last executing test programs: 28.522826723s ago: executing program 1 (id=72): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x6b, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) fcntl$setstatus(r4, 0x4, 0x2c00) gettid() r8 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) 25.941534907s ago: executing program 1 (id=91): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181082, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(r2, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES64=r1, @ANYRES64=r3, @ANYRESOCT=r1, @ANYRES16=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r4 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r5, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r8, &(0x7f0000000880)=[{{&(0x7f00000008c0)=@tipc=@id, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/19, 0x13}], 0x6, &(0x7f0000000840)=""/17, 0x11}, 0x9}], 0x1, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ff00"/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) request_key(&(0x7f0000000340)='pkcs7_test\x00', 0x0, 0x0, 0xfffffffffffffffc) 25.051216827s ago: executing program 1 (id=96): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x10f801) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = fsopen(&(0x7f0000001240)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xfav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r5 = fsopen(&(0x7f0000000640)='bpf\x00', 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x14, 0x37, 0xfc, 0x0, 0x0, 0x3, 0xc00}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000700)='/++-]{%*^.-]\x00', 0x0, r6) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000826bd7000fedbdf256000000080012a00dde7e5cd0967aa2b76530bf453f0ca05a05603fbf1403aeb4634157f0de82ea4cae3d7cf98597347953a8781c0cb229b49bc89dce89dc929592b53f87c536effe920bb58379e5aaaab3c0c89cf0f793c542cdf24d063ec0061e81642aa689ff355ff0a93b77c972d48e4ed48a65a565a9429e4f05fc548ab4b388fef7299127de2b7af459013c2372fca4a0814be758411f2c0aa3e4084704949c60b9d683bb7df72b686f67079fbec457e075e2b5245a53aacd0f8a503bf166404379bc2baec7be94e4cb8f25f8ae2f6778a279c4e128cf544ff17818f561b26c1b8cb12bfe1d83d1bcd4c8f2d9b8804060d0305000700bd06ffffffffffff100188823004eb0007000000ffffffffffff1000000004000000be0000000204080211000001ff7f000001ffffffffffff00800100084c8d4f293160ea7a22b898a2540fae18401b250f53a474748737c808ad626b20cc9ab64502125addde91e92cfd0ce2ac386091ee76f8f812d0f0e2ebe3df56ca262816b866cbf8b5c5f73311ec51002a0071070100ffff02031075040100a243831f000180ffffffffffff000800007c0d0000040000000802110000000080000010016a7e1510030608021100000007000000080000000400000010010800000023012a002a01032d1a0c000800000000000000000900080010000000000380000000017606038d0500050084e9cc0f0008021100000100010000180040ffffffffffff010000000802110000013700400802110000000e0000000802110000002c0000ffffffffffff06000000030040ffffffffffffffff0000ffffffffffff0c0000ffffffffffff810000000200000802110000010d0000003b0000ffffffffffff01000000260000080211000000750700000e0040080211000000001800000802110000010a0000080211000000010000001300000802110000010000100020004008021100000103000000080211000001420040080211000000f9ffffff0802110000002e0000080211000000ae0900001a003e0103750801005e0f00002100000600b1000000000078002a00680430000900094aaf4a63c1b1555d816d28be3f975acc054da9df63a34fe6274348391120cae96bf8c8c9fb7b6c74dc5646622440d5dba5af7ff3ce54ae90e05f0c8fd8bcaab1c8708154918bb7645722a104060607810007008c18ad0d916deeb39979eb6ad851b31073e384dd01c4cf2424add2012a001001d2030101bd06080211000000760603021a0041e900e8e325e4ba6461fccb87119e73334c0ef89bad8b4891d6a1ecfd9a46e4835df6cfd4eb4f4fbfe412ea7c54cf6fcde3d133936a2f1adac5f4fd68b036db38162ca5d709790c89461df44a580702e5c6c43c2a6cb246b189de63d92729664673fb80d40ae779a4070c5454c6ed1acafbd321f3400bc087f778db5587d4f4702b76442a5bc0b7de2a9bc30920ac87d5348a61517999ff5ea91952d11c92ae390ef09261d84ae3518988983d15d38e2b1b06628c808db9808c9a6833029399c99735d95035c8c577d4e8f0b5a7cca91917ea3740e98908b1c05f9fa7ae1052f1336a5abee9161cf97ca99f07a50321c16e7cbb5df49dedbeb16fb74e431292713e79722dbec5e5c5dbac8e6bde74754a0669e67fcf88a23c383f07c886e3a14d952202f119f736a754043aa18822ad786dd5e4828b460f9c4c5882b28e759d565cc171c15ed52b916a91334882af606dcab917786fa919b0b0ca4b61863a57ada7bdc02e6e6017e14b4013dd1be876703c78803e73f4ef26ab9241c57dd234c9b1e0fc168c5e62fd5d3cb92da1c9bdf007b7680406000100831f000406080211000000010000002b0b0000ad5000000802110000000131000000003b002a0075180100080006002400251de05758aaa83e988d24839ef7aa878c186f05ad64df067abd450bb88b5d7365b1509d2d609edfc2f90301b800"], 0x59c}}, 0x2004c000) 24.528449109s ago: executing program 1 (id=101): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@bsdgroups}, {@norecovery}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mount(0x0, 0x0, 0x0, 0x189, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0x1a, r3, 0x3, 0x0) wait4(r3, &(0x7f0000000080), 0x80000000, 0x0) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r5, 0x40a) r6 = syz_pidfd_open(r4, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x12, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000600feffffff00000400000018110000f5eb2219169402581254bf68ff51443c99f776f79a6b28c2fe3dcdc5831d2e0253b53951f7943c516f8910f083d7e1df63a9fad669b907f7cb2c35f22d3e0abe33ce5598ce04517b398628eb82b66b32482cfed5e5ab4530d4cf3100a0ea7a23686734", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000001e00)=""/4096, 0x41100, 0x32, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x3, 0x701d, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r7, 0xffffffffffffffff, r7, r8], &(0x7f0000000440)=[{0x3, 0x3, 0x3, 0x5}, {0x0, 0x5, 0x3}, {0x1, 0x4, 0x2, 0xb}], 0x10, 0x1000}, 0x94) write$binfmt_format(r7, 0x0, 0x0) setns(r7, 0x24020000) lseek(r6, 0xe7, 0x2) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r9, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) 24.495419111s ago: executing program 0 (id=102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) tkill(r3, 0x12) 24.435494666s ago: executing program 0 (id=103): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) tgkill(r0, r0, 0xa) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ptrace$poke(0x5, r0, &(0x7f0000000340), 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000100)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x3) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 24.435152956s ago: executing program 0 (id=104): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000001c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x4, 0xd, 0xf, 0x1, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x40, 0x8, 0xfffffff8}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0xf, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf090000000000005509010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x171, &(0x7f0000000280)="$eJzs27Gq01AYB/Avtvd6ry53FoeAi1NRJ0dFriAGFKWDTgrVpZWCXaKLxSdx9Zl8BkE6VRCOaEqr0ir1kqa0v9+SD/6c8J3AyeEE8uzyq35vOHo5fDiJoyyL9q04jmkWJ3EuWlEZBwCwS6YpxZeUUjo/juMPkVJquiMAoG72fwDYP//c/2821BgAUBvnfwDYP4+fPL1/uyhOH+X5UcTncdktu9W1yu/eK06v5T+dLEZNyrLbmufXqzz/PT+IC7P8xtL8MK5eqfIf2Z0HxSx/N8svRm8zjwAAAAB2XiefW3q+73RW5VX1y/eBP8737bjU3tg0AIA1jN687T8fDF68bro43I42FOsXXz9FNNnGt5TSfwx//7FaAuuNOtieJfO3IouIs92n6TcTULfFom+6EwAAAAAAAAAAAAAAYJV6/0ZqNT09AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWOp7AAAA//9skU2P") (async) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 24.395621449s ago: executing program 0 (id=106): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)=ANY=[@ANYBLOB="7175696574729f2c73686f720100616d653d77696e6e742c726f6469722c646973636172642c666c7573682c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c646d61736b3d303000000000303030303030303030303430302c747a3d5554432c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e6e742c00"], 0x0, 0x274, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2100) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000240)=0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0b66e80b7c11c4f27a8b446c5f950000000000930000000000000000000000000000000000060000000000d7e39d34e43efde6fb626858e6d0e5ad86a7eec303339d88dab35202d34bf93db658866f46b2188ce076125556d1b00974b5912473315afbcbd795df198d41951eeb228815f9fde6a1fab885843659d3c72867b3b330df13130d51d01568074a131deebf78d4cac7151ab842719beb084b60cdfd71f16dd7bf"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYBLOB="43a3b9c06cf8ef6d70a195ea5d3e63995d45532157ee189abca10fb37de04ff59a7d90b4d8c70f0f30890226f006417d6d3fd6113514fb92dec9b0729ea6efe9247baf7d75a5e03d8802ade4f8dd3e403c67c1787f8262bccf8164dd7218", @ANYRESHEX]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) 24.156629598s ago: executing program 1 (id=107): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x6, [@union={0x1, 0x1, 0x0, 0x5, 0x1, 0x47, [{0x2, 0x4}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0xffffffff}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x5}], "b6"}, @volatile, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @ptr={0xc}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb}, {0xb, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x9, 0x5}, {0x1000e}]}, @var={0x3, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{}, {0x4, 0x80000000}, {0xc, 0x400}, {0xf, 0x436}]}, @float={0xc, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x5f, 0x61, 0x0]}}, &(0x7f00000004c0)=""/141, 0x106, 0x8d, 0x1, 0xffffffff, 0x10000}, 0x28) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket(0x11, 0x800000003, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x4, 0x8000000000000084}}], 0x20}) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) (async, rerun: 64) bind$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000001}}}, 0x10) (async, rerun: 64) bind$tipc(r9, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r9, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 24.083478734s ago: executing program 0 (id=108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x604c800}, 0x20000000) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa0009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x20, 0x0, 0x3, "320215"}, 0x0, 0x0, 0x0, 0x0}) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x854, 0x28020, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x1, 0x4, 0x0, 0x1, @value=r2}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) creat(&(0x7f0000000040)='./bus\x00', 0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async, rerun: 32) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) (rerun: 32) 24.064613995s ago: executing program 0 (id=109): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0, 0x2b, &(0x7f0000000b80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000500004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007c303ca51ba5e953e5244a7ce75c9511375dee5fdbca7784e6a7725202a6265b282cd5de3bba0cc2dce15e2621d3a93fb1aae7d11ae3d1fcfa772bcc7082001e9dd71f43c6c02727984d4693dcbf98336f60a6b42f75477874bfc60c08c55096c157db9d611e58ba1d7a82a7810fc1f0235c5a3141135a51390ff1e045c24e8567e8a370524c4868f779f7b2fdcb8f5d937852a8b87c703d2eb4afb9e1828f7e252d43b49f0ba55b302929c040caa109cef1c8778d627257fb2153308aae5a5e926d68b497198edaa30af2c51454f65a14ed4dd66f0d4ba55c92c0c535098ec5bf703857000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000002dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) (async) sched_setaffinity(r7, 0x8, &(0x7f0000000a80)=0x4) r8 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r8) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000800)={0x3, 0x0, &(0x7f00000006c0)=""/12, &(0x7f0000000740)=""/1, &(0x7f0000000780)=""/91, 0xdddd1000}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r8}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000980)=""/66, 0x0}) (rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000700)) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) (rerun: 64) ioctl$VHOST_VDPA_GET_DEVICE_ID(r9, 0x8004af70, &(0x7f0000000a40)) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x74, 0x0, 0x2d}) unshare(0x64000600) 24.047813126s ago: executing program 32 (id=109): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0, 0x2b, &(0x7f0000000b80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000500004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000002dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) (async) sched_setaffinity(r7, 0x8, &(0x7f0000000a80)=0x4) r8 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r8) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000800)={0x3, 0x0, &(0x7f00000006c0)=""/12, &(0x7f0000000740)=""/1, &(0x7f0000000780)=""/91, 0xdddd1000}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r8}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000980)=""/66, 0x0}) (rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000700)) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) (rerun: 64) ioctl$VHOST_VDPA_GET_DEVICE_ID(r9, 0x8004af70, &(0x7f0000000a40)) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x74, 0x0, 0x2d}) unshare(0x64000600) 23.936843375s ago: executing program 1 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x5c3341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0xfdef) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400001f51000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$packet(r3, &(0x7f0000000580)={0x11, 0x6, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH(r8, 0x4, &(0x7f00000002c0)='cpu\x00\x00t', &(0x7f0000000300)='./file1\x00', r9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) 23.912695597s ago: executing program 33 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x5c3341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0xfdef) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400001f51000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$packet(r3, &(0x7f0000000580)={0x11, 0x6, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH(r8, 0x4, &(0x7f00000002c0)='cpu\x00\x00t', &(0x7f0000000300)='./file1\x00', r9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) 4.895335882s ago: executing program 4 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='cq_alloc_error\x00', r2}, 0x18) io_uring_setup(0x1d2b, &(0x7f0000000480)={0x0, 0x43bc, 0x2, 0x0, 0x388, 0x0, r2}) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_netlink_send\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000440)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000010000304021f00080000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800900010069706970000000005400028005000900290000000800020000000000050005000000000006001000104000000800140005000000060012004e24000005000400090000000600100001000000060011004e23000005000900"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000640), &(0x7f0000000680)={0x0, 0xfb, 0x38, 0x5, 0x80, "3b85d2d0baf5a812c1ccf2d55aacef97", "2364e1bd243c572cc3724c6e1071865e480e2bd7e92783370794b284e653b172e816ce"}, 0x38, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001030902440001010000000904000000020200000524"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000]}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 4.363480284s ago: executing program 3 (id=260): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000002, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='tlb_flush\x00', r2}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 4.358888484s ago: executing program 2 (id=261): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x3, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x1, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x18, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x5, 0x9, 0x4, 0xc66, 0x88a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x2c, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0xec3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x4e7, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x401, 0x1, 0x7fff, 0x8, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x1fffff, 0x8, 0x400, 0x2, 0x1, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0xc, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7ad0, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2a, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x1a9, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0xfffffff8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x9, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x5, 0xc, 0x32d, 0x3, 0x200001ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x7, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x101, 0x14000, 0x1, 0xa]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8400000003087a780000000000000000000000080c00048008000540000000020900010073797a31000000000900010073797a310000000004000480040004803c0004800800014000000002080002400000000708000240000057dd0800014000000003080001400000ffff080001400000000708000240000000080500030700000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r6, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a40)='task_rename\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="d45b58e4d59db14f79031677e9f6e0a34c83c72952d75e9b837b32fa58a5d4bf4a27a799769b1c0fefe8bbffcc8ffc80e70f2edc178fd50787e90b0ce38bcbcaa3733994ee15ea8e167107079be0611323561c77d0e8b8c8b6b61ad326b935e581fc16e07057e095257313303bb56b5cb8a14c4e7485690a92c0f878fb6910733f2d8aa6209e0343e4445c436f2cde51bc8f702ee0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 4.256171723s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) r3 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000180)='./file1\x00', 0x2008000, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x2, 0x1502, &(0x7f0000002ec0)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000003c0)=[{{&(0x7f0000000340)=@nl=@proc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/153, 0x99}], 0x2, &(0x7f0000001740)=""/4096, 0x1000}}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r8, 0x2bd1, 0x1, 0x4, 0x1}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000500)) sendfile(r4, r4, 0x0, 0x80000000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 4.210607316s ago: executing program 2 (id=263): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000000000000104000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000340)="b8aa0000000f23d80f21f835800000700f23f8660f7efcea7a95ae0407013e0f00df0fc72eb9d00800000f32f30f7f5d00c4e379638f0d0000008bf20f7075fa00f36d", 0x43}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000300)=0x5) (async) socketpair(0x1e, 0x80000, 0x8, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) (async) r6 = socket$inet6(0xa, 0x3, 0x8) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) (async) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x18) syz_open_dev$vcsu(&(0x7f0000000200), 0x3, 0x400000) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r10) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 4.099381375s ago: executing program 2 (id=264): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800", @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x32d15422}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 4.099047105s ago: executing program 3 (id=265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r5, @ANYRESHEX=r1, @ANYRESOCT=r3]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x1d66) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xe0000000, 0x564f143a, 0x85, 0x6, 0xf, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r6, 0xffffffffffffffff, 0x6700000000000000) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@resgid}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x497, &(0x7f0000001540)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1XqtqgJEq0q2iJUjoi/ADgi8RdwggsCTiCucEdIFeqlhQMyWns3cWLXuHYdh/rzkdaZ2dfM7OxkZ3e8DmBgTWQfScS2iPglIsZq0dUrTNT+3Lx+cf7P6xfnk6hUXv1jtLrejesX54tVi+225pHJNCL9MIm9TdJdPH/h1Fy5vHAuj08vnX5nevH8hSdPnp47sXBi4czs0aNHDs888/TsU3eknFm5bux5/+y+3cfe+OTl+Uq8+f2XWX635cvry1Ez3nWaEzERlUqlkq6aO1L9fLTrvW8s2yPiSh5OhvqcGdpWioisuoar7X8sSrFSeWPx0gd9zRzQU9n1abRhbin/O5RkyzfVrQvcTRLtGgZUccXP7n+Lab36HhvBteezz4Vq+W/mU23JUGT37cl47Y691KP0t0XE65f/+jSboulzCACAO+vrrP/zRLP+Xxr31q23Ix9DGY+IgxGxMyL+HxG7IuKeiOq690XE/beZfnX86cpKvLH/89PmjgvXhqz/92w+trW6/7c8ajNeymPbq+UfTt46WV44lB+TyRgezeIzLdL45sWfP77Vsom6/l82ZekXfcE8H78PrXlAd3xuaa6bMte7diViz1Cz8ifLIwFJROyOiD0d7D87Zicf/2JfFt6xtXH5v5e/lcsd5Gi1yucRj9Xq/3KsKX8hqQ2R3Gp8cnpTlBcOTRdnRaMffrz6Sn18uC7cXfm7l9X/lqbnf17+ohkU47WLbe54ZCV49deP8n02NuVOz/+R5LVVybw3t7R0biZiZCQa58+ubFvEi/Wz8k8eiLiaDwTXt/+dEX9/lm+3NyKyk/iBiHgwIvbneX8oIh6OiAMtDsV3LzzyduuD1d/6P96q/iPGk/rx+g4CpVPfflXsbLkq838u7dX/kWpoMp/Tzv+/djN4J44hAAAAbHRpdQw6SaeWw2k6NVX7Dv+u2JKWzy4uHZyId88cr41Vj8dwWjzpGqt7HjqTPxsu4rNr4ocj4n/Vbxptrsan5s+Wt/e78DDgtt6i/Wd+69WXXoCN47be10p6lw9g/XlfEwZX2+1/uLf5ANaf6z8MLu0fBlez9n8p4mYfsgKss9u6/j/Xu3wA669V+/fID+5u7v9hcGn/MJAaX4kvfqOhkzf9VwI7j3W1+QAFSj3ac9T/aEcPApH2/dB1Hkg3Qjb254HRiGh3q0s9rdO15w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3z8BAAD//yxO2No=") r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000500000002000000040000004e150200", @ANYRES32, @ANYBLOB="0000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000800000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r11}, 0x18) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x880) recvfrom$inet6(r12, &(0x7f0000000140), 0x0, 0x40002000, &(0x7f0000000180)={0xa, 0x4e24, 0xbae, @mcast1, 0xfffffffc}, 0x1c) 3.9203698s ago: executing program 3 (id=267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1, 0x6, 0x8ec) r2 = dup(r1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "489bdaf3a137165c", "1245b3e3662e4ed74cb1af6ad97e4ca3", "b92ffc59", "c41d7c35a2ad53bc"}, 0x28) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)={@val={0xa, 0x10}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) 3.443854237s ago: executing program 3 (id=269): socket$nl_route(0x10, 0x3, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) (async) unshare(0x2a020400) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000cc0)={[{@noauto_da_alloc}, {@nojournal_checksum}, {@data_writeback}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@noquota}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x577, &(0x7f0000000740)="$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") (async, rerun: 32) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 3.102596394s ago: executing program 3 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async, rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) getsockopt$packet_int(r5, 0x107, 0x13, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 64) r7 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYBLOB="c4efe416070b7b20195124d085d4590609dfe12aa5d7b86cf98b47c4ad97b2227832c10087b4812c23fd1242bc797ad45f7761a84eaee2493bdf6b241ac02ba020ceb17d4f15f103ba076385850251f288a0238a6807f38f4b4195e4f9aa8c88a45f8fa342c91a6eb2661bffeea2c9b5a85a3221ff1d035d98fdb143ded7b926e1f70fbd685a557df0a5e921a213489339b312aa53930c2b1e3f6f2002abe8616d22e2e0392d692aca1433cc", @ANYRES8=r3, @ANYRES16=r9], 0x1, 0x378, &(0x7f0000000d40)="$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") (rerun: 64) 2.803358328s ago: executing program 6 (id=271): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x559}]}, 0x60}}, 0x4) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r5, 0x0, 0x3, 0x800000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f0000000180)=0x10001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e0c0)="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", 0x2000, 0x0) ftruncate(r9, 0xf4ff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00'}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) 2.508116491s ago: executing program 2 (id=272): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) syz_io_uring_setup(0x419, &(0x7f0000000300)={0x0, 0x31a4, 0x2, 0x1, 0xc3}, &(0x7f0000000000), &(0x7f0000000100)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) 2.436023937s ago: executing program 6 (id=273): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020fe0f0000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080000000000000000000000000000100000000000000895989fadb554f0aa6b5"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bda200000000000007020000f8ffffffb703000021000000b7040000000000000095000000000000006ff36ccd30d1e7c32e44a4a48ba08081b2e4a96547d02f4369ac"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x781201, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) 1.828244135s ago: executing program 4 (id=276): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(r0, 0x107, 0x5, &(0x7f0000000080), 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f494246a77d86dd6700000100123afffe88000000000000000032aa8c7e4ce896030000000000000201160300000000000000000000001c8e0186009078ff02030005000000f6ffffff0500"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000000a004e2100000000ff01000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r8}, 0x18) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.723309703s ago: executing program 5 (id=277): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) sysinfo(&(0x7f0000000240)=""/226) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x7dffeffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x29}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x236}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x88d4) close(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb7, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) 1.722740473s ago: executing program 5 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc008011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc008011) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) 1.721138634s ago: executing program 5 (id=279): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)={0xf8a, 0x7fffffff, 0x2, 0x9, 0x200, 0x3}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) (async) sendfile(r1, r1, &(0x7f00000000c0)=0x800, 0x9) 1.349427933s ago: executing program 5 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000108039042abd7000eaff18d090629d3e87ffff000003e4", @ANYRES32=r6, @ANYBLOB="03000000c31006002800128008000100736974001c00028008000100", @ANYRES32=r5, @ANYBLOB="08000300ac1414bb0600100000700000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/129, 0x81, 0x0, &(0x7f0000000580)=""/128, 0x80}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0xbf, 0x72, &(0x7f00000002c0)=""/114, 0x40f00, 0x26, '\x00', r6, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x3, 0x3, 0x6}, 0x10, r7, r1, 0x6, &(0x7f0000000680)=[r0], &(0x7f00000006c0)=[{0x0, 0x1, 0x5, 0x1}, {0x5, 0xffffbbb6, 0x9, 0x7}, {0x2, 0x1, 0x4}, {0x3, 0x3, 0xa, 0x5}, {0x3, 0x1, 0xe}, {0x2, 0x5, 0x8, 0xd}], 0x10, 0x1000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r8}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.300805507s ago: executing program 6 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) llistxattr(0x0, 0x0, 0x0) 1.196855195s ago: executing program 2 (id=282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x40, 0xd, 0x5, {0x5, 0xe, "01f200"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.195200335s ago: executing program 6 (id=283): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_reply={0x12, 0x0, 0x0, 0x10001}}}}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.1360363s ago: executing program 5 (id=284): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x8, 0x3, 0x4, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010027bd7000fcdbdf2507000000", @ANYRES32=r6, @ANYBLOB="200001ff", @ANYRES32=r6, @ANYBLOB="0101fdffe000000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) (async) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) signalfd4(r12, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8001, '\x00', r4, r12, 0x5, 0x4, 0x1}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8001, '\x00', r4, r12, 0x5, 0x4, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff9f, 0x0, 0xfffffffc, 0x1, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x100], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x3, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x3, 0xffffffff, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x800000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 938.237585ms ago: executing program 4 (id=285): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="9b733bbb5e915092fb0da29b7cb308109f9518", @ANYBLOB="0000000000000000b70800000000396f6c8abfa200000000000007020000f808000000b704000000000000850000000100000095000000000000000000000000c97e6194c4420c019c75b200ab6de94b4e085bae5d2691a759633b6dcd1fcd82dc942cd052a03041f7453fb0f6de8b0088bc050eec72bc0ba9578477685e04acafb4d514368e13e8df13"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 843.483743ms ago: executing program 4 (id=286): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffe, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x40000000000005d, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095", @ANYRESHEX=r1, @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r2, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 437.547225ms ago: executing program 3 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, 0x0) (async) prctl$PR_GET_ENDIAN(0x42, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0x7000000000000000, 0x40, 0xa92, 0x7}) (async, rerun: 32) r6 = socket$inet6(0x10, 0x3, 0x0) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) (async) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async, rerun: 64) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 329.339923ms ago: executing program 4 (id=288): socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000000248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000000248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac) (async) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, 0x0, 0x20009010) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000540)={[{@grpjquota}, {@init_itable_val}, {@nolazytime}, {@sysvgroups}, {@prjquota}, {@stripe={'stripe', 0x3d, 0x93a8}}, {@barrier_val={'barrier', 0x3d, 0xe}}, {@errors_remount}, {@nombcache}, {@test_dummy_encryption}]}, 0x1, 0x468, &(0x7f0000000780)="$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") shutdown(r9, 0x1) (async) shutdown(r9, 0x1) connect$bt_rfcomm(r9, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 223.420652ms ago: executing program 5 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000005400010027b570000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="1177829e05"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000180)={0xfffb, 0x7fff, 0xf833}) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x8011, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYRES16=r9, @ANYBLOB="931852da47b7582df625210022000c000180080001", @ANYRES32, @ANYBLOB], 0x20}}, 0x90) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 221.994902ms ago: executing program 6 (id=290): r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x10f, 0x15, 0x0, 0x0) 24.983467ms ago: executing program 6 (id=291): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r2, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') r6 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r6, &(0x7f0000000940)=[{{&(0x7f0000000080)=@ax25={{0x3, @null}, [@netrom, @netrom, @null, @bcast, @null, @bcast, @bcast, @default]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/71, 0x47}], 0x6, &(0x7f0000001f00)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000005c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000740)=""/241, 0xf1}], 0x4, &(0x7f0000000880)=""/189, 0xbd}, 0x4105d2bd}], 0x2, 0x10000, &(0x7f00000009c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) write$P9_RWSTAT(r7, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800010, &(0x7f0000000240)={[{@fat=@errors_remount}, {@uni_xlate}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@numtail}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@errors_remount}, {@fat=@errors_continue}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x8000000000000000}}, {@fat=@check_normal}, {@numtail}, {@shortname_mixed}, {@fat=@debug}, {@numtail}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@errors_remount}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_win95}, {@shortname_win95}, {@numtail}]}, 0x6, 0x2d1, &(0x7f0000000740)="$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") ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a6a}) 0s ago: executing program 4 (id=292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000740)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000140), 0x1000800, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0xfffffffffffffffc}}]}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000340)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='bpf\x00', 0xfffffffffffffffb) r8 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) pselect6(0x40, &(0x7f0000000500)={0xd7, 0xda6f, 0x704e6df5, 0x3, 0x2, 0x2, 0x40, 0x8000000000000000}, &(0x7f0000000540)={0x7, 0x6, 0xfff, 0x0, 0xfffffffffffffffd, 0x4, 0x1000, 0x4}, &(0x7f0000000580)={0x2, 0x2cc00000, 0x11, 0x0, 0x8, 0x2, 0x78f4, 0x8}, &(0x7f0000000680)={0x0, 0x3938700}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x5ef5]}, 0x8}) r9 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r9, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000070000001c320000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 22.399198][ T30] audit: type=1400 audit(1765696215.846:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.400213][ T273] cgroup: Unknown subsys name 'net' [ 22.422052][ T30] audit: type=1400 audit(1765696215.846:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.449422][ T30] audit: type=1400 audit(1765696215.876:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.449603][ T273] cgroup: Unknown subsys name 'devices' [ 22.593389][ T273] cgroup: Unknown subsys name 'hugetlb' [ 22.599074][ T273] cgroup: Unknown subsys name 'rlimit' [ 22.795347][ T30] audit: type=1400 audit(1765696216.246:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.819002][ T30] audit: type=1400 audit(1765696216.246:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.824636][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.843884][ T30] audit: type=1400 audit(1765696216.246:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.875584][ T30] audit: type=1400 audit(1765696216.306:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.901050][ T30] audit: type=1400 audit(1765696216.306:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.935456][ T30] audit: type=1400 audit(1765696216.386:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.961325][ T30] audit: type=1400 audit(1765696216.386:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.961391][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.597107][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.604417][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.611904][ T281] device bridge_slave_0 entered promiscuous mode [ 24.618761][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.625952][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.633393][ T281] device bridge_slave_1 entered promiscuous mode [ 24.672352][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.679412][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.686999][ T283] device bridge_slave_0 entered promiscuous mode [ 24.694521][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.701762][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.709330][ T283] device bridge_slave_1 entered promiscuous mode [ 24.793939][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.801094][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.808492][ T282] device bridge_slave_0 entered promiscuous mode [ 24.816871][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.824387][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.831923][ T282] device bridge_slave_1 entered promiscuous mode [ 24.841721][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.848768][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.856324][ T285] device bridge_slave_0 entered promiscuous mode [ 24.871299][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.878398][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.885882][ T285] device bridge_slave_1 entered promiscuous mode [ 24.912074][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.919125][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.926564][ T284] device bridge_slave_0 entered promiscuous mode [ 24.933547][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.940588][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.948131][ T284] device bridge_slave_1 entered promiscuous mode [ 25.084333][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.091425][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.098757][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.105900][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.120669][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.127748][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.135219][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.142271][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.174704][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.181774][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.189138][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.196190][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.205746][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.212840][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.220141][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.227521][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.245307][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.252977][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.260391][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.268115][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.275940][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.283638][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.291127][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.298284][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.306387][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.313957][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.351971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.359765][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.367831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.376436][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.383684][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.391596][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.399811][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.406850][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.414208][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.422376][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.429459][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.436934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.445172][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.452328][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.459756][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.468326][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.475390][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.513082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.522672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.530564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.538697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.546708][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.554709][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.563148][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.570301][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.577835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.586072][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.594080][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.602558][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.609574][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.632276][ T284] device veth0_vlan entered promiscuous mode [ 25.644726][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.652410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.659889][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.668935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.677487][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.685985][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.695181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.703357][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.711744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.720300][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.728928][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.736298][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.743945][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.751608][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.777969][ T284] device veth1_macvtap entered promiscuous mode [ 25.786553][ T283] device veth0_vlan entered promiscuous mode [ 25.793200][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.802362][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.810463][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.817598][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.825287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.833756][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.842091][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.849165][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.856553][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.864831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.872854][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.880830][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.888846][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.897497][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.905789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.913945][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.922010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.930548][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.939048][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.947281][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.955767][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.963390][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.971370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.981152][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.988845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.996489][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.004386][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.012888][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.021401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.029055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.041795][ T281] device veth0_vlan entered promiscuous mode [ 26.052004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.060174][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.071606][ T283] device veth1_macvtap entered promiscuous mode [ 26.085142][ T285] device veth0_vlan entered promiscuous mode [ 26.091748][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.099445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.108253][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.116748][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.124976][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.133589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.141997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.150263][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.158671][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.166861][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.174390][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.190718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.199299][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.207974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.217274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.226214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.234823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.250340][ T281] device veth1_macvtap entered promiscuous mode [ 26.258614][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.266566][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.275172][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.293905][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 26.293947][ T285] device veth1_macvtap entered promiscuous mode [ 26.318454][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.327332][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.334476][ T335] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.351829][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.359735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.368384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.377011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.386694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.397581][ T282] device veth0_vlan entered promiscuous mode [ 26.423110][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.423770][ T340] loop4: detected capacity change from 0 to 512 [ 26.431734][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.445683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.456726][ T335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 26.465885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.474497][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.482888][ T340] ======================================================= [ 26.482888][ T340] WARNING: The mand mount option has been deprecated and [ 26.482888][ T340] and is ignored by this kernel. Remove the mand [ 26.482888][ T340] option from the mount to silence this warning. [ 26.482888][ T340] ======================================================= [ 26.527673][ T282] device veth1_macvtap entered promiscuous mode [ 26.545150][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.561242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.581315][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.609358][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.631875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.655398][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.681412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.960445][ T357] loop0: detected capacity change from 0 to 2048 [ 27.067847][ T358] loop3: detected capacity change from 0 to 8192 [ 27.101896][ T357] EXT4-fs (loop0): Ignoring removed bh option [ 27.150064][ T359] loop1: detected capacity change from 0 to 16 [ 27.404723][ T357] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 27.419913][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 27.419927][ T30] audit: type=1400 audit(1765696220.876:116): avc: denied { mount } for pid=347 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.457352][ T349] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 27.488516][ T30] audit: type=1400 audit(1765696220.916:117): avc: denied { create } for pid=347 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.511110][ T30] audit: type=1400 audit(1765696220.916:118): avc: denied { setopt } for pid=347 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.536776][ T30] audit: type=1400 audit(1765696220.986:119): avc: denied { prog_run } for pid=347 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.561325][ T30] audit: type=1400 audit(1765696221.006:120): avc: denied { read write } for pid=367 comm="syz.2.7" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.585208][ T30] audit: type=1400 audit(1765696221.006:121): avc: denied { open } for pid=367 comm="syz.2.7" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.620164][ T30] audit: type=1400 audit(1765696221.016:122): avc: denied { unmount } for pid=367 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.645586][ T30] audit: type=1400 audit(1765696221.096:123): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.691791][ T30] audit: type=1400 audit(1765696221.126:124): avc: denied { read write } for pid=369 comm="syz.1.8" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.723031][ T30] audit: type=1400 audit(1765696221.126:125): avc: denied { open } for pid=369 comm="syz.1.8" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.803696][ T380] loop4: detected capacity change from 0 to 512 [ 28.166385][ T389] loop2: detected capacity change from 0 to 512 [ 30.803675][ T380] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 30.823200][ T389] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 30.834532][ T389] block device autoloading is deprecated and will be removed. [ 30.842124][ T389] EXT4-fs (loop2): external journal has bad superblock [ 30.913586][ T399] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17'. [ 30.973190][ T402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 31.346885][ T400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 31.545916][ T416] loop3: detected capacity change from 0 to 1024 [ 31.555643][ T422] loop4: detected capacity change from 0 to 512 [ 31.581439][ T426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=426 comm=syz.2.25 [ 31.611606][ T422] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.631347][ T416] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 31.641150][ T422] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.669585][ T416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c018, mo2=0003] [ 31.673680][ T422] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.678536][ T416] System zones: 0-1, 3-36 [ 31.696112][ T422] EXT4-fs (loop4): 1 truncate cleaned up [ 31.697252][ T416] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,usrjquota=,bsddf,nomblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 31.702725][ T422] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 31.741715][ T415] EXT4-fs (loop3): shut down requested (2) [ 31.754526][ T415] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 31.781702][ T415] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 31.850969][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.981151][ T446] loop3: detected capacity change from 0 to 2048 [ 32.003580][ T447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.008812][ T446] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.130949][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 32.209208][ T452] loop3: detected capacity change from 0 to 128 [ 32.236827][ T454] syz.4.31[454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.236874][ T454] syz.4.31[454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.251010][ T39] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 32.269550][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 32.281770][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.281804][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 32.281827][ T39] usb 2-1: config 1 interface 1 has no altsetting 0 [ 32.291605][ T452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.291717][ T452] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.293939][ T452] sit: Src spoofed 0.0.0.0/2002:0:64::576d:0 -> 224.0.0.1/::42c4:3acc:eaa8:acff:fffe:64 [ 32.372198][ T459] netlink: 'syz.4.33': attribute type 13 has an invalid length. [ 32.409301][ T463] loop3: detected capacity change from 0 to 512 [ 32.433746][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.441316][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.452109][ T463] EXT4-fs (loop3): Ignoring removed bh option [ 32.461103][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.473027][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.479375][ T463] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 32.484277][ T39] usb 2-1: Product: syz [ 32.497881][ T463] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.509336][ T465] loop0: detected capacity change from 0 to 8192 [ 32.540190][ T39] usb 2-1: Manufacturer: syz [ 32.544987][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 32.545004][ T30] audit: type=1400 audit(1765696225.996:179): avc: denied { ioctl } for pid=462 comm="syz.3.34" path="/9/bus/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.589229][ T39] usb 2-1: SerialNumber: syz [ 32.597128][ T30] audit: type=1400 audit(1765696226.046:180): avc: denied { create } for pid=464 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.636524][ T30] audit: type=1400 audit(1765696226.046:181): avc: denied { setopt } for pid=464 comm="syz.0.35" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.645562][ T459] syz.4.33 (459) used greatest stack depth: 21024 bytes left [ 32.664963][ T30] audit: type=1400 audit(1765696226.046:182): avc: denied { write } for pid=464 comm="syz.0.35" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.733737][ T30] audit: type=1400 audit(1765696226.186:183): avc: denied { write } for pid=475 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.776822][ T30] audit: type=1400 audit(1765696226.186:184): avc: denied { setopt } for pid=475 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.807878][ T30] audit: type=1400 audit(1765696226.186:185): avc: denied { read } for pid=475 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.875526][ T30] audit: type=1400 audit(1765696226.236:186): avc: denied { map } for pid=481 comm="syz.2.40" path="socket:[15791]" dev="sockfs" ino=15791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 32.939838][ T30] audit: type=1400 audit(1765696226.236:187): avc: denied { watch } for pid=481 comm="syz.2.40" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.098368][ T30] audit: type=1400 audit(1765696226.256:188): avc: denied { ioctl } for pid=475 comm="syz.3.39" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15796 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.171030][ T39] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 33.179774][ T480] loop4: detected capacity change from 0 to 40427 [ 33.185003][ T39] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 33.193190][ T39] usb 2-1: 2:1 : invalid channels 0 [ 33.253949][ T39] usb 2-1: USB disconnect, device number 2 [ 33.264878][ T480] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 33.280178][ T480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 33.356918][ T480] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.411175][ T480] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 33.421274][ T480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.438484][ T480] SELinux: (dev loop4, type f2fs) getxattr errno 2 [ 33.486806][ T508] loop0: detected capacity change from 0 to 512 [ 33.557804][ T508] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.45: inode has both inline data and extents flags [ 33.571494][ T508] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.45: couldn't read orphan inode 15 (err -117) [ 33.584036][ T508] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 33.799169][ T520] loop4: detected capacity change from 0 to 512 [ 33.843276][ T520] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 33.860355][ T520] EXT4-fs (loop4): mount failed [ 33.925818][ T536] loop2: detected capacity change from 0 to 128 [ 34.441898][ T559] loop2: detected capacity change from 0 to 1024 [ 34.525168][ T559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.550214][ T512] loop3: detected capacity change from 0 to 131072 [ 34.564566][ T559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 34.589373][ T559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 34.625701][ T512] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.689566][ T512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.750946][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.481341][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.544501][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.630049][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.676513][ T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.696957][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.764515][ T39] usb 1-1: config 0 descriptor?? [ 35.865117][ T512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46'. [ 35.878206][ T597] block device autoloading is deprecated and will be removed. [ 35.887298][ T597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 35.922650][ T597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 36.074018][ T605] loop2: detected capacity change from 0 to 512 [ 36.180800][ T612] loop3: detected capacity change from 0 to 512 [ 36.182123][ T605] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.63: couldn't read orphan inode 26 (err -116) [ 36.211145][ T605] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.231086][ T605] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.243425][ T39] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 36.253495][ T612] EXT4-fs (loop3): Ignoring removed oldalloc option [ 36.260457][ T612] EXT4-fs (loop3): Ignoring removed oldalloc option [ 36.281900][ T39] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 36.294594][ T612] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 36.318512][ T612] EXT4-fs (loop3): Unrecognized mount option "journal_path=" or missing value [ 36.350963][ T403] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 36.450969][ T571] loop0: detected capacity change from 0 to 1024 [ 36.451411][ T612] loop3: detected capacity change from 0 to 128 [ 36.501916][ T571] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.561218][ T612] attempt to access beyond end of device [ 36.561218][ T612] loop3: rw=0, want=241, limit=128 [ 36.579543][ T571] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 36.722790][ T39] usb 1-1: USB disconnect, device number 2 [ 36.811036][ T403] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.981015][ T403] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.990353][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.003953][ T403] usb 5-1: Product: syz [ 37.008513][ T403] usb 5-1: Manufacturer: syz [ 37.008885][ T627] loop2: detected capacity change from 0 to 7 [ 37.041114][ T403] usb 5-1: SerialNumber: syz [ 37.079106][ T630] kvm [629]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000043 data 0x6 [ 37.289844][ T607] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.307776][ T653] loop0: detected capacity change from 0 to 512 [ 37.332056][ T607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.360318][ T655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 37.414524][ T607] loop4: detected capacity change from 0 to 8192 [ 37.421529][ T653] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.441077][ T653] EXT4-fs (loop0): #blocks per group too big: 65535 [ 37.510956][ T551] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 37.560698][ T607] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.581013][ T607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.610974][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 37.610989][ T30] audit: type=1400 audit(1765696231.056:272): avc: denied { connect } for pid=606 comm="syz.4.64" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.731105][ T403] cdc_ncm 5-1:1.0: bind() failure [ 37.737483][ T403] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 37.744617][ T403] cdc_ncm 5-1:1.1: bind() failure [ 37.751125][ T403] usb 5-1: USB disconnect, device number 2 [ 37.761050][ T39] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 37.881005][ T551] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 37.890056][ T551] usb 2-1: config 1 has no interface number 0 [ 37.896425][ T551] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.907643][ T551] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 37.918704][ T551] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 37.928328][ T551] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 37.940024][ T551] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 24492, setting to 64 [ 38.131067][ T551] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.131508][ T39] usb 4-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 38.140355][ T551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.151673][ T39] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 38.165002][ T551] usb 2-1: Product: syz [ 38.173585][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 38.177926][ T551] usb 2-1: Manufacturer: syz [ 38.184811][ T39] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 38.189459][ T551] usb 2-1: SerialNumber: syz [ 38.198558][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.214573][ T39] usb 4-1: config 0 descriptor?? [ 38.231029][ T660] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 38.231029][ T651] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.251081][ T403] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.325768][ T30] audit: type=1400 audit(1765696231.776:273): avc: denied { read } for pid=673 comm="syz.4.80" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.349171][ T30] audit: type=1400 audit(1765696231.776:274): avc: denied { open } for pid=673 comm="syz.4.80" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.373336][ T675] netlink: 72 bytes leftover after parsing attributes in process `syz.4.80'. [ 38.451496][ T651] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.459163][ T651] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.501257][ T403] usb 3-1: Using ep0 maxpacket: 16 [ 38.620986][ T403] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 38.629095][ T403] usb 3-1: config 0 has no interface number 0 [ 38.635251][ T403] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.646223][ T403] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.656159][ T403] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 38.665508][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.674347][ T403] usb 3-1: config 0 descriptor?? [ 38.691322][ T651] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.698685][ T39] itetech 0003:06CB:73F5.0002: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.3-1/input0 [ 38.898293][ T553] usb 4-1: USB disconnect, device number 2 [ 39.114689][ T681] xt_CT: No such helper "pptp" [ 39.121051][ T551] cdc_ncm 2-1:1.1: bind() failure [ 39.130618][ T551] usb 2-1: USB disconnect, device number 3 [ 39.147248][ T672] loop2: detected capacity change from 0 to 4096 [ 39.165844][ T681] loop4: detected capacity change from 0 to 4096 [ 39.201505][ T681] EXT4-fs (loop4): Ignoring removed orlov option [ 39.207994][ T681] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 39.215842][ T681] EXT4-fs (loop4): cluster size (1024) smaller than block size (4096) [ 39.228888][ T672] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.246202][ T30] audit: type=1400 audit(1765696232.696:275): avc: denied { append } for pid=671 comm="syz.2.79" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.263664][ T672] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #15: comm syz.2.79: corrupted inode contents [ 39.270108][ T30] audit: type=1400 audit(1765696232.696:276): avc: denied { map } for pid=671 comm="syz.2.79" path="/dev/loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.282307][ T672] EXT4-fs error (device loop2): ext4_dirty_inode:6085: inode #15: comm syz.2.79: mark_inode_dirty error [ 39.309275][ T30] audit: type=1400 audit(1765696232.716:277): avc: denied { remove_name } for pid=671 comm="syz.2.79" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.340497][ T30] audit: type=1400 audit(1765696232.716:278): avc: denied { rename } for pid=671 comm="syz.2.79" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.372191][ T30] audit: type=1400 audit(1765696232.716:279): avc: denied { unlink } for pid=671 comm="syz.2.79" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.400168][ T686] netlink: 'syz.4.83': attribute type 32 has an invalid length. [ 39.411880][ T30] audit: type=1400 audit(1765696232.866:280): avc: denied { nlmsg_read } for pid=685 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.450999][ T403] usbhid 3-1:0.1: can't add hid device: -71 [ 39.460930][ T30] audit: type=1400 audit(1765696232.896:281): avc: denied { ioctl } for pid=691 comm="syz.3.85" path="socket:[16902]" dev="sockfs" ino=16902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.485758][ T403] usbhid: probe of 3-1:0.1 failed with error -71 [ 39.502643][ T403] usb 3-1: USB disconnect, device number 2 [ 39.971774][ T699] loop4: detected capacity change from 0 to 40427 [ 40.264261][ T723] loop4: detected capacity change from 0 to 16 [ 40.311848][ T723] erofs: Unknown parameter '' [ 40.521134][ T403] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 40.822840][ T727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=727 comm=syz.1.96 [ 40.881134][ T403] usb 3-1: device descriptor read/64, error -71 [ 41.206509][ T742] netlink: 'syz.3.99': attribute type 13 has an invalid length. [ 41.221779][ T744] loop1: detected capacity change from 0 to 1024 [ 41.275993][ T744] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,norecovery,,errors=continue. Quota mode: writeback. [ 41.352455][ T403] usb 3-1: device descriptor read/64, error -71 [ 41.401957][ T764] loop0: detected capacity change from 0 to 128 [ 41.481559][ T764] FAT-fs (loop0): Unrecognized mount option "quietr" or missing value [ 41.620960][ T403] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 41.744542][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.751825][ T772] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.759213][ T772] device bridge_slave_0 entered promiscuous mode [ 41.766718][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.774105][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.782357][ T772] device bridge_slave_1 entered promiscuous mode [ 41.891025][ T403] usb 3-1: device descriptor read/64, error -71 [ 41.901923][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.909202][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.916496][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.923544][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.947269][ T785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.113'. [ 41.965937][ T785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=785 comm=syz.3.113 [ 41.991930][ T777] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.999143][ T777] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.007194][ T777] device bridge_slave_0 entered promiscuous mode [ 42.014777][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.022210][ T777] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.029768][ T777] device bridge_slave_1 entered promiscuous mode [ 42.331568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.342716][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.363375][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.444766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.456018][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.463175][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.476547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.485455][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.492545][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.532093][ T332] device bridge_slave_1 left promiscuous mode [ 42.539902][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.550407][ T332] device bridge_slave_0 left promiscuous mode [ 42.557453][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.569589][ T332] device veth1_macvtap left promiscuous mode [ 42.576017][ T332] device veth0_vlan left promiscuous mode [ 42.818326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.831953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.928973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.938821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.947563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.956608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.977290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.985990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.995679][ T772] device veth0_vlan entered promiscuous mode [ 43.013219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.021536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.043321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.051459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.059396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.069192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.077870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.101853][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 43.101869][ T30] audit: type=1400 audit(1765696236.556:324): avc: denied { name_bind } for pid=805 comm="syz.4.117" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.118517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.147276][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.153214][ T808] loop3: detected capacity change from 0 to 1024 [ 43.154390][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.168232][ T403] usb 3-1: device descriptor read/64, error -71 [ 43.174724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.192995][ T772] device veth1_macvtap entered promiscuous mode [ 43.203471][ T808] EXT4-fs (loop3): Ignoring removed bh option [ 43.209688][ T808] EXT4-fs (loop3): Ignoring removed nobh option [ 43.216867][ T811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 43.227752][ T811] netem: change failed [ 43.237708][ T808] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.250208][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.258743][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.267539][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.276167][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.283256][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.295950][ T403] usb usb3-port1: attempt power cycle [ 43.295996][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.309943][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.321418][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.329827][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.367972][ T30] audit: type=1400 audit(1765696236.816:325): avc: denied { mounton } for pid=772 comm="syz-executor" path="/root/syzkaller.x1bUdc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.375718][ T777] device veth0_vlan entered promiscuous mode [ 43.395353][ T808] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,jqfmt=vfsv0,max_dir_size_kb=0x0000000000005aad,nodioread_nolock,nojournal_checksum,max_dir_size_kb=0x00000000004007b1,bh,usrquota,nobh,sb=0x0000000000000000,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 43.443725][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.452018][ T808] futex_wake_op: syz.3.116 tries to shift op by -1; fix this program [ 43.454185][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.480105][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.501534][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.515920][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.532064][ T30] audit: type=1400 audit(1765696236.986:326): avc: denied { setopt } for pid=806 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.580442][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.612023][ T30] audit: type=1400 audit(1765696237.006:327): avc: denied { map } for pid=806 comm="syz.3.116" path="socket:[17327]" dev="sockfs" ino=17327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.638651][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.670706][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.727187][ T30] audit: type=1400 audit(1765696237.006:328): avc: denied { read accept } for pid=806 comm="syz.3.116" path="socket:[17327]" dev="sockfs" ino=17327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.801630][ T30] audit: type=1400 audit(1765696237.156:329): avc: denied { map } for pid=806 comm="syz.3.116" path="/26/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.834912][ T777] device veth1_macvtap entered promiscuous mode [ 43.842474][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.852211][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.859802][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.869167][ T30] audit: type=1400 audit(1765696237.156:330): avc: denied { execute } for pid=806 comm="syz.3.116" path="/26/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.490991][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.504528][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.619612][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.700688][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.912539][ T30] audit: type=1400 audit(1765696238.366:331): avc: denied { connect } for pid=898 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.932127][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.948434][ T900] loop4: detected capacity change from 0 to 512 [ 45.001234][ T900] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 45.061262][ T900] EXT4-fs (loop4): Test dummy encryption mode enabled [ 45.070490][ T900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.087671][ T900] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 45.097250][ T902] SELinux: security_context_str_to_sid(sy) failed for (dev ?, type ?) errno=-22 [ 45.109621][ T902] SELinux: security_context_str_to_sid(sy) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 45.241959][ T30] audit: type=1400 audit(1765696238.696:332): avc: denied { mount } for pid=903 comm="syz.6.112" name="/" dev="configfs" ino=14618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.280590][ T30] audit: type=1400 audit(1765696238.696:333): avc: denied { create } for pid=912 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 45.320981][ T39] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 45.340942][ T39] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 45.358563][ T39] usb 6-1: config 1 interface 0 has no altsetting 0 [ 45.502634][ T844] device bridge_slave_1 left promiscuous mode [ 45.510333][ T844] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.525735][ T844] device bridge_slave_0 left promiscuous mode [ 45.538161][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.552854][ T844] device veth1_macvtap left promiscuous mode [ 45.558990][ T844] device veth0_vlan left promiscuous mode [ 45.571059][ T39] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 45.584441][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.592976][ T39] usb 6-1: Product: syz [ 45.597245][ T39] usb 6-1: Manufacturer: syz [ 45.601918][ T39] usb 6-1: SerialNumber: syz [ 45.614673][ T924] overlayfs: overlapping lowerdir path [ 45.630980][ T892] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.641660][ T892] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.991814][ T933] netlink: 96 bytes leftover after parsing attributes in process `syz.4.131'. [ 46.002689][ T933] netlink: 'syz.4.131': attribute type 4 has an invalid length. [ 46.033192][ T933] netlink: 'syz.4.131': attribute type 4 has an invalid length. [ 46.091487][ T942] syz.4.133 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.200970][ T885] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.331002][ T555] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.470930][ T885] usb 7-1: device descriptor read/64, error -71 [ 46.600911][ T555] usb 3-1: device descriptor read/64, error -71 [ 47.665187][ T966] loop4: detected capacity change from 0 to 512 [ 47.691581][ T964] netlink: 76 bytes leftover after parsing attributes in process `syz.3.139'. [ 47.692310][ T968] loop5: detected capacity change from 0 to 512 [ 47.723222][ T968] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.734611][ T968] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.800932][ T885] usb 7-1: device descriptor read/64, error -71 [ 47.833766][ T966] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.140: inode #1: comm syz.4.140: iget: illegal inode # [ 47.847492][ T966] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.140: error while reading EA inode 1 err=-117 [ 47.860547][ T966] EXT4-fs (loop4): 1 orphan inode deleted [ 47.866426][ T555] usb 3-1: device descriptor read/64, error -71 [ 47.866445][ T966] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.891515][ T966] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.140: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 48.151206][ T555] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.481092][ T555] usb 3-1: device descriptor read/64, error -71 [ 48.709247][ T885] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 49.021007][ T885] usb 7-1: device descriptor read/64, error -71 [ 49.043185][ T553] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 49.066892][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 49.066908][ T30] audit: type=1400 audit(1765696242.516:362): avc: denied { bind } for pid=984 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.380129][ T1005] loop6: detected capacity change from 0 to 512 [ 49.468991][ T1005] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 49.480050][ T1005] EXT4-fs (loop6): 1 truncate cleaned up [ 49.486073][ T1005] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 49.501447][ T30] audit: type=1400 audit(1765696242.956:363): avc: denied { bind } for pid=1000 comm="syz.6.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.521673][ T30] audit: type=1400 audit(1765696242.956:364): avc: denied { listen } for pid=1000 comm="syz.6.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.591016][ T554] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.671006][ T553] usb 4-1: config 252 has an invalid interface number: 90 but max is 0 [ 49.679516][ T553] usb 4-1: config 252 has no interface number 0 [ 49.685919][ T553] usb 4-1: config 252 interface 90 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 49.696238][ T553] usb 4-1: New USB device found, idVendor=2040, idProduct=7501, bcdDevice=35.9d [ 49.705434][ T553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.720943][ T555] usb 3-1: device descriptor read/64, error -71 [ 49.730999][ T978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 49.841069][ T555] usb usb3-port1: attempt power cycle [ 49.861063][ T554] usb 5-1: device descriptor read/64, error -71 [ 49.951925][ T551] usb 4-1: USB disconnect, device number 3 [ 50.143214][ T1027] Zero length message leads to an empty skb [ 50.172749][ T30] audit: type=1400 audit(1765696243.626:365): avc: denied { create } for pid=1032 comm="syz.5.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.193019][ T1018] loop6: detected capacity change from 0 to 40427 [ 50.206919][ T1018] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 50.216822][ T1018] F2FS-fs (loop6): journaled quota format not specified [ 50.271010][ T554] usb 5-1: device descriptor read/64, error -71 [ 50.277451][ T555] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.448107][ T1045] device bridge0 entered promiscuous mode [ 50.661211][ T39] rtl8150 6-1:1.0: couldn't reset the device [ 50.675464][ T39] rtl8150: probe of 6-1:1.0 failed with error -5 [ 50.717239][ T1048] loop3: detected capacity change from 0 to 512 [ 50.725695][ T39] usb 6-1: USB disconnect, device number 2 [ 50.841216][ T555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.852730][ T555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.862788][ T1048] EXT4-fs (loop3): Ignoring removed oldalloc option [ 50.869886][ T1048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.881128][ T554] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.893664][ T1048] EXT4-fs (loop3): 1 truncate cleaned up [ 50.899651][ T1048] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 50.904573][ T30] audit: type=1400 audit(1765696244.346:366): avc: denied { create } for pid=1056 comm="syz.5.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 50.951668][ T30] audit: type=1400 audit(1765696244.406:367): avc: denied { remount } for pid=1047 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.971061][ T555] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.971095][ T555] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 50.971113][ T555] usb 3-1: Manufacturer: syz [ 50.993757][ T1048] EXT4-fs (loop3): Ignoring removed orlov option [ 51.000319][ T1048] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option [ 51.011529][ T1048] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 51.029588][ T555] usb 3-1: config 0 descriptor?? [ 51.041942][ T30] audit: type=1400 audit(1765696244.496:368): avc: denied { setattr } for pid=1047 comm="syz.3.160" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.379655][ T554] usb 5-1: device descriptor read/64, error -71 [ 51.459852][ T30] audit: type=1400 audit(1765696244.906:369): avc: denied { ioctl } for pid=1074 comm="syz.6.167" path="socket:[18806]" dev="sockfs" ino=18806 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.657286][ T1085] loop3: detected capacity change from 0 to 128 [ 52.063330][ T1085] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.074589][ T1085] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.526657][ T1094] loop6: detected capacity change from 0 to 2048 [ 52.660970][ T1094] loop6: p1 < > p3 p4 [ 52.667698][ T1094] loop6: p3 size 65536 extends beyond EOD, truncated [ 52.677675][ T1096] loop4: detected capacity change from 0 to 512 [ 52.684536][ T1094] loop6: p4 start 42180 is beyond EOD, truncated [ 52.692549][ T555] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input4 [ 52.722060][ T555] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input5 [ 52.733066][ T30] audit: type=1400 audit(1765696246.176:370): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=722 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.756518][ T555] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 52.768310][ T30] audit: type=1400 audit(1765696246.176:371): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=722 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.801355][ T101] loop6: p1 < > p3 p4 [ 52.810070][ T101] loop6: p3 size 65536 extends beyond EOD, truncated [ 52.822259][ T1096] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.833819][ T101] loop6: p4 start 42180 is beyond EOD, truncated [ 52.841109][ T1096] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.893737][ T39] usb 3-1: USB disconnect, device number 8 [ 52.954805][ T1105] loop3: detected capacity change from 0 to 40427 [ 52.966770][ T408] udevd[408]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 52.969372][ T1111] loop6: detected capacity change from 0 to 512 [ 53.012443][ T1105] syz.3.174[1105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.013906][ T343] udevd[343]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 53.035322][ T1111] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 53.048191][ T1113] fido_id[1113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 53.084182][ T1118] loop3: detected capacity change from 0 to 256 [ 53.090793][ T1111] EXT4-fs error (device loop6): ext4_get_journal_inode:5151: comm syz.6.175: inode #1792: comm syz.6.175: iget: illegal inode # [ 53.134341][ T1111] EXT4-fs (loop6): Remounting filesystem read-only [ 53.154142][ T1111] EXT4-fs (loop6): no journal found [ 53.159652][ T1111] EXT4-fs (loop6): can't get journal size [ 53.167904][ T1118] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.180956][ T1118] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 53.209920][ T1111] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 53.220368][ T1111] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 53.223686][ T1118] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 53.239852][ T1111] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 53.466386][ T1132] netlink: 116 bytes leftover after parsing attributes in process `syz.4.178'. [ 53.473584][ T1135] loop6: detected capacity change from 0 to 256 [ 53.524458][ T1135] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 54.099241][ T1156] loop2: detected capacity change from 0 to 512 [ 54.290117][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 54.290132][ T30] audit: type=1400 audit(1765696247.736:382): avc: denied { create } for pid=1167 comm="syz.4.189" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.345076][ T1171] loop2: detected capacity change from 0 to 512 [ 54.375106][ T1171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.410491][ T30] audit: type=1400 audit(1765696247.776:383): avc: denied { mounton } for pid=1167 comm="syz.4.189" path="/40/file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.484060][ T1171] EXT4-fs (loop2): 1 truncate cleaned up [ 54.498068][ T30] audit: type=1326 audit(1765696247.946:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 54.531167][ T1171] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 54.616393][ T1171] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.190: reserved inode found cleared - inode=4 [ 54.644499][ T30] audit: type=1326 audit(1765696247.976:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 54.678809][ T1171] EXT4-fs (loop2): Remounting filesystem read-only [ 54.734907][ T30] audit: type=1326 audit(1765696247.976:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 54.758620][ T554] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 54.855055][ T1171] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm syz.2.190: Invalid inode table block 4294967295 in block_group 0 [ 54.879451][ T30] audit: type=1326 audit(1765696247.976:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 54.914226][ T1171] EXT4-fs (loop2): Remounting filesystem read-only [ 54.929175][ T1171] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm syz.2.190: Invalid inode table block 4294967295 in block_group 0 [ 54.952194][ T30] audit: type=1326 audit(1765696247.976:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 54.983551][ T1171] EXT4-fs (loop2): Remounting filesystem read-only [ 54.997618][ T1182] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm syz.2.190: Invalid inode table block 4294967295 in block_group 0 [ 55.008632][ T30] audit: type=1326 audit(1765696247.976:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 55.020922][ T554] usb 4-1: Using ep0 maxpacket: 16 [ 55.034484][ T30] audit: type=1326 audit(1765696247.976:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 55.034530][ T30] audit: type=1326 audit(1765696247.976:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1177 comm="syz.5.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 55.088324][ T1182] EXT4-fs (loop2): Remounting filesystem read-only [ 55.104688][ T1182] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5881: Corrupt filesystem [ 55.114779][ T1182] EXT4-fs (loop2): Remounting filesystem read-only [ 55.121734][ T1182] EXT4-fs error (device loop2): ext4_dirty_inode:6085: inode #2: comm syz.2.190: mark_inode_dirty error [ 55.133474][ T1182] EXT4-fs (loop2): Remounting filesystem read-only [ 55.150366][ T1204] overlayfs: failed to clone lowerpath [ 55.150948][ T555] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 55.164590][ T1204] overlayfs: failed to clone lowerpath [ 55.171248][ T1204] overlayfs: unrecognized mount option "verity=off" or missing value [ 55.193980][ T826] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm kworker/u4:15: Invalid inode table block 4294967295 in block_group 0 [ 55.208617][ T826] EXT4-fs (loop2): Remounting filesystem read-only [ 55.215167][ T554] usb 4-1: config 0 has no interfaces? [ 55.301033][ T554] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 55.310592][ T554] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 55.327317][ T554] usb 4-1: Manufacturer: syz [ 55.341162][ T554] usb 4-1: config 0 descriptor?? [ 55.637930][ T1166] pimreg1: tun_chr_ioctl cmd 1074025675 [ 55.650962][ T555] usb 7-1: Using ep0 maxpacket: 32 [ 55.657092][ T1166] pimreg1: persist disabled [ 55.771024][ T555] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.790936][ T555] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.793713][ T624] usb 4-1: USB disconnect, device number 4 [ 55.801163][ T555] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 55.820913][ T555] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.829743][ T555] usb 7-1: config 0 descriptor?? [ 56.133517][ T555] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 56.154826][ T1230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.205'. [ 56.166433][ T1229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.205'. [ 56.227779][ T1245] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 56.239715][ T1245] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 56.333391][ T624] usb 7-1: USB disconnect, device number 4 [ 57.082471][ T1265] process 'syz.5.215' launched './file0' with NULL argv: empty string added [ 57.145249][ T1266] 9pnet: Insufficient options for proto=fd [ 57.152101][ T1273] xt_hashlimit: max too large, truncated to 1048576 [ 57.460119][ T1290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 57.531005][ T552] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 57.736347][ T1293] loop4: detected capacity change from 0 to 40427 [ 57.785142][ T1293] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 57.793904][ T1293] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 57.802538][ T1293] F2FS-fs (loop4): fault_type options not supported [ 57.811717][ T1293] F2FS-fs (loop4): invalid crc value [ 57.818462][ T1293] F2FS-fs (loop4): Found nat_bits in checkpoint [ 57.858002][ T1293] F2FS-fs (loop4): Start checkpoint disabled! [ 57.865876][ T1293] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 57.873327][ T1293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 57.917617][ T1301] loop6: detected capacity change from 0 to 512 [ 57.960415][ T1301] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.971852][ T1301] EXT4-fs (loop6): group descriptors corrupted! [ 58.051124][ T552] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 58.060389][ T552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.068877][ T552] usb 3-1: Product: syz [ 58.073290][ T552] usb 3-1: Manufacturer: syz [ 58.077934][ T552] usb 3-1: SerialNumber: syz [ 58.336880][ T835] attempt to access beyond end of device [ 58.336880][ T835] loop4: rw=2049, want=45104, limit=40427 [ 58.350927][ T555] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.600947][ T555] usb 7-1: Using ep0 maxpacket: 8 [ 58.721066][ T555] usb 7-1: config 5 has an invalid interface number: 126 but max is 0 [ 58.741156][ T555] usb 7-1: config 5 has no interface number 0 [ 58.747375][ T555] usb 7-1: config 5 interface 126 has no altsetting 0 [ 58.820936][ T551] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.911007][ T555] usb 7-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=86.9e [ 58.920816][ T555] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.941078][ T555] usb 7-1: Product: syz [ 58.946100][ T555] usb 7-1: Manufacturer: syz [ 58.950791][ T555] usb 7-1: SerialNumber: syz [ 59.060946][ T551] usb 5-1: Using ep0 maxpacket: 16 [ 59.323100][ T555] usb 7-1: USB disconnect, device number 5 [ 59.341004][ T551] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 59.350394][ T551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.370706][ T551] usb 5-1: Product: syz [ 59.375427][ T551] usb 5-1: Manufacturer: syz [ 59.387320][ T551] usb 5-1: SerialNumber: syz [ 59.391288][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 59.391303][ T30] audit: type=1400 audit(1765696252.836:421): avc: denied { ioctl } for pid=1329 comm="syz.3.236" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.423789][ T551] r8152-cfgselector 5-1: config 0 descriptor?? [ 59.432458][ T30] audit: type=1400 audit(1765696252.876:422): avc: denied { set_context_mgr } for pid=1329 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.484406][ T30] audit: type=1400 audit(1765696252.936:423): avc: denied { write } for pid=1329 comm="syz.3.236" name="ptype" dev="proc" ino=4026532563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.535785][ T1342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1342 comm=syz.5.240 [ 59.557832][ T30] audit: type=1400 audit(1765696253.006:424): avc: denied { create } for pid=1344 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 59.603832][ T30] audit: type=1400 audit(1765696253.056:425): avc: denied { execute_no_trans } for pid=1348 comm="syz.5.243" path="/43/file0" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.672648][ T30] audit: type=1400 audit(1765696253.126:426): avc: denied { read } for pid=1312 comm="syz.4.232" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.739916][ T30] audit: type=1326 audit(1765696253.186:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1312 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c4986749 code=0x7ffc0000 [ 59.775225][ T30] audit: type=1326 audit(1765696253.226:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1312 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c4986749 code=0x7ffc0000 [ 59.799224][ T552] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 59.799878][ T1362] netlink: 48 bytes leftover after parsing attributes in process `syz.6.247'. [ 59.806936][ T30] audit: type=1400 audit(1765696253.226:429): avc: denied { write } for pid=1312 comm="syz.4.232" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.112562][ T30] audit: type=1400 audit(1765696253.436:430): avc: denied { setopt } for pid=1367 comm="syz.6.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.151018][ T551] r8152-cfgselector 5-1: Unknown version 0x0000 [ 60.157573][ T551] r8152-cfgselector 5-1: bad CDC descriptors [ 60.161318][ T1372] loop6: detected capacity change from 0 to 512 [ 60.181029][ T551] r8152-cfgselector 5-1: Unknown version 0x0000 [ 60.189786][ T551] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 60.198701][ T1372] EXT4-fs (loop6): Ignoring removed nobh option [ 60.213647][ T1372] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 60.228913][ T1372] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.265903][ T554] usb 3-1: USB disconnect, device number 9 [ 60.302824][ T1377] loop2: detected capacity change from 0 to 512 [ 60.341740][ T1377] EXT4-fs (loop2): Ignoring removed nobh option [ 60.381174][ T1377] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.401191][ T1377] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.417223][ T1377] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 60.436822][ T1377] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.250: Corrupt directory, running e2fsck is recommended [ 60.453935][ T1377] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 60.463026][ T1377] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.250: corrupted in-inode xattr [ 60.476644][ T1377] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.250: couldn't read orphan inode 15 (err -117) [ 60.481005][ T552] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.488848][ T1377] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_checksum,errors=continue,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 60.520041][ T552] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 60.584130][ T552] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 60.596159][ T552] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 60.598867][ T1383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.251'. [ 60.648069][ T1385] syz.2.252[1385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.648147][ T1385] syz.2.252[1385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.760997][ T552] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.806360][ T552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.814803][ T552] usb 4-1: Product: syz [ 60.819131][ T552] usb 4-1: Manufacturer: syz [ 60.824986][ T552] usb 4-1: SerialNumber: syz [ 60.851035][ T1339] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.053356][ T1403] loop2: detected capacity change from 0 to 1024 [ 61.071518][ T1339] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.093187][ T1339] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.100528][ T1403] EXT4-fs (loop2): Ignoring removed orlov option [ 61.187222][ T1403] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,data_err=ignore,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nombcache,lazytime,,errors=continue. Quota mode: none. [ 61.230977][ T554] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.330402][ T1420] loop3: detected capacity change from 0 to 512 [ 61.351067][ T552] cdc_ncm 4-1:1.0: bind() failure [ 61.371252][ T552] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 61.390954][ T552] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 61.399834][ T552] usb 4-1: USB disconnect, device number 5 [ 61.423707][ T1420] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 61.448642][ T1420] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.260: iget: bad i_size value: 12154757448730 [ 61.490940][ T554] usb 5-1: Using ep0 maxpacket: 16 [ 61.504537][ T1420] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.260: couldn't read orphan inode 13 (err -117) [ 61.527010][ T1420] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 61.610953][ T554] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.659467][ T1440] fuse: Unknown parameter '0x0000000000000009' [ 61.669938][ T1440] loop3: detected capacity change from 0 to 512 [ 61.681169][ T1440] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 61.700991][ T554] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.790966][ T554] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.911028][ T554] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.937853][ T1463] loop6: detected capacity change from 0 to 128 [ 62.944315][ T554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.961146][ T554] usb 5-1: SerialNumber: syz [ 62.997300][ T1463] attempt to access beyond end of device [ 62.997300][ T1463] loop6: rw=2049, want=250, limit=128 [ 63.013001][ T1462] attempt to access beyond end of device [ 63.013001][ T1462] loop6: rw=524288, want=250, limit=128 [ 63.026089][ T1462] attempt to access beyond end of device [ 63.026089][ T1462] loop6: rw=0, want=146, limit=128 [ 63.037470][ T1462] attempt to access beyond end of device [ 63.037470][ T1462] loop6: rw=0, want=146, limit=128 [ 63.057222][ T1463] attempt to access beyond end of device [ 63.057222][ T1463] loop6: rw=0, want=146, limit=128 [ 63.078370][ T1463] attempt to access beyond end of device [ 63.078370][ T1463] loop6: rw=0, want=146, limit=128 [ 63.101072][ T1463] attempt to access beyond end of device [ 63.101072][ T1463] loop6: rw=0, want=146, limit=128 [ 63.124051][ T1463] attempt to access beyond end of device [ 63.124051][ T1463] loop6: rw=0, want=146, limit=128 [ 63.145081][ T1462] attempt to access beyond end of device [ 63.145081][ T1462] loop6: rw=0, want=146, limit=128 [ 63.212988][ T554] usb 5-1: USB disconnect, device number 6 [ 63.327404][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.273'. [ 63.337382][ T1470] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.346757][ T1470] device bridge_slave_0 left promiscuous mode [ 63.353322][ T1470] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.986667][ T1488] mmap: syz.5.278 (1488): VmData 29093888 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 64.020949][ T1491] capability: warning: `syz.5.279' uses deprecated v2 capabilities in a way that may be insecure [ 64.411459][ T1495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=1495 comm=syz.5.280 [ 64.440810][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 64.440825][ T30] audit: type=1326 audit(1765696257.886:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.6.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15bab8749 code=0x7ffc0000 [ 64.503598][ T30] audit: type=1326 audit(1765696257.886:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.6.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd15bab8749 code=0x7ffc0000 [ 64.545263][ T30] audit: type=1326 audit(1765696257.886:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.6.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15bab8749 code=0x7ffc0000 [ 64.570577][ T1502] loop6: detected capacity change from 0 to 4096 [ 64.601702][ T30] audit: type=1326 audit(1765696257.936:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.6.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15bab8749 code=0x7ffc0000 [ 64.626328][ T1502] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.710489][ T1508] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 64.781099][ T885] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 64.802405][ T30] audit: type=1400 audit(1765696258.256:532): avc: denied { setattr } for pid=1510 comm="syz.4.285" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.342096][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.371443][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.379190][ T1521] IPv6: NLM_F_CREATE should be set when creating new route [ 65.388725][ T885] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 65.449308][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.458390][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.461070][ T885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.477323][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.480292][ T885] usb 3-1: config 0 descriptor?? [ 65.489989][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.497442][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.505229][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.514810][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.578819][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.590110][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.599417][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.607135][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.616748][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.624336][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.634790][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.642655][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.650127][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.659532][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.667240][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.676371][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.683894][ T1520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.694232][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.718653][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.728868][ T1534] loop6: detected capacity change from 0 to 512 [ 65.738624][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.748782][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.749221][ T30] audit: type=1400 audit(1765696259.206:533): avc: denied { mounton } for pid=1535 comm="syz.4.292" path="/syzcgroup/cpu/syz4/cpuset.cpus" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 65.756282][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.781403][ T1536] bpf: Bad value for 'mode' [ 65.793397][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.793514][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.812940][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.817925][ T1534] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.820630][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.839124][ T1534] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.855375][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.874808][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.882389][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.889992][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.897599][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.905289][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.912981][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.925624][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.933400][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.942160][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.951830][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.959494][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.966944][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.977119][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.984747][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.999311][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.028089][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.055655][ T1544] bridge0: port 1(gretap0) entered blocking state [ 66.062403][ T1544] bridge0: port 1(gretap0) entered disabled state [ 66.071754][ T1544] device gretap0 entered promiscuous mode [ 66.078020][ T1544] bridge0: port 1(gretap0) entered blocking state [ 66.084554][ T1544] bridge0: port 1(gretap0) entered forwarding state [ 66.110232][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.124117][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.132198][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.140428][ T1521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.176177][ T30] audit: type=1400 audit(1765696259.626:534): avc: denied { append } for pid=1533 comm="syz.6.291" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.204061][ T1548] loop4: detected capacity change from 0 to 128 [ 66.240104][ T1548] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.251389][ T1548] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.460046][ T1557] bridge0: port 3(gretap0) entered blocking state [ 66.466577][ T1557] bridge0: port 3(gretap0) entered disabled state [ 66.475664][ T1557] device gretap0 entered promiscuous mode [ 66.482084][ T1557] bridge0: port 3(gretap0) entered blocking state [ 66.488608][ T1557] bridge0: port 3(gretap0) entered forwarding state [ 66.740946][ T552] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 66.981041][ T552] usb 4-1: Using ep0 maxpacket: 16 [ 67.090922][ T551] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 67.179619][ T30] audit: type=1326 audit(1765696260.626:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 67.203585][ T30] audit: type=1326 audit(1765696260.626:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 67.227858][ T30] audit: type=1326 audit(1765696260.636:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f24d0939749 code=0x7ffc0000 [ 67.261101][ T552] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.270606][ T552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.278629][ T552] usb 4-1: Product: syz [ 67.282876][ T552] usb 4-1: Manufacturer: syz [ 67.287722][ T552] usb 4-1: SerialNumber: syz [ 67.293050][ T552] r8152-cfgselector 4-1: config 0 descriptor?? [ 67.497778][ T555] usb 3-1: USB disconnect, device number 10 [ 67.516219][ T1573] device wireguard0 entered promiscuous mode [ 67.541056][ T551] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 67.551223][ T552] r8152-cfgselector 4-1: Unknown version 0x0000 [ 67.558820][ T551] usb 5-1: config 1 interface 0 has no altsetting 0 [ 67.570961][ T552] r8152-cfgselector 4-1: Unknown version 0x0000 [ 67.582286][ T1566] 9pnet: p9_fd_create_tcp (1566): problem connecting socket to 127.0.0.1 [ 67.594228][ T552] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 67.761054][ T551] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.770489][ T551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.778992][ T551] usb 5-1: Product: 䐻 [ 67.783321][ T551] usb 5-1: Manufacturer: င [ 67.788053][ T551] usb 5-1: SerialNumber: Џ [ 67.811003][ T1569] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 68.074274][ T551] usb 5-1: USB disconnect, device number 7