 size 100663296 extends beyond EOD, truncated [ 545.671104][T18984] loop3: p170 start 591104 is beyond EOD, truncated [ 545.678010][T18984] loop3: p171 size 100663296 extends beyond EOD, truncated [ 545.687167][T18984] loop3: p172 start 591104 is beyond EOD, truncated [ 545.693909][T18984] loop3: p173 size 100663296 extends beyond EOD, truncated [ 545.702896][T18984] loop3: p174 start 591104 is beyond EOD, truncated [ 545.709937][T18984] loop3: p175 size 100663296 extends beyond EOD, truncated [ 545.719075][T18984] loop3: p176 start 591104 is beyond EOD, truncated [ 545.725838][T18984] loop3: p177 size 100663296 extends beyond EOD, truncated [ 545.734790][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5324'. [ 545.748573][T18984] loop3: p178 start 591104 is beyond EOD, truncated [ 545.755315][T18984] loop3: p179 size 100663296 extends beyond EOD, truncated [ 545.766335][T18984] loop3: p180 start 591104 is beyond EOD, truncated [ 545.783778][T18984] loop3: p181 size 100663296 extends beyond EOD, truncated [ 545.793055][T18984] loop3: p182 start 591104 is beyond EOD, truncated [ 545.800646][T18984] loop3: p183 size 100663296 extends beyond EOD, truncated [ 545.871437][T18984] loop3: p184 start 591104 is beyond EOD, truncated [ 545.900072][T18984] loop3: p185 size 100663296 extends beyond EOD, truncated [ 545.910996][T18984] loop3: p186 start 591104 is beyond EOD, truncated [ 545.918310][T18984] loop3: p187 size 100663296 extends beyond EOD, truncated [ 545.929384][T18984] loop3: p188 start 591104 is beyond EOD, truncated [ 545.936522][T18984] loop3: p189 size 100663296 extends beyond EOD, truncated [ 545.947358][T18984] loop3: p190 start 591104 is beyond EOD, truncated [ 545.957837][T18984] loop3: p191 size 100663296 extends beyond EOD, truncated [ 545.995827][T18984] loop3: p192 start 591104 is beyond EOD, truncated [ 546.002761][T18984] loop3: p193 size 100663296 extends beyond EOD, truncated [ 546.014950][T18984] loop3: p194 start 591104 is beyond EOD, truncated [ 546.038895][T18984] loop3: p195 size 100663296 extends beyond EOD, truncated [ 546.070744][T18984] loop3: p196 start 591104 is beyond EOD, truncated [ 546.078064][T18984] loop3: p197 size 100663296 extends beyond EOD, truncated [ 546.105596][T18984] loop3: p198 start 591104 is beyond EOD, truncated [ 546.120994][T18984] loop3: p199 size 100663296 extends beyond EOD, truncated [ 546.145033][T18984] loop3: p200 start 591104 is beyond EOD, truncated [ 546.157146][T19087] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5331'. [ 546.180070][T18984] loop3: p201 size 100663296 extends beyond EOD, truncated [ 546.189445][T18984] loop3: p202 start 591104 is beyond EOD, truncated [ 546.196873][T18984] loop3: p203 size 100663296 extends beyond EOD, truncated [ 546.224646][T18984] loop3: p204 start 591104 is beyond EOD, truncated [ 546.232513][T18984] loop3: p205 size 100663296 extends beyond EOD, truncated [ 546.243200][T18984] loop3: p206 start 591104 is beyond EOD, truncated [ 546.262164][T18984] loop3: p207 size 100663296 extends beyond EOD, truncated [ 546.286689][T18984] loop3: p208 start 591104 is beyond EOD, truncated [ 546.310448][T18984] loop3: p209 size 100663296 extends beyond EOD, truncated [ 546.344621][T18984] loop3: p210 start 591104 is beyond EOD, truncated [ 546.360265][T18984] loop3: p211 size 100663296 extends beyond EOD, truncated [ 546.384084][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 546.384099][ T24] audit: type=1326 audit(803.397:24014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.438543][ T24] audit: type=1326 audit(803.427:24015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.462696][ T24] audit: type=1326 audit(803.427:24016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.494000][ T24] audit: type=1326 audit(803.427:24017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.517339][T18984] loop3: p212 start 591104 is beyond EOD, truncated [ 546.536530][ T24] audit: type=1326 audit(803.427:24018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.538112][T18984] loop3: p213 size 100663296 extends beyond EOD, [ 546.559688][ T24] audit: type=1326 audit(803.427:24019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.559707][ T24] audit: type=1326 audit(803.427:24020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.559725][ T24] audit: type=1326 audit(803.427:24021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.559743][ T24] audit: type=1326 audit(803.427:24022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.559760][ T24] audit: type=1326 audit(803.427:24023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.5.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f321261bbe9 code=0x7ffc0000 [ 546.563000][T19101] tmpfs: Unsupported parameter 'mpol' [ 546.659175][T18984] truncated [ 546.692960][T18984] loop3: p214 start 591104 is beyond EOD, truncated [ 546.707905][T18984] loop3: p215 size 100663296 extends beyond EOD, truncated [ 546.716639][T18984] loop3: p216 start 591104 is beyond EOD, truncated [ 546.724131][T18984] loop3: p217 size 100663296 extends beyond EOD, truncated [ 546.732070][T18984] loop3: p218 start 591104 is beyond EOD, truncated [ 546.738993][T18984] loop3: p219 size 100663296 extends beyond EOD, truncated [ 546.749702][T18984] loop3: p220 start 591104 is beyond EOD, truncated [ 546.756800][T18984] loop3: p221 size 100663296 extends beyond EOD, truncated [ 546.764692][T18984] loop3: p222 start 591104 is beyond EOD, truncated [ 546.771400][T18984] loop3: p223 size 100663296 extends beyond EOD, truncated [ 546.779322][T18984] loop3: p224 start 591104 is beyond EOD, truncated [ 546.787950][T18984] loop3: p225 size 100663296 extends beyond EOD, truncated [ 546.796118][T18984] loop3: p226 start 591104 is beyond EOD, truncated [ 546.802823][T18984] loop3: p227 size 100663296 extends beyond EOD, truncated [ 546.812304][T18984] loop3: p228 start 591104 is beyond EOD, truncated [ 546.819311][T18984] loop3: p229 size 100663296 extends beyond EOD, truncated [ 546.827162][T18984] loop3: p230 start 591104 is beyond EOD, truncated [ 546.833972][T18984] loop3: p231 size 100663296 extends beyond EOD, truncated [ 546.842442][T18984] loop3: p232 start 591104 is beyond EOD, truncated [ 546.850329][T18984] loop3: p233 size 100663296 extends beyond EOD, truncated [ 546.858669][T18984] loop3: p234 start 591104 is beyond EOD, truncated [ 546.865450][T18984] loop3: p235 size 100663296 extends beyond EOD, truncated [ 546.873535][T18984] loop3: p236 start 591104 is beyond EOD, truncated [ 546.880255][T18984] loop3: p237 size 100663296 extends beyond EOD, truncated [ 546.889632][T18984] loop3: p238 start 591104 is beyond EOD, truncated [ 546.909735][T18984] loop3: p239 size 100663296 extends beyond EOD, truncated [ 546.933426][T18984] loop3: p240 start 591104 is beyond EOD, truncated [ 546.951004][T18984] loop3: p241 size 100663296 extends beyond EOD, truncated [ 546.958988][T18984] loop3: p242 start 591104 is beyond EOD, truncated [ 546.965778][T18984] loop3: p243 size 100663296 extends beyond EOD, truncated [ 546.973702][T18984] loop3: p244 start 591104 is beyond EOD, truncated [ 546.980429][T18984] loop3: p245 size 100663296 extends beyond EOD, truncated [ 546.989235][T18984] loop3: p246 start 591104 is beyond EOD, truncated [ 546.995935][T18984] loop3: p247 size 100663296 extends beyond EOD, truncated [ 547.003742][T18984] loop3: p248 start 591104 is beyond EOD, truncated [ 547.010430][T18984] loop3: p249 size 100663296 extends beyond EOD, truncated [ 547.018341][T18984] loop3: p250 start 591104 is beyond EOD, truncated [ 547.025058][T18984] loop3: p251 size 100663296 extends beyond EOD, truncated [ 547.032796][T18984] loop3: p252 start 591104 is beyond EOD, truncated [ 547.039500][T18984] loop3: p253 size 100663296 extends beyond EOD, truncated [ 547.047267][T18984] loop3: p254 start 591104 is beyond EOD, truncated [ 547.053908][T18984] loop3: p255 size 100663296 extends beyond EOD, truncated [ 547.198787][ T7044] udevd[7044]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 547.209703][T16699] udevd[16699]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 547.221359][ T7060] udevd[7060]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 547.309756][T19140] SELinux: failed to load policy [ 547.390484][T19143] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5356'. [ 547.426294][T19144] EXT4-fs error (device loop3): ext4_orphan_get:1421: comm syz.3.5354: bad orphan inode 17 [ 547.458031][T19144] ext4_test_bit(bit=16, block=4) = 1 [ 547.470878][T19144] is_bad_inode(inode)=0 [ 547.477335][T19144] NEXT_ORPHAN(inode)=0 [ 547.481676][T19144] max_ino=32 [ 547.485198][T19144] i_nlink=1 [ 547.488553][T19144] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 547.547224][T19154] syz.5.5360[19154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.547276][T19154] syz.5.5360[19154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.691116][T19162] netem: incorrect gi model size [ 547.707831][T19162] netem: change failed [ 547.773369][T19131] print_req_error: 174 callbacks suppressed [ 547.773385][T19131] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.773904][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.779345][T19131] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.813603][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.817072][T19131] buffer_io_error: 128 callbacks suppressed [ 547.817084][T19131] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 547.839408][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 547.839549][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.859863][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 547.915971][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.951609][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 547.967010][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.980154][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 547.993374][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.016349][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 548.064154][T19131] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 548.085754][T19131] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.097662][T19131] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 548.111082][ T6900] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 548.120940][ T6900] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 548.129849][ T6900] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 548.695804][T19216] tipc: Started in network mode [ 548.700724][T19216] tipc: Own node identity dea3d974ced2, cluster identity 4711 [ 548.708515][T19216] tipc: Enabled bearer , priority 0 [ 548.716936][T19211] loop3: p1 p2 p3 p4 [ 548.725748][T19213] tipc: Resetting bearer [ 548.736282][T19211] loop3: p3 start 331777 is beyond EOD, truncated [ 548.746458][T19211] loop3: p4 size 262144 extends beyond EOD, truncated [ 548.754198][T19213] tipc: Disabling bearer [ 548.758345][ T95] loop3: p1 p2 p3 p4 [ 548.765474][ T95] loop3: p3 start 331777 is beyond EOD, truncated [ 548.771984][ T95] loop3: p4 size 262144 extends beyond EOD, truncated [ 548.928819][T19233] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue [ 548.936351][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5399'. [ 549.014812][T19247] device veth0_to_team entered promiscuous mode [ 549.176255][T19272] serio: Serial port ttyS3 [ 549.214897][T19277] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 549.438235][T19297] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue [ 549.476374][T19297] EXT4-fs (loop8): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 549.643336][T19317] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5432'. [ 549.684903][T19323] loop9: unable to read partition table [ 549.690821][T19323] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 549.690821][T19323] ) failed (rc=-5) [ 549.761868][T19328] device syzkaller0 entered promiscuous mode [ 549.903286][T19131] udevd[19131]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 549.927361][T19350] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue [ 549.967119][T19128] udevd[19128]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 550.050443][T19131] udevd[19131]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 550.062490][T19368] EXT4-fs (loop3): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 550.075234][T19131] udevd[19131]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 550.104930][T19375] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 550.400282][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5477'. [ 550.554840][T19436] syz.3.5488[19436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.554906][T19436] syz.3.5488[19436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.627834][T19442] attempt to access beyond end of device [ 550.627834][T19442] loop3: rw=2049, want=234, limit=128 [ 550.673558][T19449] SELinux: failed to load policy [ 550.824263][T19131] udevd[19131]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 550.843362][T19131] udevd[19131]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 550.860004][T19464] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 550.875835][T19131] udevd[19131]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 550.902995][T19464] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5501: bg 0: block 393: padding at end of block bitmap is not set [ 550.917572][T19464] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 550.930199][T19464] EXT4-fs (loop8): This should not happen!! Data will be lost [ 550.930199][T19464] [ 550.940088][T19464] EXT4-fs (loop8): Total free blocks count 0 [ 550.946791][T19464] EXT4-fs (loop8): Free/Dirty block details [ 550.953052][T19464] EXT4-fs (loop8): free_blocks=0 [ 550.958177][T19464] EXT4-fs (loop8): dirty_blocks=16 [ 550.963359][T19464] EXT4-fs (loop8): Block reservation details [ 550.969377][T19464] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 550.997488][T19474] netlink: 'syz.3.5504': attribute type 4 has an invalid length. [ 551.005260][T19474] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5504'. [ 551.110322][T19476] device veth3 entered promiscuous mode [ 551.428512][ T24] kauditd_printk_skb: 211 callbacks suppressed [ 551.428554][ T24] audit: type=1400 audit(808.430:24235): avc: denied { mounton } for pid=19485 comm="syz.8.5510" path="/225/file0" dev="tmpfs" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.515365][ T24] audit: type=1326 audit(808.470:24236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 551.583131][ T24] audit: type=1326 audit(808.480:24237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 551.632502][T19131] udevd[19131]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 551.672274][ T24] audit: type=1326 audit(808.480:24238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 551.704002][ T24] audit: type=1326 audit(808.480:24239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 551.727254][ T24] audit: type=1326 audit(808.480:24240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 551.750445][ T24] audit: type=1326 audit(808.480:24241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 551.782618][ T24] audit: type=1326 audit(808.480:24242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63648be9 code=0x7ffc0000 [ 551.806611][T19492] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5513: bg 0: block 248: padding at end of block bitmap is not set [ 551.836898][T19131] udevd[19131]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 551.882392][T19492] Quota error (device loop7): write_blk: dquota write failed [ 551.938656][T19492] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 551.970186][T19492] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.5513: Failed to acquire dquot type 1 [ 551.985679][T19492] EXT4-fs (loop7): 1 truncate cleaned up [ 552.018253][T19492] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 552.059839][T19131] udevd[19131]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 552.107902][T19517] SELinux: Context system_u:object is not valid (left unmapped). [ 552.264221][T19536] EXT4-fs (loop8): Ignoring removed nobh option [ 552.276955][T19536] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 552.295884][T19536] EXT4-fs (loop8): 1 truncate cleaned up [ 552.301748][T19536] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue [ 552.385311][T19549] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5535'. [ 552.475449][T19565] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 552.490918][T19565] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 552.784666][T19131] print_req_error: 351 callbacks suppressed [ 552.784682][T19131] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 552.812617][T19131] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.832809][T19131] buffer_io_error: 262 callbacks suppressed [ 552.832819][T19131] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 552.853579][T19131] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.864844][T19131] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 552.877129][T19131] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.917211][T19131] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 552.948467][T19131] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.963621][T19131] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 552.975897][T19131] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.988523][T19131] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 553.004254][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 553.019033][T19131] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 553.030813][T19128] blk_update_request: I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.046834][T19131] blk_update_request: I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.060316][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 553.067389][T19131] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 553.096338][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 553.104800][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 553.112930][T19128] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 553.153725][T19607] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.163517][T19607] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.172425][T19607] device bridge_slave_0 entered promiscuous mode [ 553.184317][T19607] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.191467][T19607] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.198963][T19607] device bridge_slave_1 entered promiscuous mode [ 553.263010][T19607] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.270094][T19607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.277374][T19607] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.284440][T19607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.312211][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.320426][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.328106][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.335972][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.346760][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.355019][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.362088][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.391327][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.399777][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.406862][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.414876][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.437249][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.466547][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.484773][T19607] device veth0_vlan entered promiscuous mode [ 553.492686][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.547744][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 553.558932][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.575586][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.612593][T19607] device veth1_macvtap entered promiscuous mode [ 553.650475][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 553.670626][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 553.757644][T19642] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 553.769444][T19642] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 553.778270][T19642] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.5575: mark_inode_dirty error [ 553.789968][T19642] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 553.798327][T19642] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.5575: mark_inode_dirty error [ 553.840650][T19651] device wg2 entered promiscuous mode [ 553.888226][T19661] cgroup: Invalid name [ 553.967060][T19665] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #3: block 2: comm syz.7.5583: lblock 2 mapped to illegal pblock 2 (length 1) [ 553.982719][T19665] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #3: block 48: comm syz.7.5583: lblock 0 mapped to illegal pblock 48 (length 1) [ 554.017299][T19665] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.5583: Failed to acquire dquot type 0 [ 554.052458][T19665] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 554.063807][T19681] netlink: 'syz.0.5591': attribute type 3 has an invalid length. [ 554.071975][T19665] EXT4-fs error (device loop7): ext4_evict_inode:283: inode #11: comm syz.7.5583: mark_inode_dirty error [ 554.083820][T19665] EXT4-fs warning (device loop7): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 554.111841][T19665] EXT4-fs (loop7): 1 orphan inode deleted [ 554.118947][T19665] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue [ 554.138416][ T48] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 554.188571][T19665] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 16: comm syz.7.5583: lblock 0 mapped to illegal pblock 16 (length 1) [ 554.205502][ T48] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 554.235593][ T300] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 554.250870][ T300] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 554.273304][T17818] EXT4-fs error (device loop7): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 554.286975][T17818] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 554.296780][T17818] EXT4-fs error (device loop7): ext4_quota_off:6545: inode #3: comm syz-executor: mark_inode_dirty error [ 554.611091][T19726] syz.5.5612[19726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.611203][T19726] syz.5.5612[19726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.671670][T19738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5618'. [ 554.897295][ T48] attempt to access beyond end of device [ 554.897295][ T48] loop7: rw=1, want=1041, limit=128 [ 555.296559][T19795] EXT4-fs error (device loop7): ext4_ext_check_inode:500: inode #2: comm syz.7.5643: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 555.314284][T19795] EXT4-fs (loop7): get root inode failed [ 555.326159][T19128] udevd[19128]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 555.327809][T19131] udevd[19131]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 555.337688][T19795] EXT4-fs (loop7): mount failed [ 555.341381][T19796] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 555.366886][T19128] udevd[19128]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 555.393539][T19128] udevd[19128]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 555.485985][T19131] udevd[19131]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 555.629682][T19812] ================================================================== [ 555.637800][T19812] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 555.647010][T19812] Read of size 1 at addr ffff888111e453d8 by task syz.0.5649/19812 [ 555.654902][T19812] [ 555.657230][T19812] CPU: 0 PID: 19812 Comm: syz.0.5649 Not tainted syzkaller #0 [ 555.664681][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 555.674738][T19812] Call Trace: [ 555.678137][T19812] __dump_stack+0x21/0x24 [ 555.682466][T19812] dump_stack_lvl+0x169/0x1d8 [ 555.687139][T19812] ? show_regs_print_info+0x18/0x18 [ 555.692337][T19812] ? thaw_kernel_threads+0x220/0x220 [ 555.697626][T19812] ? unwind_get_return_address+0x4d/0x90 [ 555.703250][T19812] print_address_description+0x7f/0x2c0 [ 555.708797][T19812] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 555.715292][T19812] kasan_report+0xe2/0x130 [ 555.719703][T19812] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 555.726196][T19812] __asan_report_load1_noabort+0x14/0x20 [ 555.731821][T19812] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 555.738141][T19812] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 555.744299][T19812] ? xfrm_netlink_rcv+0x72/0x90 [ 555.749151][T19812] ? netlink_unicast+0x876/0xa40 [ 555.754166][T19812] ? netlink_sendmsg+0x88d/0xb30 [ 555.759102][T19812] ? ____sys_sendmsg+0x5a2/0x8c0 [ 555.764041][T19812] ? ___sys_sendmsg+0x1f0/0x260 [ 555.768888][T19812] ? do_syscall_64+0x31/0x40 [ 555.773476][T19812] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 555.779634][T19812] xfrm_policy_inexact_insert+0x70/0x1130 [ 555.785344][T19812] ? __get_hash_thresh+0x10c/0x420 [ 555.790446][T19812] ? policy_hash_bysel+0x110/0x4f0 [ 555.795552][T19812] xfrm_policy_insert+0x126/0x9a0 [ 555.800577][T19812] ? xfrm_policy_construct+0x54f/0x1f00 [ 555.806121][T19812] xfrm_add_policy+0x4d1/0x830 [ 555.810879][T19812] ? xfrm_dump_sa_done+0xc0/0xc0 [ 555.815811][T19812] xfrm_user_rcv_msg+0x450/0x6d0 [ 555.820741][T19812] ? xfrm_netlink_rcv+0x90/0x90 [ 555.825598][T19812] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 555.830973][T19812] netlink_rcv_skb+0x1e0/0x430 [ 555.835743][T19812] ? xfrm_netlink_rcv+0x90/0x90 [ 555.840589][T19812] ? netlink_ack+0xb80/0xb80 [ 555.845176][T19812] ? mutex_trylock+0xa0/0xa0 [ 555.849768][T19812] ? __netlink_lookup+0x387/0x3b0 [ 555.854806][T19812] xfrm_netlink_rcv+0x72/0x90 [ 555.859481][T19812] netlink_unicast+0x876/0xa40 [ 555.864244][T19812] netlink_sendmsg+0x88d/0xb30 [ 555.869000][T19812] ? schedule_preempt_disabled+0x20/0x20 [ 555.874628][T19812] ? netlink_getsockopt+0x530/0x530 [ 555.879820][T19812] ? security_socket_sendmsg+0x82/0xa0 [ 555.885270][T19812] ? netlink_getsockopt+0x530/0x530 [ 555.890462][T19812] ____sys_sendmsg+0x5a2/0x8c0 [ 555.895219][T19812] ? __sys_sendmsg_sock+0x40/0x40 [ 555.900243][T19812] ? import_iovec+0x7c/0xb0 [ 555.904737][T19812] ___sys_sendmsg+0x1f0/0x260 [ 555.909417][T19812] ? __sys_sendmsg+0x250/0x250 [ 555.914183][T19812] ? __fdget+0x1a1/0x230 [ 555.918425][T19812] __x64_sys_sendmsg+0x1e2/0x2a0 [ 555.923362][T19812] ? ___sys_sendmsg+0x260/0x260 [ 555.928208][T19812] ? switch_fpu_return+0x197/0x340 [ 555.933314][T19812] do_syscall_64+0x31/0x40 [ 555.937736][T19812] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 555.943628][T19812] RIP: 0033:0x7fbda67b3be9 [ 555.948048][T19812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.967729][T19812] RSP: 002b:00007fbda521c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.976141][T19812] RAX: ffffffffffffffda RBX: 00007fbda69eafa0 RCX: 00007fbda67b3be9 [ 555.984102][T19812] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 555.992067][T19812] RBP: 00007fbda6836e19 R08: 0000000000000000 R09: 0000000000000000 [ 556.000033][T19812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.007996][T19812] R13: 00007fbda69eb038 R14: 00007fbda69eafa0 R15: 00007ffc23213e68 [ 556.015971][T19812] [ 556.018302][T19812] Allocated by task 19812: [ 556.022716][T19812] __kasan_kmalloc+0xda/0x110 [ 556.027384][T19812] __kmalloc+0x1a7/0x330 [ 556.031619][T19812] sk_prot_alloc+0xb2/0x340 [ 556.036112][T19812] sk_alloc+0x38/0x4e0 [ 556.040198][T19812] pfkey_create+0x12a/0x660 [ 556.044695][T19812] __sock_create+0x38d/0x770 [ 556.049281][T19812] __sys_socket+0xec/0x190 [ 556.053701][T19812] __x64_sys_socket+0x7a/0x90 [ 556.058372][T19812] do_syscall_64+0x31/0x40 [ 556.062784][T19812] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 556.068663][T19812] [ 556.070984][T19812] Last potentially related work creation: [ 556.076713][T19812] kasan_save_stack+0x3a/0x60 [ 556.081393][T19812] __kasan_record_aux_stack+0xd2/0x100 [ 556.086844][T19812] kasan_record_aux_stack_noalloc+0xb/0x10 [ 556.092644][T19812] insert_work+0x52/0x310 [ 556.096966][T19812] __queue_work+0x923/0xca0 [ 556.101472][T19812] queue_work_on+0xd5/0x130 [ 556.106055][T19812] bpf_prog_free+0x139/0x150 [ 556.110639][T19812] __bpf_prog_put_rcu+0x14b/0x170 [ 556.115654][T19812] rcu_do_batch+0x4df/0xa80 [ 556.120155][T19812] rcu_core+0x55f/0xd60 [ 556.124301][T19812] rcu_core_si+0x9/0x10 [ 556.128444][T19812] __do_softirq+0x255/0x563 [ 556.132933][T19812] [ 556.135252][T19812] Second to last potentially related work creation: [ 556.141831][T19812] kasan_save_stack+0x3a/0x60 [ 556.146502][T19812] __kasan_record_aux_stack+0xd2/0x100 [ 556.151955][T19812] kasan_record_aux_stack_noalloc+0xb/0x10 [ 556.157758][T19812] call_rcu+0x10e/0x1050 [ 556.161997][T19812] bpf_prog_put+0x2c8/0x3a0 [ 556.166494][T19812] bpf_prog_release+0x3b/0x40 [ 556.171161][T19812] __fput+0x2fb/0x770 [ 556.175131][T19812] ____fput+0x15/0x20 [ 556.179106][T19812] task_work_run+0x127/0x190 [ 556.183752][T19812] do_exit+0xa4f/0x2480 [ 556.188002][T19812] do_group_exit+0x141/0x310 [ 556.192588][T19812] get_signal+0xf7d/0x12e0 [ 556.197000][T19812] arch_do_signal_or_restart+0xbf/0x10f0 [ 556.202628][T19812] exit_to_user_mode_loop+0xa2/0xe0 [ 556.207824][T19812] syscall_exit_to_user_mode+0x68/0x90 [ 556.213296][T19812] do_syscall_64+0x3d/0x40 [ 556.217721][T19812] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 556.223608][T19812] [ 556.225944][T19812] The buggy address belongs to the object at ffff888111e45000 [ 556.225944][T19812] which belongs to the cache kmalloc-1k of size 1024 [ 556.240027][T19812] The buggy address is located 984 bytes inside of [ 556.240027][T19812] 1024-byte region [ffff888111e45000, ffff888111e45400) [ 556.253389][T19812] The buggy address belongs to the page: [ 556.259040][T19812] page:ffffea0004479000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111e40 [ 556.269279][T19812] head:ffffea0004479000 order:3 compound_mapcount:0 compound_pincount:0 [ 556.277611][T19812] flags: 0x4000000000010200(slab|head) [ 556.283092][T19812] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 556.291791][T19812] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 556.300478][T19812] page dumped because: kasan: bad access detected [ 556.306893][T19812] page_owner tracks the page as allocated [ 556.312623][T19812] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6900, ts 195755079835, free_ts 195749914832 [ 556.333281][T19812] prep_new_page+0x179/0x180 [ 556.337871][T19812] get_page_from_freelist+0x2235/0x23d0 [ 556.343427][T19812] __alloc_pages_nodemask+0x268/0x5f0 [ 556.348789][T19812] new_slab+0x84/0x3f0 [ 556.352855][T19812] ___slab_alloc+0x2a6/0x450 [ 556.357434][T19812] __slab_alloc+0x63/0xa0 [ 556.361850][T19812] __kmalloc_track_caller+0x1ef/0x320 [ 556.367215][T19812] __alloc_skb+0xdc/0x520 [ 556.371537][T19812] netlink_sendmsg+0x5f6/0xb30 [ 556.376414][T19812] ____sys_sendmsg+0x5a2/0x8c0 [ 556.381180][T19812] ___sys_sendmsg+0x1f0/0x260 [ 556.385859][T19812] __x64_sys_sendmsg+0x1e2/0x2a0 [ 556.390810][T19812] do_syscall_64+0x31/0x40 [ 556.395222][T19812] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 556.401103][T19812] page last free stack trace: [ 556.405779][T19812] __free_pages_ok+0x7fc/0x820 [ 556.410537][T19812] __free_pages+0xdd/0x380 [ 556.414959][T19812] __free_slab+0xcf/0x190 [ 556.419279][T19812] unfreeze_partials+0x15f/0x190 [ 556.424207][T19812] put_cpu_partial+0xc1/0x180 [ 556.428874][T19812] __slab_free+0x2c9/0x3a0 [ 556.433284][T19812] ___cache_free+0x111/0x130 [ 556.437866][T19812] qlink_free+0x50/0x90 [ 556.442014][T19812] qlist_free_all+0x5f/0xb0 [ 556.446508][T19812] kasan_quarantine_reduce+0x14a/0x160 [ 556.451959][T19812] __kasan_slab_alloc+0x2f/0xf0 [ 556.456801][T19812] slab_post_alloc_hook+0x5d/0x2f0 [ 556.461915][T19812] __kmalloc+0x183/0x330 [ 556.466159][T19812] inotify_handle_inode_event+0x172/0x520 [ 556.471870][T19812] fsnotify+0x12f5/0x1a80 [ 556.476206][T19812] __fsnotify_parent+0x48e/0x6c0 [ 556.481134][T19812] [ 556.483455][T19812] Memory state around the buggy address: [ 556.489082][T19812] ffff888111e45280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.497132][T19812] ffff888111e45300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.505186][T19812] >ffff888111e45380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 556.513241][T19812] ^ [ 556.520162][T19812] ffff888111e45400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 556.528214][T19812] ffff888111e45480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 556.536347][T19812] ================================================================== [ 556.544395][T19812] Disabling lock debugging due to kernel taint [ 556.563974][ T24] kauditd_printk_skb: 178 callbacks suppressed [ 556.563986][ T24] audit: type=1400 audit(813.572:24417): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 556.608977][ T24] audit: type=1400 audit(813.602:24418): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.630574][ T24] audit: type=1400 audit(813.602:24419): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 556.664486][ T24] audit: type=1400 audit(813.602:24420): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 556.686389][ T24] audit: type=1400 audit(813.602:24421): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1