last executing test programs: 56.93000841s ago: executing program 2 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffd2e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x6, 0xfffffffc, 0x13, @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8, 0x700, 0xffff, 0xa00000}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x5f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408000, 0x0) sendmsg$SOCK_DESTROY(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000b40)={0x1514, 0x15, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x9f}, [@INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "754cc938bf195df1a7a5b59d01b7771704eae82ff9473c1f954aa98f51e72ca7fdc36b67700e30f50330498dc18f0d696ed8589a51fba5d7278bb5e7fd8e9dba7e82278dc9162c3718ebca8b2f14f49f37bf6359a6073a63f998cab33966eaa54eb7dd8865f349d08e"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "1415e3beac1d64115df5b28293aac3cc042675c5ac47e8e2589a4ef8d43cb1de55c3981c4e30de45494c68ae7c06217b9e7044f7362d6e5a2e4619d0d3d2ff44cfe11ed1bff7e88b16bd2b3d48ad42c388d31d9a2b16eca7a6c4cecb361bb549da307b9b39900f144157474f7626e2c35b684c3cff20332838b5e6c3bbef3f207ea4869cfdb68849e3fffa129155ca55462e7cf4c364d935921f7ca1"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "5b429a467cb3237961b8a073017f1105ecc5f93add4b7455ed466b56d928fee9998da44b62bb88060e580b2679205129cb0df357a4889a6a71e934a983fd0ba06350a5534c6f91deef7991c9a19c5a2fbf0d8839129015b0b2256658f1e7a73e1f7b69ea09b60341fa4607497f20b0b252070577129159b97ee53b8bc8a4dd31a055ef8262cebfb7ce8a5b4cf3034b42f937fa6e051167d5501b8143b1b394204ade42d27b389ff3da46818522aa9c116d3cf486abed6a91acf1304fb43a394ee9262dd76633d3429c927b98229b46c30c7dd1d150b87aa0dbcffe0fb5be82361fde2b6b25a39fa392a5285649f445bde54b74bbd4c8b6"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "c13200dfd5bb42"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "64021d1eb8fc463940c8fbb348b38019f76cddae05f892a17b15590007d9540e5779ed8a43ef4b3d9a9ece12379d5080c0c135f8ff6be1b22befef23208c4bfb9491d6ed7257699b10beb03d1636938d7b4841b9a14417ef06cf7531255f5a42774e8598e46aaa86ec781bffb9338a88089657e98e880bed58001de9b9e46e65e3ca2882235f592d1e06af99e7ab815ab96f41933a0aa653dd02a8680a00a00354e82e57014cfed344361c4bc70a1cb6115c2236c07fd01a5a599708e31d14409cf31bb861ae13966e15babecd223b70cf2d"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "aeaf169a04e24e58d5208a532ec72e560c9ac654eab8746578279b19d5648fa5435c47eb85e140198c460c90954f9a0aeca8eab64f62b7c8ed194bf74f34987fc94fdc3d0a8f02f640d92f3817513592c1ae3e92b6ee9c10fe97"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "a625b064f062d18315887135fd7aa949cb0e4629b671d97ca89848cdb8791c3700f487d40fb4f1153aa45ecd57b9c77afffafc5d0c7d5f350df5dc63b79c031c48e78135bb56dce3398cc1760e9976c6456a1a33c5f234e15f01dfcc638eb24c5441ee0b800f0307d4734e19038da58c9f88e2ceb8a16b6217de9313129e0198f4cafe1aafb8449be5b582c802397a758f79938274a6acf286b611a47f38a3bf8b16c9ee698795"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "d04d2f056e1a2ce2fc0b98e8504c1f8130bb9fbe9c7c9f8046dee854aab47ecf39a16aad0eec3628d21606f8d7ee44ca864893a235333c79645ab924a2704cc77a15354a6f9880141fc984443e4828eac0f0e088f3e5bf4ae33d0974d51211af8a43e98db8bb1457808f904405a67666da019dcdd63e3a682f9564c265799b86f09593a534c7091e41d7603c629668a8ddc14db7398b1e82b6a2ca0efb3ef11be47a7c7767f77f7bd17500c150f2f17ef2a5a9871aa0185c6f1644d2c1e93e73efa6218156ac0f3abe72e95a6c23b94b08e32559daf6c4e15e1fa1702d0a77886232604a3d6ebacc0a4c088a6f7e5e3384be790c3054e2688b"}]}, 0x1514}, 0x1, 0x0, 0x0, 0x800}, 0x8885) mkdir(0x0, 0x0) 56.7970762s ago: executing program 2 (id=149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x200000000006, 0x0, 0xcf, 0x7ffc1ff8}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x92) capset(0x0, &(0x7f0000000000)) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x11, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000002a40)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 55.786647648s ago: executing program 2 (id=158): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500001f00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000580)={'syz1\x00', {0x6ec6, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x10001, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x8, 0x0, 0x0, 0x202, 0x8000, 0x1, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x7ffe, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffe9c, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd2, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x7, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x4, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x7, 0x9, 0x6, 0x1010000, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x401, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x2, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x3ff, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x14e2, 0x2, 0xe, 0x7f, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, 0x0) setuid(r7) setuid(r7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x40000) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) 54.882866085s ago: executing program 2 (id=165): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x5529, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000540)='./bus\x00', 0xa1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000190000000000002bfeb0e6fbf3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r2=>0x0, 0x29, 0x5, 0xc7, 0xf, 0x54, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x7800, 0x1, 0x6, 0x40}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005b40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8001, '\x00', r2, r0, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="ac27175cb1ba", @local, @val={@void, {0x8100, 0x0, 0x0, 0x103}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}], @generic="705b2d88137d2c664dc798d2e8ef95a0"}}}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000440)="c3", 0x1, 0xfece) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x100000000008001, 0x0, 0x0, 0x2, 0x0, "ef359f3901006dddfbd1ce5d29c2ee735c9d000ff8ee09e737ff0eff110ff4eb4b78c66ee677df701905b9aafab4ffffffffffff000400", "cba3d625780820d1cbf7db71038220ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e696ae9e00"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00!\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x124) r11 = socket(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f0000000100), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r10, 0x4004f506, &(0x7f0000000040)=0x4000001) 54.348639424s ago: executing program 2 (id=166): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) dup(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 54.265956223s ago: executing program 2 (id=167): pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, <r2=>0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002400)=""/206, 0xce}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000002500)=""/148, 0x94}], 0x3}, 0x4}], 0x1, 0x100, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000030ff00003000000002000000001a4b073b000013040000000000000000000009010000000000000001000004000000000000000002000000000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$tipc(r3, &(0x7f0000000300)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) mount_setattr(r1, &(0x7f00000025c0)='./file0\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x85, 0x80000, {r0}}, 0x72) unshare(0x60600) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x6040600) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000002600)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x200000, &(0x7f0000002640)="b875714ed59db730f558762c9ad22910bc08717beba5526a1588dfff6a257e23d5b2e46a442f0025f3387cf0ccd501965a7f2e34efb0c6cf6b4bccbeea71db9347b26e2a5910078edc0cbb9b250d8e6f1c86a2f0ac8339bb43b1d7cbed3428bdfe430d89e0cde4d527f6d3c3459f4f03cb9a58c5e96089e4777dfe3ead05f17d328af282f79f3766c7d7de9b6f94f131ef74fe7e55a2977759768fd7edcc048becae94609f5994736238065b47754974a5d92a2d0d300ced413b2b8e4d7793ba8546ad6238095682b98527d609f4283f1926a95617ba2e512b9ac5c31a64245e5b97564ebcf1cf84b09fe5bd7c89df048a7626bef5235e670fe246fe486405f65de381ea4fd0c0168c9186b9f3e2f930f84bc83e1f1978ab3dda9c1e1b72c7ce497896978eef52121828fce9dab706d8a21434b4cc472d009faadbcf5afa02ad7c13c24355f4123155caab175b91590397e7319d7971be490b8270db7cbbcb9a28cdba620fe592cf3ae193c212742cee1d2aeffd40062b7be05bb101cc315c8c97b021dfbb1d2993f0f50504de08390614636a0d587c96c89e2ccf0e32a7a91f5fa408e2ac7af2e3c38b116ae62acfb4688d62595ba71043186eca6c8e4728c19c644099cb7c94b2fc05d9dadbda911b2506c20a44972714ab5b09f65bfba1236aa148b93487ee62a18ec4a791f3b1571b216f3feef3ad610484cd258d9b82fb3a8910ce2dd2b863f41dbc1ea14e26fd9b72892e5a5b5bf1d5e78bae188d290d930e41ba8ddecd65f7e8b7ada83be6380faa787d756545886eca3caa47efd749d4514d597916136257e58daf5a1a89d3024820ed1d53a6a4e39a88d7d5277f12780936073a30a1b4a181ae0aada6cc87a39a48a508614fa8581ae0fee8909802a00194332d402b1fb35d4c7dd7cdc8b70bc6e4118f81ed95debcb3f075b99c81b9828ec31e600a73d55ac7f41cc116c5a60295b566e63536959a57ff9f0ee8cdf876174226407c373aeb32100bdd4bf35bf42a29fa55600c2ffa4486e0cc57c4a51888b9a97bfeeeeb89f7788a4d2d9198691f9e5ccbfe48d83065b274967e9e05b0820e9883660f9a0adf149ad71027d565b61efe3ac0f99f20ac09963508ac4348d4c137b1dd1576fdbd95a341cc42333d645875bc30f900bcacd112cd9a41cf65f9356f44e9f6275388b83326f461c0fa0f427dd77d22459de3d6136011e7b7833370bdde6932356a537cb9cf57775d41485620b3dcdf8e3d9fca7d757416ff3932d7945b7467d05403bbb5ee693a16d4b6617a5a41cbc98f2da778d97b44cace0a3906a1b2425f89d30e81cfbd3469ea1f0735dca916f5453543afe75b3f936065a49af8b57018295c6973cbfd06f8e773574852bc5d93ecedfe426869e3a47dd4e54723e8510135fe228f1ad36b270f26e13640449d1bba982a1f336d8c35a14ccb184eafc2d4ea9a4cdd434ae62c6709ddb6a8c77e7e65766e5bc298ad8c15fe829b93ecbdff78fa87e427512eb2065218595ec5897080f31991446537e37cf798e0631ed187c5633dc4c424b5633fa5e7281ca6ee7af4791554b6222eebd1c93d15363b724001bc85243a5eac5940b28ecb19cf3f19c1196c09e3dceb859efcd534ee19d3c846eb480663ad83c178b7a73ddae3e2320cfe4aab8c383d8b632e2f778ebd98b0563e87c201ac7d8debbc278cac4595dde861a93501e1363da0f25937d7914b97a450e3ea7c6effdadc066e06eaa00d8af92744fa0cce9d078c1aa09874716fbae069c4cb0a2075a9898e636635b8c60db42574dc2c9b8ceeb6d3444240b319f7e2afb4eb36f9138fca57b2b24e85455c2be93a5ac511425c43aa301e33e0026ab075824ca7b6f4a2b73ff8d7fc9f1bb743ffda543cecf6463bbffc94584db11368f87e67bed5fda0031b5364dfacf701ed77d8d343622966e54d3d6b8f2c40f95a0814ed64def793a2efc777d630da92ec0b52bb2de7a1f52e02e93fa92e463dd757bcadd6251028e9f7719264e7198f7418fe15a0a57de9baae26ec27d00b36bac532719feef8389ba6ac07f5b00236942c52e8d3e86401c05b7906f6df7b0031641b788c783f7786f6130d14b61f89376fcd595e926e380cb39bca7a5271618db4dc336346e472bded95fbda3f3afee787e19d464feb44b3c3940519771850e0c3a743996105770dbd0821ec56a95e2d265e9b47758c74f56ef1aa68be9d6fb8955d0558cb0929d09bf382db9173ee57afb7ebb68b5b71769d871cbf4da051b6668ff427a714066d1cf53cd8f6696cab9218b1d44b0b9feccf33a214a180e29c39541c1e2a8f9070c303e6320eaaa56fc864d785116b0d91248a5b63932f528d73ef7a0c5c9aa847475b4805329ec731f1e801120d098d2082d7d5b0366edef3b2dcc2395609bc8ea1d64392154bffb0d019e993cdd9c901d8bbe24267f103f21a518d468042a4b34f2792d536f93d199d6dfe5577fedd735b2b0126e77f657480753107e253e6f0b4f176ae5d857d60d85f686ba1d248a1ed6523b872ef913d6f4ae34ac4ddd700db50414baf5500b18af8a825cf9ea56967f4dfb237ee4eaf1110db0a464f697b6374dc4b75489696fd8f69d4f5d39643713467f44b4c53571b7ac20c2b35e400da04bcd5865a55762b42bb90b496cadab15e36f0f2ed4b1b607d4eaae8dad5f69f81822859fdacccd6941a2e6087d33ba0e237c634785b1af2140b8e7ab4224d8afc86fa7f4a735267c72b6603a3d56744dcb496b74607bfaf58a6d710ad0ca874e6b681a8375b56cc86202563bcef0acc0c666fd30ea508c4bd7ec78b607bb8c95091131cf9dd0f44d57f74e87571a79c8ed0c11c73d094d64b432365a0e8d5e5ed90e84077f37e739516d784cc0e9516a01847b9943f42934aff5763da6eee4df45ad4bba884be8f581dcbaec59e337ae14720c6af8665cc0285216447249b7d750896d1c026bd7c6a6f6e797f5c1d162def2ebcd7d64b7230f3b0b8689183d96d0ea72e4a34db39b8c112f770e8a895df1d34edd73b181d6fdc1c952ba387e3d24b8d99511b727afcc4c4375ccf43e84ae940c5c8b64129dcece53889576e2e23bdc83a22cf0ad2decb97e9eb2ac0d5a7bbd39bd001d9e15cefd37a0a10f25d80b4aaff23f299d8612cf2e2b09adbdc16fa58028ad494aae8a44ab4f32cb20eb23f741a797e6e6c9b43903299f2a04324b425426f8751febee2db0f90bcb902e594035fe3a5c17dd75e512cf3c16aadba9ec6571f6aa55b35cf6ce0415baf6b5a332d92b944105c7cdecc302cdb47aa3037c2c5bf9a9e101d9e9d0e5378ed5a0db77d1904c923d2ca57fd1f42bb80c77e9bf0153735a732ad7152c2606f100e8ddb4db33938aeabdb9b948301097fe8fc258197c087a3251c0385efce70c4f8d62acc89ee88c511c594acbb3a950b7cc385827ce7002c8355060b13a0d833b8c5955f885c5fb3d093b0e2b9cecdc9a3961708148e7aea8594eaf6ccceec04c4917c422ef0462c1c9ceda36944e4c1519470a7974b3e5216260c14ccb7a7395c5e3e5455ae56aa28c51604d1872fcd95457974ed759371837829bd4455e67d9cca1f336fb5c1ee192924e67ee4f80195b67b4b4967a3541a24af6fff389c3551633c47fdb375362c7b5b3229cf4b28bcd2c9063c38c109cddb43692dace5a5973c4353bca2cedf738f91871280fa157c2bced4f1ea989f6f16eebd9e0817a06e5767dc6709b5a93c4984f61ed0f586b026d595e2f37cccf9aa32fe6ff1f0577443d0e1291b7e17fc43e8b14b8d02eaa63ff7f17b0f5355c897e6f8f3e0d6128084595743a3a47c96f3c3808a70bdef60a8f351375ea7d2e3c444694a4b52a636b13d46524869b3a346a7e167b57681e4e2c66a196909649bf8b983cf0dcbc7949c220af8b2bdb84edbea43719cfb9083469e041d0bef808715aa4e8e29f65df1520db396bc80664f4e1012a86e15bb24589eba04718fa34b09fd9ff08ed756814a607a6f3b007bb54616911f9a14784c4cbb3ed1d248201fd0c51026568259dafc47e37fbaa62ea4106b7603204c29ca4b6185c343f4cc9d566aa118cf39fdfb102e2db896ac1677ce681ab15f73c45a0d1dbffbd2af10de0cb565377a8061e0e353674e2703d948d777632b4a399a87ab0595a0c4b98e349be1f605c47a5cf75dbd10f5453326201f95063bae609d911c756f8f794ad72a084585e0f980cb7c3cf6a78b6f0d53ad7e59c86a54ca3ba35c32d506daec8fcfa6cc96b0d7796e570fae5058a22e1b2930a474be6419478a1a1f9ef2f8df410e55e6fee449cfb45519a527617dbfc01437f7641d5cf299f3085b214111a705fb3945dce09473da4da09bccab4b9dab3f39ac67e3d55028eaf2f1f8c5ad8e17a2c15be349c7d370d78ba111ec287c71e536d497985523179e54703459132b29a7cecdb0cbe99de9f3e97fd03b85320df6c23ce98510d0ceb4765c78945bebc63a263d67534d95c52897541b727009db8c3a3edf3483a23c33aaea90a01030d1b48c41a40f11f0d0d6caffc1386ea32d1dc622f37700daf788c532aefa8ee4a33d0edd330f534ecff5f9f8dd7845228720affe6456d57f30f251d1d89b083b06fee07dc8ba5aab3e7e733d5cf084f1e8d2b8581724b2c21fae4e002a60acf8f7b210299854947799cce471624297757634d2d6706ea2382f5d486adc86094fa28459a141af6f03294b314fae6aabc44a4ba21bac91571658bc140ab435b4af39a3f9bc7c74af9ce5c50cfde9ab8366ddf28d05cc7f445757b7768fbf1ddca90386908562c08eb3146aac0707f0d97a7b77b7e1761fe1a5c14192a38342ca287e16f4622d785d66521815f1cbb495d7a00c51b85d0167c6e111e4d526edba9128ab524a6535b7dc7d397a8e6a4a463ed5e21f0244c45c3aba1c374fc2042d3b418488673ac3b0fdd507b7f3ea45a7a45c71a5298f938218a9dd12b8f4af28560193d61436ded636601445b91f009fe184de7544a813f3f532e98409de20aa132683b3ae5ddb9f0fb97d6b5ff66f94d2181748166447b53208b6415300db8c6e9f7e7a58b66aef6eb46c53f0f64c945cfd21de210b9679aaa6867e065588563b94f01839cb830ac56e676b64635764cfd869486d7ae08df627ffe4abefe28ac57533d98bea154ef9ac715d9ef03cdc9cbd3b7df4a2bfb328a71dc5cd491897de75b4bc93c20b92bcf362dc5e4ecfdf7568b7c35b4502c98551450a0db77942ac796267340124d5d89e6cb3f6c24f6a2b765e80e9e2ba59ce7bd1a9aee77d7670e6a4b0cfce2e61452ea39b088b48363a3203c072ed4b947fb14b642f8846306ddf82ae0c7ddc28474140312d2b64b903e23bd2b549b981136a0affd55930317095101f1953b903c4cbfce946424dc4d731eca6a7255db696987faf1a5a8454370f27f47b26b796852701af1ecc45fe138f4f7ddfae8bea2060063e2c8bfe889b5ade9ea6db6641b8291ac3dbf7da7a3f0e4c48305d7e462a74bc6795c40f4f5c82e992e0c20f5827c30b7146ed865701fa47094afa8c4e7e56f5db3a24fa8c7f2117dcbfa311c2dd74d86c7438f5dde22a18cf69241921ea78076d9194037e1919617440cff49fae4a5d42f3b93be0209e066834b3467b2d9014fc73139ef86eb206e4e2aa716e6e3828d9b09fc0f7f2e89d8526efafd32387c0471f4a5570b4512766eeea4ab2e697c63d2fe41d1ed17a303b0c0ee5a309592516581be6f6e1ae348637eb0096fe4ce4996920a06e0752b51364deb0f4", 0x1000, &(0x7f0000000080), &(0x7f0000003640), &(0x7f0000003680)="024cab4a6f88055cb954e16bd65b8b9e4f739a600129b0a8b450830fa8cf3f623abaa3cef49bffa66664b4bd84c24b34a5bf5e2c2ae00c79d02247b9ce5c74a2ad23a1fba1eda0c3c1fba60cfd8e00a8e01c5d0558e16873ca00f627784260dd045f712279f5f77f759fbfb4eafa03eaa9e5d286b85689a0ff38e8551dbc6863f3dfc2fd8e3072d242519bec2fdf8f51e36bd0e9f9d2578261cfee215debc6ae2e0931d6440055537892524a0240289eedb3edaff03ab6a92ffb86a25e9a158bfef523c8379f6da6a4314831816bc685641f95ee2acbd96c1582abf0b3d0032b") ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000003780)) 54.227360753s ago: executing program 32 (id=167): pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, <r2=>0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002400)=""/206, 0xce}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000002500)=""/148, 0x94}], 0x3}, 0x4}], 0x1, 0x100, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000030ff00003000000002000000001a4b073b000013040000000000000000000009010000000000000001000004000000000000000002000000000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$tipc(r3, &(0x7f0000000300)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) mount_setattr(r1, &(0x7f00000025c0)='./file0\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x85, 0x80000, {r0}}, 0x72) unshare(0x60600) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x6040600) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000002600)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x200000, &(0x7f0000002640)="b875714ed59db730f558762c9ad22910bc08717beba5526a1588dfff6a257e23d5b2e46a442f0025f3387cf0ccd501965a7f2e34efb0c6cf6b4bccbeea71db9347b26e2a5910078edc0cbb9b250d8e6f1c86a2f0ac8339bb43b1d7cbed3428bdfe430d89e0cde4d527f6d3c3459f4f03cb9a58c5e96089e4777dfe3ead05f17d328af282f79f3766c7d7de9b6f94f131ef74fe7e55a2977759768fd7edcc048becae94609f5994736238065b47754974a5d92a2d0d300ced413b2b8e4d7793ba8546ad6238095682b98527d609f4283f1926a95617ba2e512b9ac5c31a64245e5b97564ebcf1cf84b09fe5bd7c89df048a7626bef5235e670fe246fe486405f65de381ea4fd0c0168c9186b9f3e2f930f84bc83e1f1978ab3dda9c1e1b72c7ce497896978eef52121828fce9dab706d8a21434b4cc472d009faadbcf5afa02ad7c13c24355f4123155caab175b91590397e7319d7971be490b8270db7cbbcb9a28cdba620fe592cf3ae193c212742cee1d2aeffd40062b7be05bb101cc315c8c97b021dfbb1d2993f0f50504de08390614636a0d587c96c89e2ccf0e32a7a91f5fa408e2ac7af2e3c38b116ae62acfb4688d62595ba71043186eca6c8e4728c19c644099cb7c94b2fc05d9dadbda911b2506c20a44972714ab5b09f65bfba1236aa148b93487ee62a18ec4a791f3b1571b216f3feef3ad610484cd258d9b82fb3a8910ce2dd2b863f41dbc1ea14e26fd9b72892e5a5b5bf1d5e78bae188d290d930e41ba8ddecd65f7e8b7ada83be6380faa787d756545886eca3caa47efd749d4514d597916136257e58daf5a1a89d3024820ed1d53a6a4e39a88d7d5277f12780936073a30a1b4a181ae0aada6cc87a39a48a508614fa8581ae0fee8909802a00194332d402b1fb35d4c7dd7cdc8b70bc6e4118f81ed95debcb3f075b99c81b9828ec31e600a73d55ac7f41cc116c5a60295b566e63536959a57ff9f0ee8cdf876174226407c373aeb32100bdd4bf35bf42a29fa55600c2ffa4486e0cc57c4a51888b9a97bfeeeeb89f7788a4d2d9198691f9e5ccbfe48d83065b274967e9e05b0820e9883660f9a0adf149ad71027d565b61efe3ac0f99f20ac09963508ac4348d4c137b1dd1576fdbd95a341cc42333d645875bc30f900bcacd112cd9a41cf65f9356f44e9f6275388b83326f461c0fa0f427dd77d22459de3d6136011e7b7833370bdde6932356a537cb9cf57775d41485620b3dcdf8e3d9fca7d757416ff3932d7945b7467d05403bbb5ee693a16d4b6617a5a41cbc98f2da778d97b44cace0a3906a1b2425f89d30e81cfbd3469ea1f0735dca916f5453543afe75b3f936065a49af8b57018295c6973cbfd06f8e773574852bc5d93ecedfe426869e3a47dd4e54723e8510135fe228f1ad36b270f26e13640449d1bba982a1f336d8c35a14ccb184eafc2d4ea9a4cdd434ae62c6709ddb6a8c77e7e65766e5bc298ad8c15fe829b93ecbdff78fa87e427512eb2065218595ec5897080f31991446537e37cf798e0631ed187c5633dc4c424b5633fa5e7281ca6ee7af4791554b6222eebd1c93d15363b724001bc85243a5eac5940b28ecb19cf3f19c1196c09e3dceb859efcd534ee19d3c846eb480663ad83c178b7a73ddae3e2320cfe4aab8c383d8b632e2f778ebd98b0563e87c201ac7d8debbc278cac4595dde861a93501e1363da0f25937d7914b97a450e3ea7c6effdadc066e06eaa00d8af92744fa0cce9d078c1aa09874716fbae069c4cb0a2075a9898e636635b8c60db42574dc2c9b8ceeb6d3444240b319f7e2afb4eb36f9138fca57b2b24e85455c2be93a5ac511425c43aa301e33e0026ab075824ca7b6f4a2b73ff8d7fc9f1bb743ffda543cecf6463bbffc94584db11368f87e67bed5fda0031b5364dfacf701ed77d8d343622966e54d3d6b8f2c40f95a0814ed64def793a2efc777d630da92ec0b52bb2de7a1f52e02e93fa92e463dd757bcadd6251028e9f7719264e7198f7418fe15a0a57de9baae26ec27d00b36bac532719feef8389ba6ac07f5b00236942c52e8d3e86401c05b7906f6df7b0031641b788c783f7786f6130d14b61f89376fcd595e926e380cb39bca7a5271618db4dc336346e472bded95fbda3f3afee787e19d464feb44b3c3940519771850e0c3a743996105770dbd0821ec56a95e2d265e9b47758c74f56ef1aa68be9d6fb8955d0558cb0929d09bf382db9173ee57afb7ebb68b5b71769d871cbf4da051b6668ff427a714066d1cf53cd8f6696cab9218b1d44b0b9feccf33a214a180e29c39541c1e2a8f9070c303e6320eaaa56fc864d785116b0d91248a5b63932f528d73ef7a0c5c9aa847475b4805329ec731f1e801120d098d2082d7d5b0366edef3b2dcc2395609bc8ea1d64392154bffb0d019e993cdd9c901d8bbe24267f103f21a518d468042a4b34f2792d536f93d199d6dfe5577fedd735b2b0126e77f657480753107e253e6f0b4f176ae5d857d60d85f686ba1d248a1ed6523b872ef913d6f4ae34ac4ddd700db50414baf5500b18af8a825cf9ea56967f4dfb237ee4eaf1110db0a464f697b6374dc4b75489696fd8f69d4f5d39643713467f44b4c53571b7ac20c2b35e400da04bcd5865a55762b42bb90b496cadab15e36f0f2ed4b1b607d4eaae8dad5f69f81822859fdacccd6941a2e6087d33ba0e237c634785b1af2140b8e7ab4224d8afc86fa7f4a735267c72b6603a3d56744dcb496b74607bfaf58a6d710ad0ca874e6b681a8375b56cc86202563bcef0acc0c666fd30ea508c4bd7ec78b607bb8c95091131cf9dd0f44d57f74e87571a79c8ed0c11c73d094d64b432365a0e8d5e5ed90e84077f37e739516d784cc0e9516a01847b9943f42934aff5763da6eee4df45ad4bba884be8f581dcbaec59e337ae14720c6af8665cc0285216447249b7d750896d1c026bd7c6a6f6e797f5c1d162def2ebcd7d64b7230f3b0b8689183d96d0ea72e4a34db39b8c112f770e8a895df1d34edd73b181d6fdc1c952ba387e3d24b8d99511b727afcc4c4375ccf43e84ae940c5c8b64129dcece53889576e2e23bdc83a22cf0ad2decb97e9eb2ac0d5a7bbd39bd001d9e15cefd37a0a10f25d80b4aaff23f299d8612cf2e2b09adbdc16fa58028ad494aae8a44ab4f32cb20eb23f741a797e6e6c9b43903299f2a04324b425426f8751febee2db0f90bcb902e594035fe3a5c17dd75e512cf3c16aadba9ec6571f6aa55b35cf6ce0415baf6b5a332d92b944105c7cdecc302cdb47aa3037c2c5bf9a9e101d9e9d0e5378ed5a0db77d1904c923d2ca57fd1f42bb80c77e9bf0153735a732ad7152c2606f100e8ddb4db33938aeabdb9b948301097fe8fc258197c087a3251c0385efce70c4f8d62acc89ee88c511c594acbb3a950b7cc385827ce7002c8355060b13a0d833b8c5955f885c5fb3d093b0e2b9cecdc9a3961708148e7aea8594eaf6ccceec04c4917c422ef0462c1c9ceda36944e4c1519470a7974b3e5216260c14ccb7a7395c5e3e5455ae56aa28c51604d1872fcd95457974ed759371837829bd4455e67d9cca1f336fb5c1ee192924e67ee4f80195b67b4b4967a3541a24af6fff389c3551633c47fdb375362c7b5b3229cf4b28bcd2c9063c38c109cddb43692dace5a5973c4353bca2cedf738f91871280fa157c2bced4f1ea989f6f16eebd9e0817a06e5767dc6709b5a93c4984f61ed0f586b026d595e2f37cccf9aa32fe6ff1f0577443d0e1291b7e17fc43e8b14b8d02eaa63ff7f17b0f5355c897e6f8f3e0d6128084595743a3a47c96f3c3808a70bdef60a8f351375ea7d2e3c444694a4b52a636b13d46524869b3a346a7e167b57681e4e2c66a196909649bf8b983cf0dcbc7949c220af8b2bdb84edbea43719cfb9083469e041d0bef808715aa4e8e29f65df1520db396bc80664f4e1012a86e15bb24589eba04718fa34b09fd9ff08ed756814a607a6f3b007bb54616911f9a14784c4cbb3ed1d248201fd0c51026568259dafc47e37fbaa62ea4106b7603204c29ca4b6185c343f4cc9d566aa118cf39fdfb102e2db896ac1677ce681ab15f73c45a0d1dbffbd2af10de0cb565377a8061e0e353674e2703d948d777632b4a399a87ab0595a0c4b98e349be1f605c47a5cf75dbd10f5453326201f95063bae609d911c756f8f794ad72a084585e0f980cb7c3cf6a78b6f0d53ad7e59c86a54ca3ba35c32d506daec8fcfa6cc96b0d7796e570fae5058a22e1b2930a474be6419478a1a1f9ef2f8df410e55e6fee449cfb45519a527617dbfc01437f7641d5cf299f3085b214111a705fb3945dce09473da4da09bccab4b9dab3f39ac67e3d55028eaf2f1f8c5ad8e17a2c15be349c7d370d78ba111ec287c71e536d497985523179e54703459132b29a7cecdb0cbe99de9f3e97fd03b85320df6c23ce98510d0ceb4765c78945bebc63a263d67534d95c52897541b727009db8c3a3edf3483a23c33aaea90a01030d1b48c41a40f11f0d0d6caffc1386ea32d1dc622f37700daf788c532aefa8ee4a33d0edd330f534ecff5f9f8dd7845228720affe6456d57f30f251d1d89b083b06fee07dc8ba5aab3e7e733d5cf084f1e8d2b8581724b2c21fae4e002a60acf8f7b210299854947799cce471624297757634d2d6706ea2382f5d486adc86094fa28459a141af6f03294b314fae6aabc44a4ba21bac91571658bc140ab435b4af39a3f9bc7c74af9ce5c50cfde9ab8366ddf28d05cc7f445757b7768fbf1ddca90386908562c08eb3146aac0707f0d97a7b77b7e1761fe1a5c14192a38342ca287e16f4622d785d66521815f1cbb495d7a00c51b85d0167c6e111e4d526edba9128ab524a6535b7dc7d397a8e6a4a463ed5e21f0244c45c3aba1c374fc2042d3b418488673ac3b0fdd507b7f3ea45a7a45c71a5298f938218a9dd12b8f4af28560193d61436ded636601445b91f009fe184de7544a813f3f532e98409de20aa132683b3ae5ddb9f0fb97d6b5ff66f94d2181748166447b53208b6415300db8c6e9f7e7a58b66aef6eb46c53f0f64c945cfd21de210b9679aaa6867e065588563b94f01839cb830ac56e676b64635764cfd869486d7ae08df627ffe4abefe28ac57533d98bea154ef9ac715d9ef03cdc9cbd3b7df4a2bfb328a71dc5cd491897de75b4bc93c20b92bcf362dc5e4ecfdf7568b7c35b4502c98551450a0db77942ac796267340124d5d89e6cb3f6c24f6a2b765e80e9e2ba59ce7bd1a9aee77d7670e6a4b0cfce2e61452ea39b088b48363a3203c072ed4b947fb14b642f8846306ddf82ae0c7ddc28474140312d2b64b903e23bd2b549b981136a0affd55930317095101f1953b903c4cbfce946424dc4d731eca6a7255db696987faf1a5a8454370f27f47b26b796852701af1ecc45fe138f4f7ddfae8bea2060063e2c8bfe889b5ade9ea6db6641b8291ac3dbf7da7a3f0e4c48305d7e462a74bc6795c40f4f5c82e992e0c20f5827c30b7146ed865701fa47094afa8c4e7e56f5db3a24fa8c7f2117dcbfa311c2dd74d86c7438f5dde22a18cf69241921ea78076d9194037e1919617440cff49fae4a5d42f3b93be0209e066834b3467b2d9014fc73139ef86eb206e4e2aa716e6e3828d9b09fc0f7f2e89d8526efafd32387c0471f4a5570b4512766eeea4ab2e697c63d2fe41d1ed17a303b0c0ee5a309592516581be6f6e1ae348637eb0096fe4ce4996920a06e0752b51364deb0f4", 0x1000, &(0x7f0000000080), &(0x7f0000003640), &(0x7f0000003680)="024cab4a6f88055cb954e16bd65b8b9e4f739a600129b0a8b450830fa8cf3f623abaa3cef49bffa66664b4bd84c24b34a5bf5e2c2ae00c79d02247b9ce5c74a2ad23a1fba1eda0c3c1fba60cfd8e00a8e01c5d0558e16873ca00f627784260dd045f712279f5f77f759fbfb4eafa03eaa9e5d286b85689a0ff38e8551dbc6863f3dfc2fd8e3072d242519bec2fdf8f51e36bd0e9f9d2578261cfee215debc6ae2e0931d6440055537892524a0240289eedb3edaff03ab6a92ffb86a25e9a158bfef523c8379f6da6a4314831816bc685641f95ee2acbd96c1582abf0b3d0032b") ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000003780)) 26.32455484s ago: executing program 4 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000080)=""/152, 0x98}, {&(0x7f0000000140)=""/110, 0x6e}, {}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/101, 0x65}], 0x9) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100"]) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000180)=r4}, 0x20) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r4}, 0x20) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000000000000400101c00000000000000000000000007824b9ff0651e7616f3e3bc027610e14f5fcb446ae42b5efe940b168da283327697b9a4ebfe2a99aaacc4547251f4d033ea37a5ffd25e41aa2029a9154fe72454d43ddf5b77ff8d533caf703e6a39d62e9c40c82ece1c60d882080af93dde75b4e2e87313e94a431e81963fa53000610f79ed67028a24c13c40135cae1380a5356b17c6507510943c1e87201e18d25c2fe2d37a5e58e5be22210f1b89ccf8b7c4058991e90a06881630e3cce9ea841d0f7ec0a9f859aa97b"]) 26.209314709s ago: executing program 4 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000040000001200000002000000", @ANYRES32, @ANYBLOB="0000000000000000f64e0979f6be7123ac27de7eb9a1ff0093000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000950c91d758b3abbd2a3d4c34004f397279550f625853b24da45e6696e3b14fdeb4fd573e09a3efe8dbcd55f3ab56dc9a1430850e6a7196c33215fc0e061843d0fb02c6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x18) setxattr$incfs_size(&(0x7f00000017c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @remote, @empty}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x89901) 26.047944729s ago: executing program 4 (id=346): r0 = syz_open_pts(0xffffffffffffffff, 0x2000) fallocate(r0, 0x22, 0x718, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x281, 0x0) write$UHID_INPUT(r1, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r1, 0x0, 0x8, 0x7f) r2 = openat(r1, &(0x7f0000001080)='./file0\x00', 0x10301, 0x8b) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c) statx(r2, &(0x7f00000010c0)='./file0\x00', 0x4000, 0x200, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}) fchownat(r1, &(0x7f0000001200)='./file0\x00', r3, r4, 0x100) bind$802154_dgram(r1, &(0x7f0000001240)={0x24, @short={0x2, 0x3, 0x555e}}, 0x14) read$msr(r2, &(0x7f0000001280)=""/232, 0xe8) mkdir(&(0x7f0000001380)='./file0\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='objagg_obj_root_destroy\x00', r1, 0x0, 0x4}, 0x18) getrlimit(0xc, &(0x7f0000001440)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001480)={0x1a3d641e788a00b2, 0x4, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r5 = accept$unix(r2, &(0x7f00000014c0)=@abs, &(0x7f0000001540)=0x6e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001580)={'erspan0\x00', <r6=>0x0}) r7 = socket$inet6(0xa, 0x80000, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001600)={0x3, &(0x7f00000015c0)=[{0x0, 0xb, 0x6, 0x9}, {0x8, 0x5, 0xe, 0x2}, {0x3d, 0x5, 0x81, 0x1}]}) r8 = socket$inet(0x2, 0x3, 0x5) recvmmsg(r8, &(0x7f000000c200)=[{{&(0x7f0000001640)=@generic, 0x80, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/44, 0x2c}], 0x1, &(0x7f0000001740)=""/184, 0xb8}, 0x2}, {{&(0x7f0000001800)=@llc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001940)=""/231, 0xe7}, {&(0x7f0000001a40)=""/178, 0xb2}, {&(0x7f0000001b00)=""/51, 0x33}], 0x4, &(0x7f0000001b80)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002b80)=@x25, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c00)=""/62, 0x3e}, {&(0x7f0000002c40)=""/161, 0xa1}, {&(0x7f0000002d00)=""/148, 0x94}], 0x3, &(0x7f0000002e00)=""/5, 0x5}, 0x8}, {{&(0x7f0000002e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002ec0)=""/53, 0x35}], 0x1, &(0x7f0000002f40)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000006180)=[{&(0x7f0000003fc0)=""/132, 0x84}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/193, 0xc1}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/220, 0xdc}, {&(0x7f00000072c0)=""/161, 0xa1}], 0x3, &(0x7f00000073c0)=""/55, 0x37}, 0x2}, {{&(0x7f0000007400)=@sco, 0x80, &(0x7f0000009780)=[{&(0x7f0000007480)=""/66, 0x42}, {&(0x7f0000007500)=""/14, 0xe}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/177, 0xb1}, {&(0x7f0000008600)=""/4096, 0x1000}, {&(0x7f0000009600)=""/240, 0xf0}, {&(0x7f0000009700)=""/11, 0xb}, {&(0x7f0000009740)=""/18, 0x12}], 0x8, &(0x7f0000009800)=""/172, 0xac}, 0x1}, {{0x0, 0x0, &(0x7f000000bc00)=[{&(0x7f00000098c0)}, {&(0x7f0000009900)=""/147, 0x93}, {&(0x7f00000099c0)=""/245, 0xf5}, {&(0x7f0000009ac0)=""/19, 0x13}, {&(0x7f0000009b00)=""/18, 0x12}, {&(0x7f0000009b40)=""/4096, 0x1000}, {&(0x7f000000ab40)=""/175, 0xaf}, {&(0x7f000000ac00)=""/4096, 0x1000}], 0x8, &(0x7f000000bc80)=""/217, 0xd9}, 0x5}, {{&(0x7f000000bd80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f000000c180)=[{&(0x7f000000be00)=""/227, 0xe3}, {&(0x7f000000bf00)=""/145, 0x91}, {&(0x7f000000bfc0)=""/31, 0x1f}, {&(0x7f000000c000)}, {&(0x7f000000c040)=""/166, 0xa6}, {&(0x7f000000c100)=""/95, 0x5f}], 0x6}, 0x5}], 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000000c6c0)={r1, 0x0, 0x65, 0x6d, &(0x7f000000c440)="518516fcc6e77b60cefa5aa5c9ad4f6b7505fac55943e37c68cfd7c6522b5e070bf71106a85f456ca07b24fb00c8db9d8e180cc989065bad6123ce32be28912d1d993a1c9c338399f177bf0454e90c4c9acad1657450ba7a33caffdd90f362354377906335", &(0x7f000000c4c0)=""/109, 0xc98, 0x0, 0xaa, 0xaa, &(0x7f000000c540)="2a413fafb3f4b2f3e2ccbdaf844ad007031328c5c44a284acc955f7e40c25a66baf2340b4203d027894c19c95e643569939ff56e0503ce8280921626dcc384bfddf629b16770c4d723e6f46fdd1bd4afe20d596bb02d2d944dd21259f8b359e413f118a8ee2e7909630239ae6d5e8b94389befebfb62dd3abc85288ef1587c8202ac97ef56cefb3995b1d2082e801491f107b41c349980dd87fbd9215747f8550a1fb6c31a28974aa13a", &(0x7f000000c600)="22e516bd7591205f1cbe7e6b2bcb41586f80ba0e138faa83ce9bdb0fbd3eb6860c4f1bde5262c1927bdf9057b174cb05f13435c0de0f044186054c37d14b202ac4270c35fd85a7a473e95354133c3979a24bfc81852bbb3178545170ca82d4bb2689c3090a5e0a4ce67bc1d39ff31de16688c69da572c25a5888a54fec5be4dc521c1d68d93f7facbe3816c4acd8a3946038797eefc4f3a268cb2de5059fab0054088324ecb7ff09924a", 0x1, 0x0, 0xffff}, 0x50) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f000000c740)={@mcast1, 0x36, r6}) socket$can_raw(0x1d, 0x3, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f000000c780)=@bloom_filter={0x1e, 0x3f6, 0xf, 0x3, 0x200, r1, 0x1, '\x00', r6, r2, 0x0, 0x0, 0x5, 0xf, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f000000c800)=@bloom_filter={0x1e, 0x0, 0xfffffff6, 0x3, 0x6100, r9, 0xc, '\x00', r6, r1, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) socket(0x1, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 24.822621836s ago: executing program 4 (id=359): syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") open(0x0, 0x1612c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x8, 0xa, 0x53) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (fail_nth: 18) 21.876152168s ago: executing program 4 (id=380): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff2000}]}) unshare(0x6020400) gettid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpid() syz_pidfd_open(r2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x201f, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pipe(0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="7cd16f895d38aaa26ece12e2a53c83282e1f63e0a95390e8ac48edece2331ff990568a41053ece69dd0485ce836101710ed3704674c5ea60677c37a440c6a6f49f7cb2e308c2f1ea05affdc553a3e9dc6c0a2d245024438109f36fa4724de1dc8d4dffe37b8778108051dddd57125962fef8dd6ba09df51e88a5ecd8f39b30f2d82c0db3a2d0b2237e89e865cf40f37ec0f39576a723d43aff7fcc6087332db531f0bc86c1e6bae1a5962549da6ab1b6ec4719e32688", 0xb6}], 0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = dup(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) read$eventfd(r5, &(0x7f0000000300), 0x8) io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20.855890065s ago: executing program 4 (id=383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) unshare(0x80) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 20.807507005s ago: executing program 33 (id=383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) unshare(0x80) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 9.107347114s ago: executing program 0 (id=431): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0) 9.106224474s ago: executing program 1 (id=432): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x5519, &(0x7f00000079c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x7, {0x7, 0x5, "550d16a9dd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.105497464s ago: executing program 5 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000002440)={<r1=>0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="00000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write(r10, 0x0, 0x0) setsockopt$inet6_int(r10, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r10, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0xa) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r6, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x9}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa210000004500002814000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200009078000a"], 0x0) listen(r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 9.105216364s ago: executing program 3 (id=434): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_out(r1, 0x5462, &(0x7f0000000000)) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) link(&(0x7f0000000400)='./file1\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 7.49301927s ago: executing program 0 (id=435): mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000002b9b5ca8f6f97f"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0x5, 0x60000000, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r4}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) wait4(r0, 0x0, 0x20000000, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) waitid(0x0, r6, &(0x7f0000000000), 0x20000000, &(0x7f0000000080)) waitid(0x1, r0, 0x0, 0x8, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x7fffffff, 0x410000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 7.49222389s ago: executing program 1 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 7.49186701s ago: executing program 5 (id=437): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="fdba1224ef2a829525ded658d91855d08ec1d28da36c968f6d0f2f83ae4e045a6319d24bbf7ada106db0b0938558e4a6691bb4838a24ccb0e61181f3b626bcc5eb70c809668cfea38c07734eff416b20a20406441c4052dfc1aa2a9f7fee484630fe04d88c45a099a5d6eb81984d2f904dc0263828dd215ace537edea0c5b7b132dd7fc4c9a44041fe0ea4fe8656f695785fa5e7f39f3eb05a4df9d9a3e8e28f4b627a646be7add16f256534d4a4a058d306da7b96b293341b4a2743ca62445ea4825726fe01db2632", @ANYRES16=0x0, @ANYRESOCT], 0x4, 0x2d0, &(0x7f0000000740)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) 7.49130857s ago: executing program 3 (id=438): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) (fail_nth: 6) 5.766338075s ago: executing program 0 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) writev(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000031c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getresgid(&(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340)) 5.765571445s ago: executing program 1 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000700), 0x13, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a30d100007006000000002000020d3"]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@remote, 0x1e, r6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000002040)={0x20071026}, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000120001030000"], 0x54}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 5.765032115s ago: executing program 5 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000540)='io_uring_req_failed\x00', r8}, 0x1) syz_usb_connect(0x0, 0x3d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b0001000000000904000002010351000905031300000000000725ff0000000009050f00"], 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r9}, 0x8) r11 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f00000004c0)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r11, 0xfffffffffffffffc, 0xfffffffffffffff9, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.764816245s ago: executing program 3 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES8=r1, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 3.9574202s ago: executing program 0 (id=443): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0xa, 0x400, 0x0, 0x0, 0x1, "0062090000000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) timerfd_gettime(0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 3.955040161s ago: executing program 1 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x6, 0xfffffffc, 0x13, @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8, 0x700, 0xffff, 0xa00000}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f00000006c0)=0x5f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408000, 0x0) sendmsg$SOCK_DESTROY(r10, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000b40)={0x1514, 0x15, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x9f}, [@INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "754cc938bf195df1a7a5b59d01b7771704eae82ff9473c1f954aa98f51e72ca7fdc36b67700e30f50330498dc18f0d696ed8589a51fba5d7278bb5e7fd8e9dba7e82278dc9162c3718ebca8b2f14f49f37bf6359a6073a63f998cab33966eaa54eb7dd8865f349d08e"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "1415e3beac1d64115df5b28293aac3cc042675c5ac47e8e2589a4ef8d43cb1de55c3981c4e30de45494c68ae7c06217b9e7044f7362d6e5a2e4619d0d3d2ff44cfe11ed1bff7e88b16bd2b3d48ad42c388d31d9a2b16eca7a6c4cecb361bb549da307b9b39900f144157474f7626e2c35b684c3cff20332838b5e6c3bbef3f207ea4869cfdb68849e3fffa129155ca55462e7cf4c364d935921f7ca1"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "5b429a467cb3237961b8a073017f1105ecc5f93add4b7455ed466b56d928fee9998da44b62bb88060e580b2679205129cb0df357a4889a6a71e934a983fd0ba06350a5534c6f91deef7991c9a19c5a2fbf0d8839129015b0b2256658f1e7a73e1f7b69ea09b60341fa4607497f20b0b252070577129159b97ee53b8bc8a4dd31a055ef8262cebfb7ce8a5b4cf3034b42f937fa6e051167d5501b8143b1b394204ade42d27b389ff3da46818522aa9c116d3cf486abed6a91acf1304fb43a394ee9262dd76633d3429c927b98229b46c30c7dd1d150b87aa0dbcffe0fb5be82361fde2b6b25a39fa392a5285649f445bde54b74bbd4c8b6"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "c13200dfd5bb42"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "64021d1eb8fc463940c8fbb348b38019f76cddae05f892a17b15590007d9540e5779ed8a43ef4b3d9a9ece12379d5080c0c135f8ff6be1b22befef23208c4bfb9491d6ed7257699b10beb03d1636938d7b4841b9a14417ef06cf7531255f5a42774e8598e46aaa86ec781bffb9338a88089657e98e880bed58001de9b9e46e65e3ca2882235f592d1e06af99e7ab815ab96f41933a0aa653dd02a8680a00a00354e82e57014cfed344361c4bc70a1cb6115c2236c07fd01a5a599708e31d14409cf31bb861ae13966e15babecd223b70cf2d"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "aeaf169a04e24e58d5208a532ec72e560c9ac654eab8746578279b19d5648fa5435c47eb85e140198c460c90954f9a0aeca8eab64f62b7c8ed194bf74f34987fc94fdc3d0a8f02f640d92f3817513592c1ae3e92b6ee9c10fe97"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "f422e8b21232afe1d68b167c277b5fa416042582429d2da38f978380e4cd9a04e28c72d3b778ef34017dc753be8d0a1029e31bea8713a6c598507683817ef74ed24f33a405c78c95ae81b7a8135a96fe45fd89b7542bcea30e66c7332386b0fe806b764077d72413235b0b9bc2f9182e8df093bd19bd26065c45cfd59621c868bd4dec1f8cc1502400917cd2e91387d5926ceaf1c1620250cb6498f9ea01040318d0e47a769cac96bcc230c2ba5816dbc9b4c17d7054fed09c87d31f7479a5712887d26548c4fef5eb9bd2372a43a1842cee4ab17d32d37069408045df7e76c7e253dbbef9ebf5326110b492bb5bb169511a0756dde65f0105f597b26f363061fde752dd354893c466478bdf2914150004c8ea9eb5e311b32add4c497c06511be7268fb96ed46f91a5acb53c7d2b07daccdd40bb873792e6a1de2bcd4b512e852582e422c4dc22fe3f85dab973cdbb92eda0616b4155484d57e379b614f40cc1ee3521a9449f266335e5533a8b8d22c0bd31a98d760b64a05c6514ade0d9e81efe0222b91d73ff9d54e1deb43f40a8b4e0d94ca653174958bb587b0b5af401dfd5af56a4d62fc8e51af3e6bc59432e230ac769cb25f7f66506fd566acd60abf4dd711dcb7e105852b9caded56c734ceaa745d29970647b10520dd292b7fa5efbddc4f72ecf92726f6485f9e1f4f215e4dd9d11a8e0345cc460d98813719cb6601967b40c382c3f34219049c6799d8c3cfcc43b3c96a9ad0bec02606043b8ba595d4cb47080f5fd9ef9366ee19816113dc3d1dddf1c259d5dabf1a4057015aad129a81a4b4a8a2dd3c0d017431e81e3f03463159b1060ec2095d8f10983ff16b0b4d552749df1371fd86e5fa032749923c613b763467143b6fab86538082591044d2f0560056540661d24b8d33beaea110219edaaccc33998edca656032378e7a04147d526edfadf8da73008e66f1f246dd5f67abcfa5d3d74ce22709420941af8e8008e1a24a0b1ac012991864e58e38e5712f3688a416b49889a074f634db0a3793645f5bc0897ca1cedfbba63ed0f068c8b5b890d1e23ed3fd7ee3e2f9f62db4c11788448dcb1987919b426b87777f14dae5246137fddbbcf5b0be3f1e0eb5c4cf298301959f99a6be398ba4e43ce648a8fe31a3536566df797c4d600fdef3909e90d6cb1158ff6d60835f60227efbeb31fef831aa8c33c8578286794ee2e1d786414be4a425536820b71a1e99001b789f740757afa462fc25b7dba7838f804a56cd2638b603e862b0f5e2630fff5de28deb8c98984be14449f103246a6f1094e73cb187efc2781dc884d82deec97b1b657fbea8b72d05db542a158373b2e07cfe08ab4bf60808bc9f1cb39665caffe0370d7eec07ea677fd5bf79f24c048c3b082a4daa88416b96773edfb49fe9bbe3843ab777a51944d41cda3ab0a71ea5a0bf6c8ce859b7fd32b9b9d726111c00f51e8d3d7f3bf2d117ddfc69a2167b55f131a56334b989b7a69aca1c318b09b5fa976999e87da5f1a67951f08502df19aa3fd6cdc316c2caebd85b714075f3bc90a247710a27d5b8d8f573f5fb178297639f3e372471dfaec3121dfb24068bdea513c3d7f492af1155c981fad3d8f35e682d0ff4fd544e9d986b0650f2b8c153522735e94bd613afda06b566f80ee12905fcd93517c66b0bb15c8c0f84075aa474a9834d12740f57510fd108d8449e7d516ed91dafdfd605733bf55c891d9679f434624f1d8eac02c122d825d8276a172fe59813e42c6d078b37a8fa63dd5e07a629b2f610e4202f35fbd77116431aedcf60d7a897249df3b7d5ab412ba3eefb05076a3c31bb3003df59c3fce168c0ab81fd0030878b55b3e3b0f5604e314f60c621682e074b6e2240460ec1500c9640495ff7c45a71f947c08534f72e55f348e260f8679ea65496c769bc3d6a36a3a87da82a8bfed6415c4a7438de7c7397977248c49f6e224d9ba374d05d1a33bb50adcf97c56c942b56d08f5426df0fbe3b06665fb34863ba2d1715b8675fd1ab52f1e3fd01faa4d5810f5d6616887609cc5b04f40ae0a3f9346334e3055e67e9312bb5f467f138c778780829efa2d960171cc57631cd5342d32a2b179ce0199de0cfc15a9a0620770fb2b6043b34d8844ca51a7130ab300db2507d3bcc64d3edf2eee3db39e6d35d3df7bad3055fe0bf35524f1e7f60c4297948e1ea2fb4de836afa0db2b53339c3eda3fb0d5962ab67a0e28e7cec3772f3d488a32ae8ad52be8a68f06e12b648b604997f26c3603ac879c583166e6a74b6cd649bc0e59f4dfb93074eece0c056a3864f8141e34f863799c70be5aac7f1a7583946dddbf5f8c889c817abf958f8daf3356e9001e923e9b6e716697f421285d1d02280d929bf29687bdc3323c90b2da6067286f8dd528d3cf538540829d05dae778253622d0b0e6d6c993b197cbf51bd46812f070cea468e44ef8de9f9a14a1d41fa03fcc89537c8452cb974851bf1da3e317b0a55a26df00805aba5701ad05116671cfd4915028a497e5089f7163cbf0fdc8cbfd4bf77629c7130edaef62aae4cc9c3ac4afe5d10a42c6dcd5f36ca9db43d3e744c4b57789e5c5dd043e03c840f7b20e681ccc396857ba26019a5797f0c309d8ec50b5965b41be77ff6d678ec0070f03d077a2798da9c2cae9208686da210dceb888e48009a718b1d9bf15a82e0137d234c0f32b997c73b6c361ca48b082fa62c0c45598eaa3046b344c71a1a3a442fe10e7f643215dedbc3f13b594557041aaf2f1c070bc97344d2c91ea1f50fc3b0f12f81fb0be420c452de6a2da723af61cfd5c5a380b53039aa3cc95af53217de4a3ac73af45ddbb4fa7d24f81aad9520e30c86d13d2ea4e002d7404908f0f699dbdb00f45ed30507a64a469bdfaf7c7da57353e25e8e3d89302df14b9ff3f2e2eb27bdf0a31790d82225756ea3b776b96585aa167ad51b5e3a21a10af5c8cbd91e8eea2c263af8f764f1baefef3b14b755bf061969b0f7ac4d902758cafc47fd0261b3fe48488f55cd5254146fa6d4754f1dc6b07ae7f81b8d73bc81b04f8d3f90c90cf8430e4d26be575fdefd7eed6cdfcfb3af154813b473de29f12d2e3317547ecbd0c27f1843fcfcfbccb39a6108901bd6f929b62c4d4637a709bee117eab9fc2baf0e5ab55404286ca4f17651a6ff78671ac216cacb8c4386c366ed008a57c89d4e6b98612a91a216bd8f63c319c76d237e220bc65bf70c03f6c83c2e6f49a236ef4d1a62c7aa0d05e64f7b76ef762e693dea97270d3076a7f4126202dfabb182c04ff8ca5705ef7fae912123f9eed56e4c3592a579d2c47093af9dbb7381fabd735ba78f8fe456127c482744d52ec0fbdb342ce59e677ec10c06565711006bc29062e80081a364cce667a78907d2c1d9159aba787c03c37c0261396a80c04e7bd655a655c67bc33d5936ed8d018cdc2184979f6c1d6a9f94e3ed799fd4eeac924a3590ea74cd1958a8fd5eccc1dd5fd83084dd67973ad374e7cc248a9e0f0b426ed3c6e3dadf4f9f15accebd037248452c497fe5d3eff682ef8504f374f20eaa20b189523701a9e811cc96932d979d212cf99cde146e59bc31f8d393a42747d2569301e78a4d3366494ecd56dd9f66a942b8c15e3490c8aefaf6122b671ef72974220a5c7aec9ba34e17c2c4d2b47154037580317493cf4974e0a8ff6d34b60f62a910469ff7f7bc8a4145be9e7f08ccfaa200889166249f1b6c3fc01fb12fb55aae39338ce8ad1aa0bb83d4fd84544e201fa07131ae94af6cda598a742e8fb27c2d2b929ba2793120bad7f2cf066a65f5ac70048fe71cce332102c7ac90760848bf9097d00e258e831e0130f593f4c5fcfb2d3d3805f57223a4445ccf23905e2078133334e98ee7e48ea09adabbd6bcbd56cce2704e9cd04f64390e4ecd7e41883a97a6a42b4ed4806d7371d343a6bebf68c53ec6162a9a1540ffaee7ab636de4ac11dfdb116a2570cb59dc24c0fe40fb0dbf4e2dc2f53c242a66b710d9ca15b79c6e15635cfd6d9f7048b92ae08512ec8becd5e8bd725e0a3b184d1c9a52bfc09cd7aac317a98dd8d8a3c1c7da5834316d706c3dacfbed85c76fb40840b6f7191404c7329e6b0bef96e32e374d1a6da0f2d64763038fa22c03bd6280ae07149d18eaf777202d43418dfd53794a9cdbe70ed2a5655f120de1bd754a73cac3dec09d3bffe9e6fa98165a66d8f66c8b513c74a52ffe4fd03195da76123161558528e4fcaee09dd2dcd9ca2e4b2e91fca5f9daf19036f86691481df8205a2836ad1163ab935d348bf5073df23b9a2aee02d828a7b41143bf32c1fa0d475f7fd6f0f44f52390bdf6ed398740cc08b478493f2c113a91aae8551f19555f7eb30036c13c2f09a2d7c610ae8f3e86929581ff65f3782410559dfecf2a464bdab398aa5c375dd23d791a5832aa1cf45e5b9bc7fb95d7bec191cd4da85ac6b48e90eacaec83254fab97112443c531e4d546eeaf8b0da733858fa4c660201c14b4d2f768e8fab4e5033ffa7debaefc88f16f1030b8a1d4a5f8a4769a224ea8d6a882f59ff85f855719c5c1b9d4e267c14ca7b96be80c025cd650d851505561b85892622e50076a73117ac6971ec18af739785af76a4c8562d5c754d3eb63355a27abe4379d2246d8c33b02a864b200fc727c58d2c5981683b7a7902be1709049ecb103236c269bf78c336d24251c32b02da5345d3ec218c8a3e01519278ddd0dce41ba6a50c05f54893a8966ae0922f2fb3c2ecc0c3e0a461e8c94db16f22013637a899a831f6de266c542d5f5a6615380152f8490e88b3a439022cbbc4294fb7f14827a02bca3c56fd834245a5de889009e74fa8bc878082bcaead376ea20a2f271e83a1941ef0d6955668ecd64bbaec2bd341621a7c81370ea55db119d23ce42a69b1c3a762c70d7633d4427ac8ac5545e0648b6cf564931e974aa165bedb85548073b0d38488586bd11974ace88552d2a393c3d8d7be0b34a74e9674aa7a2f229f9a4c8f8fbfce4d8ab98eccb487ceec17992b88a5c9d3ec45bd0b44c06b8392eba34eca95815121751219197de1fa0b57626fab6798bec89468671dc7d55c6330d96db7e8cf6d2711dd2b5da629fe6de1c19f80fd962b40fa39de87d9b38958ea6ffe246e73029574bf55ef625d9c6125ab72d0d9abef6a2c86ef5a68ad74b8d843ec9960c2bf83a8d5c42fd0eadaff76db19623f74570583d534dafad674c00d54636bac22aeff1eb9962b560b34884615e2d91660f52f74435a903b086626b57905d8f79f58c9b4298852e918229ee6e86a20224ee02a4a0d59efe6119564f28f2cbec1f01e0430dc86f4840b2ff33e78238b46bde152b8371c766d33d2824932236e2628f10adb8508853d3a912125aa246ad9ee4915b72dde795a1f0ffe46161f23de17663008e30c32c1d436fe28a9230ff062e75fa78b176f34026b212e3d63e65298b06a31055580cc3b6de213a67e350e152ce3754f945fb248a3bcb15a94c3ee8ac9db6a8184ff97a1da4fe517c9808daaee7b9833d65ff30029ad935c6ddb90516f253d6fd7b3856a88c8fdab2f0e26eb01c1d53a4ea1ffadcef6a51be71f578708ff9bedb5c6092a8937adce18430f0e0b784dd029b82c8d43dc22ee47d9b73dcc495dd49dc0a67409b91eff878e8c9cd95af66fedb2a2a00a6ac58614355d794c646c90b33877761a7db39b4bb43f44accdb2684b29ffb4324e77e00d427b1c5237baa50e67315a5fa6c3ab4c9fef5e3697688d9fdbc22164fad3e9518631"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "a625b064f062d18315887135fd7aa949cb0e4629b671d97ca89848cdb8791c3700f487d40fb4f1153aa45ecd57b9c77afffafc5d0c7d5f350df5dc63b79c031c48e78135bb56dce3398cc1760e9976c6456a1a33c5f234e15f01dfcc638eb24c5441ee0b800f0307d4734e19038da58c9f88e2ceb8a16b6217de9313129e0198f4cafe1aafb8449be5b582c802397a758f79938274a6acf286b611a47f38a3bf8b16c9ee698795"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "d04d2f056e1a2ce2fc0b98e8504c1f8130bb9fbe9c7c9f8046dee854aab47ecf39a16aad0eec3628d21606f8d7ee44ca864893a235333c79645ab924a2704cc77a15354a6f9880141fc984443e4828eac0f0e088f3e5bf4ae33d0974d51211af8a43e98db8bb1457808f904405a67666da019dcdd63e3a682f9564c265799b86f09593a534c7091e41d7603c629668a8ddc14db7398b1e82b6a2ca0efb3ef11be47a7c7767f77f7bd17500c150f2f17ef2a5a9871aa0185c6f1644d2c1e93e73efa6218156ac0f3abe72e95a6c23b94b08e32559daf6c4e15e1fa1702d0a77886232604a3d6ebacc0a4c088a6f7e5e3384be790c3054e2688b"}]}, 0x1514}, 0x1, 0x0, 0x0, 0x800}, 0x8885) mkdir(0x0, 0x0) 3.95433758s ago: executing program 5 (id=445): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0) 3.953807011s ago: executing program 3 (id=446): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x32, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}]}, 0x50}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r4, 0x25, 0x8, @val=@iter={&(0x7f0000000200)=@cgroup={0x0, r3, 0x8}, 0x10}}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.040196086s ago: executing program 0 (id=447): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe68, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xb, [@enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0xb, 0x785}, {0xe, 0xacb6}, {0x3, 0x3}, {0x6, 0x32c0}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x4c}}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x30, 0x0, 0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f0000001980)=""/109, 0x83, 0x6d, 0x1, 0xfffffff8, 0x0, @void, @value}, 0x28) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001a80)='bpf_lsm_task_getioprio\x00') r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0xba, &(0x7f0000001800)=""/186, 0x40f00, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f0000001a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xd, 0x81, 0x2}, 0x10, r4, 0x0, 0x0, &(0x7f0000001b00)=[0x1, r5, r7, 0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) getpgrp(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) pipe2$9p(&(0x7f0000000240)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r12, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r13=>0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',privport,access=', @ANYRESDEC=r13]) chown(&(0x7f0000000000)='./file0\x00', r13, 0x0) 2.038010056s ago: executing program 1 (id=448): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc063000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='rpc_clnt_new\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x26, 0x0, [{0x3, 0xff, 0x1, 0xfff}, {0x6, 0x8c, 0x3, 0x8}, {0x9, 0x2, 0xe, 0x3}, {0xfaf, 0x2, 0x1, 0xec}, {0x9, 0x9, 0xe, 0x7f}, {0xf523, 0x7, 0xf, 0x2}, {0x7ed, 0x1, 0x6, 0x58}, {0xbbd5, 0x82, 0x9, 0x81}, {0x9, 0x1, 0x0, 0xff9}, {0x5, 0x5, 0x1, 0x5}, {0x8, 0x3, 0x4, 0x8}, {0x7, 0x8, 0x5}, {0xc, 0xe7, 0xa, 0x66}, {0x5, 0x1, 0x5}, {0x623a, 0x0, 0x8, 0x8}, {0x2, 0x7, 0xa5, 0x7}, {0x7, 0x7, 0x6, 0x8}, {0x81, 0x4, 0x1, 0xa}, {0x5, 0xdc, 0x7}, {0x0, 0xff, 0xe7, 0x3}, {0x7, 0x5, 0x8f, 0xce}, {0x1, 0x1, 0x9, 0x3}, {0xfff8, 0x5, 0x80, 0x1}, {0x4d42, 0x7a, 0x9, 0x5}, {0x4, 0x5, 0x9, 0x80}, {0x9f, 0x2, 0xde, 0x8}, {0x0, 0x2, 0x51, 0x4}, {0x6, 0x5, 0x5, 0x20a}, {0x800, 0x40, 0x80, 0x953}, {0x4, 0x2e, 0xb, 0x10}, {0x0, 0x3, 0x6b}, {0x8, 0x4, 0x5, 0x6}, {0x2, 0xc3, 0x7, 0x1a17}, {0x3bc4, 0x8, 0xf, 0x2}, {0x7ff, 0xcb, 0xc, 0x1ff}, {0x7, 0x79, 0x4, 0x1}, {0x6, 0x9, 0x97, 0x10000}, {0x3ff, 0xc, 0xff, 0x2}, {0x3, 0xf, 0x0, 0x3}, {0x2, 0xc0, 0x4}, {0x6, 0x0, 0x6, 0x8001}, {0x6, 0x6, 0xff, 0x8}, {0x92, 0xf7, 0x3, 0x3ff}, {0x2, 0xfd, 0xd, 0xfffffff8}, {0xfde1, 0x6, 0x0, 0x8}, {0x5, 0x1, 0x6, 0x9}, {0xc0, 0x5, 0x3, 0x1000}, {0x0, 0x6, 0x2, 0x1}, {0x0, 0x8, 0x0, 0x6}, {0x1, 0x7, 0x9, 0x3}, {0xc000, 0x0, 0x8, 0x1}, {0x9, 0x7, 0xff, 0x401}, {0xb1aa, 0x3, 0xd4}, {0x3, 0x87, 0xbf}, {0xa, 0x7, 0xf, 0xfffffffd}, {0xf, 0x4, 0x1}, {0x9, 0x10, 0x2, 0xfffffff7}, {0x3, 0x43, 0x7, 0x8}, {0x9, 0xe0, 0xad}, {0x8, 0x10, 0x40, 0xffff}, {0x6, 0x2, 0x9, 0x4}, {0x6, 0x7, 0xe, 0xfffffffb}, {0x40, 0x7, 0xe2, 0x8}, {0x200, 0x7f, 0x9, 0xedd}], {0xfffffffffffffffb}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ttl={{0x28}, {0x2, 0xa0}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x4, 0x2}, {0x3, 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 2.037432346s ago: executing program 5 (id=449): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000e7ff0000000000000000000000c93027abd7038b0e6269b7abd6700d02e72cfc77dc8daf31de1404e498e6f22aa752020a0204435c3d69e8b8a04a9c42d0ba7bd6"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) open(0x0, 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r8 = dup(r7) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 2.036918216s ago: executing program 3 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 3.49632ms ago: executing program 0 (id=451): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x4, 0xaf, 0x80}) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000200)={0xeb4a, 0x5, [{0xb}, {0x3, 0x1}, {0x6, 0x1}, {0xd, 0x1}, {0x4, 0x1}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000fe00000000000000f000ff000000850000000e000000c500000001f0ffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) pipe2(&(0x7f0000001cc0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x800) openat$incfs(r9, &(0x7f0000000040)='.log\x00', 0x0, 0x85) syz_emit_ethernet(0x72, &(0x7f0000000240)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0xa9, 0x1, 0x3, [{@local, 0x7}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x1}, {@local, 0xfffffffc}, {@local, 0x7b}, {@multicast2, 0x5}, {@multicast1, 0x4}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r10 = fcntl$getown(r9, 0x9) sched_setscheduler(r10, 0x2, &(0x7f0000000140)=0x5) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid}]}}) 2.022251ms ago: executing program 1 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000040), 0x1, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_xfrm_state_delete_security\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000060000000000000000000000711074000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socket(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x49, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x63, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r9}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pK \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 679.47µs ago: executing program 5 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r3, &(0x7f00000031c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getresgid(&(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340)) 0s ago: executing program 3 (id=454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000040000000000000000000056a2f0a4d4e968b76318010000202070250000000000202018270a118e7220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file5\x00', 0x20c006, &(0x7f0000000740)={[{@minixdf}, {@mblk_io_submit}, {@quota}, {@data_writeback}, {@dioread_nolock}, {@data_err_abort}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0xa}}, {@fsname={'fsname', 0x3d, 'quota'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x1, 0x44a, &(0x7f0000000d40)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(&(0x7f0000000300)='pstore\x00', 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x10}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) ustat(0x2, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.324671][ T505] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.328959][ T19] usb 1-1: config 0 descriptor?? [ 43.346535][ T19] hub 1-1:0.0: USB hub found [ 43.382203][ T299] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.384227][ T501] syz.1.41[501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.397185][ T501] syz.1.41[501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.408601][ T505] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.426535][ T505] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.429685][ T300] hub 2-1:0.125: bad descriptor, ignoring hub [ 43.461219][ T300] hub: probe of 2-1:0.125 failed with error -5 [ 43.474015][ T300] usb 2-1: Found UVC 15.ff device syz (17dc:0202) [ 43.483654][ T300] usb 2-1: No valid video chain found. [ 43.522562][ T300] usb 2-1: USB disconnect, device number 4 [ 43.572246][ T299] usb 4-1: Using ep0 maxpacket: 8 [ 43.578360][ T299] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 43.591884][ T299] usb 4-1: config 11 has no interface number 0 [ 43.598847][ T299] usb 4-1: config 11 interface 95 has no altsetting 0 [ 43.619010][ T299] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 43.648677][ T299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.662281][ T299] usb 4-1: Product: syz [ 43.672425][ T299] usb 4-1: Manufacturer: syz [ 43.676864][ T299] usb 4-1: SerialNumber: syz [ 43.749798][ T523] input: syz1 as /devices/virtual/input/input12 [ 43.762774][ T19] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 43.908601][ T299] usb 4-1: USB disconnect, device number 3 [ 44.011468][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 44.017907][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 44.062508][ T19] usb 1-1: USB disconnect, device number 3 [ 44.295750][ T550] binder: BINDER_SET_CONTEXT_MGR already set [ 44.301652][ T550] binder: 549:550 ioctl 4018620d 20000040 returned -16 [ 44.570081][ T561] input: syz1 as /devices/virtual/input/input13 [ 44.607169][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 44.607186][ T28] audit: type=1400 audit(1736699507.089:216): avc: denied { mount } for pid=562 comm="syz.0.57" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.612705][ T563] loop0: detected capacity change from 0 to 512 [ 44.613704][ T28] audit: type=1400 audit(1736699507.089:217): avc: denied { remount } for pid=562 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.665155][ T563] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.665847][ T28] audit: type=1400 audit(1736699507.119:218): avc: denied { mounton } for pid=562 comm="syz.0.57" path="/10/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 44.688998][ T563] EXT4-fs error (device loop0): __ext4_iget:5057: inode #11: block 1: comm syz.0.57: invalid block [ 44.693851][ T300] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.722560][ T563] EXT4-fs (loop0): Remounting filesystem read-only [ 44.729225][ T563] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.57: couldn't read orphan inode 11 (err -117) [ 44.750896][ T563] EXT4-fs (loop0): Remounting filesystem read-only [ 44.757595][ T563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.902189][ T300] usb 5-1: Using ep0 maxpacket: 8 [ 44.913197][ T300] usb 5-1: config 11 has an invalid interface number: 95 but max is 0 [ 44.931342][ T300] usb 5-1: config 11 has no interface number 0 [ 44.937924][ T300] usb 5-1: config 11 interface 95 has no altsetting 0 [ 44.954382][ T300] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 44.968988][ T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.980996][ T300] usb 5-1: Product: syz [ 44.985299][ T300] usb 5-1: Manufacturer: syz [ 44.989757][ T300] usb 5-1: SerialNumber: syz [ 45.052197][ T299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.209029][ T300] usb 5-1: USB disconnect, device number 5 [ 45.242268][ T299] usb 1-1: Using ep0 maxpacket: 32 [ 45.249642][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.306546][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.320760][ T299] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 45.339648][ T299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.414495][ T299] usb 1-1: config 0 descriptor?? [ 45.646981][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.690309][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.104642][ T584] input: syz1 as /devices/virtual/input/input14 [ 46.129162][ T563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 46.724351][ T28] audit: type=1400 audit(1736699508.749:219): avc: denied { sys_module } for pid=579 comm="syz.4.61" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.214765][ T299] kone 0003:1E7D:2CED.0003: collection stack underflow [ 47.221488][ T299] kone 0003:1E7D:2CED.0003: item 0 0 0 12 parsing failed [ 47.228815][ T299] kone 0003:1E7D:2CED.0003: parse failed [ 47.234389][ T299] kone: probe of 0003:1E7D:2CED.0003 failed with error -22 [ 47.274325][ T600] loop4: detected capacity change from 0 to 512 [ 47.305976][ T600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.314967][ T600] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.334638][ T600] incfs: Options parsing error. -22 [ 47.339939][ T600] incfs: mount failed -22 [ 47.352651][ T295] EXT4-fs (loop4): unmounting filesystem. [ 47.395085][ T563] fscrypt: AES-256-XTS using blk-crypto-fallback [ 47.407237][ T563] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.57: Directory hole found for htree leaf block 0 [ 47.420382][ T563] EXT4-fs (loop0): Remounting filesystem read-only [ 47.432100][ T40] usb 1-1: USB disconnect, device number 4 [ 47.562194][ T299] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 47.644757][ T611] loop1: detected capacity change from 0 to 256 [ 47.654775][ T28] audit: type=1400 audit(1736699510.139:220): avc: denied { mount } for pid=610 comm="syz.1.66" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 47.662278][ T585] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.742258][ T299] usb 3-1: Using ep0 maxpacket: 8 [ 47.749111][ T299] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 47.757327][ T299] usb 3-1: config 11 has no interface number 0 [ 47.763511][ T299] usb 3-1: config 11 interface 95 has no altsetting 0 [ 47.771430][ T299] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 47.780429][ T299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.788286][ T299] usb 3-1: Product: syz [ 47.792273][ T299] usb 3-1: Manufacturer: syz [ 47.792288][ T300] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 47.796654][ T299] usb 3-1: SerialNumber: syz [ 47.872224][ T585] usb 5-1: Using ep0 maxpacket: 8 [ 47.878190][ T585] usb 5-1: config 11 has an invalid interface number: 95 but max is 0 [ 47.886319][ T585] usb 5-1: config 11 has no interface number 0 [ 47.892455][ T585] usb 5-1: config 11 interface 95 has no altsetting 0 [ 47.900532][ T585] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 47.909454][ T585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.917224][ T585] usb 5-1: Product: syz [ 47.921223][ T585] usb 5-1: Manufacturer: syz [ 47.925649][ T585] usb 5-1: SerialNumber: syz [ 47.959244][ T291] EXT4-fs (loop0): unmounting filesystem. [ 47.966677][ T28] audit: type=1400 audit(1736699510.449:221): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 47.988991][ T300] usb 4-1: config 0 has an invalid interface number: 141 but max is 0 [ 47.997547][ T300] usb 4-1: config 0 has no interface number 0 [ 48.003796][ T300] usb 4-1: config 0 interface 141 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 48.010202][ T299] usb 3-1: USB disconnect, device number 4 [ 48.014969][ T300] usb 4-1: config 0 interface 141 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 48.032067][ T300] usb 4-1: config 0 interface 141 has no altsetting 0 [ 48.043288][ T300] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a2c, bcdDevice=dd.7c [ 48.052483][ T300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.060365][ T300] usb 4-1: Product: syz [ 48.064796][ T300] usb 4-1: Manufacturer: syz [ 48.069262][ T300] usb 4-1: SerialNumber: syz [ 48.077883][ T300] usb 4-1: config 0 descriptor?? [ 48.083397][ T596] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.090576][ T596] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.141214][ T585] usb 5-1: USB disconnect, device number 6 [ 48.257757][ T617] loop0: detected capacity change from 0 to 16 [ 48.483646][ T617] erofs: (device loop0): mounted with root inode @ nid 36. [ 48.492240][ T28] audit: type=1400 audit(1736699510.969:222): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.529853][ T616] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 48.539389][ T616] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 48.568950][ T616] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 48.578394][ T616] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 48.587050][ T616] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 48.596561][ T616] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 49.073782][ T28] audit: type=1326 audit(1736699511.549:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=595 comm="syz.3.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f150b585d29 code=0x0 [ 49.866399][ T634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 49.883213][ T634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 50.618250][ T634] syz.4.71 (634) used greatest stack depth: 21520 bytes left [ 50.644913][ T635] input: syz1 as /devices/virtual/input/input15 [ 50.686712][ T19] usb 4-1: USB disconnect, device number 4 [ 51.350458][ T653] input: syz1 as /devices/virtual/input/input16 [ 51.731887][ T646] input: syz1 as /devices/virtual/input/input17 [ 52.690698][ T665] loop1: detected capacity change from 0 to 256 [ 52.698353][ T665] exfat: Deprecated parameter 'utf8' [ 52.703642][ T665] exfat: Deprecated parameter 'namecase' [ 52.709161][ T665] exfat: Deprecated parameter 'utf8' [ 52.778228][ T665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 52.935725][ T668] binder: BINDER_SET_CONTEXT_MGR already set [ 53.055085][ T668] binder: 667:668 ioctl 4018620d 20000040 returned -16 [ 53.108338][ T671] binder: 667:671 ioctl c0306201 0 returned -14 [ 53.627900][ T673] xt_hashlimit: max too large, truncated to 1048576 [ 53.646737][ T644] input: syz1 as /devices/virtual/input/input18 [ 53.675125][ T673] xt_bpf: check failed: parse error [ 53.830786][ T677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=210 sclass=netlink_route_socket pid=677 comm=syz.4.78 [ 54.085056][ T682] binder: BINDER_SET_CONTEXT_MGR already set [ 54.090968][ T682] binder: 681:682 ioctl 4018620d 20000040 returned -16 [ 54.101872][ T684] loop4: detected capacity change from 0 to 256 [ 54.884344][ T28] audit: type=1400 audit(1736699517.369:224): avc: denied { setopt } for pid=688 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.020103][ T704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 56.029937][ T704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 58.547345][ T707] loop3: detected capacity change from 0 to 16 [ 58.564500][ T707] erofs: (device loop3): mounted with root inode @ nid 36. [ 58.581921][ T706] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 58.591519][ T706] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 58.667758][ T696] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 58.677374][ T696] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 58.685967][ T696] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 58.695421][ T696] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 58.695855][ T666] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.262202][ T585] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 59.392338][ T739] loop3: detected capacity change from 0 to 1024 [ 59.409302][ T739] EXT4-fs: Mount option(s) incompatible with ext3 [ 59.522221][ T585] usb 3-1: Using ep0 maxpacket: 8 [ 59.576900][ T744] input: syz1 as /devices/virtual/input/input19 [ 59.595574][ T745] loop3: detected capacity change from 0 to 512 [ 59.621978][ T745] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.670215][ T585] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 59.679355][ T743] input: syz1 as /devices/virtual/input/input20 [ 59.695702][ T585] usb 3-1: config 11 has no interface number 0 [ 59.696348][ T745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 59.707179][ T585] usb 3-1: config 11 interface 95 has no altsetting 0 [ 59.724431][ T745] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.97: corrupted in-inode xattr [ 59.742436][ T745] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.97: couldn't read orphan inode 15 (err -117) [ 59.754363][ T745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.754616][ T585] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 59.784218][ T28] audit: type=1400 audit(1736699522.269:225): avc: denied { ioctl } for pid=738 comm="syz.3.97" path="socket:[16868]" dev="sockfs" ino=16868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.787562][ T585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.819829][ T28] audit: type=1400 audit(1736699522.299:226): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.820240][ T745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.97'. [ 59.842973][ T28] audit: type=1400 audit(1736699522.299:227): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.877347][ T28] audit: type=1400 audit(1736699522.299:228): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.924315][ T585] usb 3-1: Product: syz [ 59.937783][ T585] usb 3-1: Manufacturer: syz [ 59.952777][ T585] usb 3-1: SerialNumber: syz [ 60.176774][ T585] usb 3-1: USB disconnect, device number 5 [ 60.320009][ T294] EXT4-fs (loop3): unmounting filesystem. [ 60.752419][ T299] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 60.943242][ T299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.962174][ T299] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.975153][ T299] usb 2-1: New USB device found, idVendor=c98b, idProduct=0ac7, bcdDevice=ec.f6 [ 60.984194][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.005924][ T299] usb 2-1: config 0 descriptor?? [ 61.022396][ T299] usb 2-1: bad CDC descriptors [ 61.171265][ T28] audit: type=1400 audit(1736699523.649:229): avc: denied { write } for pid=777 comm="syz.0.107" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.210084][ T28] audit: type=1400 audit(1736699523.689:230): avc: denied { create } for pid=779 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 61.249164][ T666] usb 2-1: USB disconnect, device number 5 [ 61.277396][ T783] syz.4.109[783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.277484][ T783] syz.4.109[783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.279317][ T28] audit: type=1400 audit(1736699523.759:231): avc: denied { call } for pid=777 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.289579][ T778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'. [ 61.452363][ T299] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 61.552628][ T788] loop3: detected capacity change from 0 to 2048 [ 61.561747][ T28] audit: type=1400 audit(1736699523.949:232): avc: denied { create } for pid=779 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.681103][ T788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 61.770922][ T419] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.888931][ T299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.004081][ T28] audit: type=1400 audit(1736699523.969:233): avc: denied { getopt } for pid=779 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.027132][ T299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.535938][ T299] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 62.547664][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.555695][ T419] usb 5-1: Using ep0 maxpacket: 16 [ 62.560992][ T28] audit: type=1400 audit(1736699524.239:234): avc: denied { add_name } for pid=779 comm="syz.3.108" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.585663][ T419] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.598398][ T299] usb 3-1: config 0 descriptor?? [ 62.603337][ T419] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 62.613436][ T419] usb 5-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.629220][ T28] audit: type=1400 audit(1736699524.239:235): avc: denied { associate } for pid=779 comm="syz.3.108" name=".pending_reads" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.651568][ T419] usb 5-1: config 1 interface 0 has no altsetting 0 [ 62.660707][ T28] audit: type=1400 audit(1736699524.239:236): avc: denied { append } for pid=779 comm="syz.3.108" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.685783][ T28] audit: type=1400 audit(1736699524.239:237): avc: denied { open } for pid=779 comm="syz.3.108" path="/20/file0/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.710779][ T28] audit: type=1400 audit(1736699524.249:238): avc: denied { ioctl } for pid=779 comm="syz.3.108" path="/20/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.737193][ T419] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.746311][ T419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.755183][ T419] usb 5-1: Product: syz [ 62.759182][ T419] usb 5-1: Manufacturer: syz [ 62.763980][ T419] usb 5-1: SerialNumber: syz [ 62.773918][ T783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 62.781085][ T783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 62.793063][ T294] EXT4-fs (loop3): unmounting filesystem. [ 62.803262][ T796] loop1: detected capacity change from 0 to 2048 [ 62.825822][ T796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.854148][ T796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.931968][ T798] input: syz1 as /devices/virtual/input/input21 [ 62.994635][ T419] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 63.007194][ T419] usb 5-1: USB disconnect, device number 7 [ 63.142201][ T392] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 63.222250][ T666] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 63.323388][ T392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.333452][ T392] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.337766][ T808] loop2: detected capacity change from 0 to 16 [ 63.346604][ T392] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 63.353150][ T808] erofs: (device loop2): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 63.365465][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.381717][ T392] usb 2-1: config 0 descriptor?? [ 63.387671][ T392] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 63.401411][ T299] usbhid 3-1:0.0: can't add hid device: -71 [ 63.402504][ T666] usb 1-1: Using ep0 maxpacket: 8 [ 63.407723][ T299] usbhid: probe of 3-1:0.0 failed with error -71 [ 63.413748][ T666] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 63.420425][ T299] usb 3-1: USB disconnect, device number 6 [ 63.427080][ T666] usb 1-1: config 11 has no interface number 0 [ 63.438276][ T666] usb 1-1: config 11 interface 95 has no altsetting 0 [ 63.446351][ T666] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 63.455261][ T666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.463036][ T666] usb 1-1: Product: syz [ 63.467016][ T666] usb 1-1: Manufacturer: syz [ 63.471418][ T666] usb 1-1: SerialNumber: syz [ 64.633457][ T826] loop2: detected capacity change from 0 to 256 [ 64.659980][ T826] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 64.744018][ T666] usb 1-1: USB disconnect, device number 6 [ 64.762210][ T830] syz.4.120 uses obsolete (PF_INET,SOCK_PACKET) [ 65.042258][ T525] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 65.052258][ T419] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 65.222196][ T525] usb 5-1: Using ep0 maxpacket: 16 [ 65.228331][ T525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 65.239517][ T525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 65.250643][ T525] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 65.252189][ T419] usb 4-1: Using ep0 maxpacket: 16 [ 65.259460][ T525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.265296][ T419] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 65.277113][ T525] usb 5-1: config 0 descriptor?? [ 65.281122][ T419] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 65.285099][ T830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 65.292070][ T419] usb 4-1: can't read configurations, error -61 [ 65.300149][ T525] usb 5-1: Found UVC 0.00 device <unnamed> (10c4:ea90) [ 65.312261][ T525] usb 5-1: No valid video chain found. [ 65.358741][ T837] loop0: detected capacity change from 0 to 128 [ 65.365482][ T837] FAT-fs (loop0): bogus sectors per cluster 0 [ 65.371593][ T837] FAT-fs (loop0): Can't find a valid FAT filesystem [ 65.472327][ T419] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 65.547971][ T844] loop0: detected capacity change from 0 to 512 [ 65.560072][ T40] usb 5-1: USB disconnect, device number 8 [ 65.578138][ T844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.587167][ T844] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.598537][ T841] input: syz1 as /devices/virtual/input/input22 [ 65.610911][ T844] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 206 free clusters [ 65.625816][ T844] incfs: Can't find or create .index dir in ./file0 [ 65.632554][ T844] incfs: mount failed -28 [ 65.643085][ T291] EXT4-fs (loop0): unmounting filesystem. [ 65.652216][ T419] usb 4-1: Using ep0 maxpacket: 16 [ 65.658878][ T419] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 65.670158][ T419] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 65.678095][ T419] usb 4-1: can't read configurations, error -61 [ 65.684405][ T419] usb usb4-port1: attempt power cycle [ 65.795876][ T525] usb 2-1: USB disconnect, device number 6 [ 65.803285][ T293] EXT4-fs (loop1): unmounting filesystem. [ 65.811778][ T851] loop0: detected capacity change from 0 to 512 [ 65.834087][ T851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.843123][ T851] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.855871][ T851] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 206 free clusters [ 65.871046][ T851] incfs: Can't find or create .index dir in ./file0 [ 65.877625][ T851] incfs: mount failed -28 [ 65.888268][ T291] EXT4-fs (loop0): unmounting filesystem. [ 66.102021][ T419] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 66.132878][ T419] usb 4-1: Using ep0 maxpacket: 16 [ 66.138785][ T419] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 66.149741][ T419] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 66.202941][ T419] usb 4-1: can't read configurations, error -61 [ 66.369197][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 66.369214][ T28] audit: type=1400 audit(1736699528.849:249): avc: denied { bind } for pid=870 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.390789][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.400740][ T419] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 66.404664][ T28] audit: type=1400 audit(1736699528.879:250): avc: denied { ioctl } for pid=870 comm="syz.2.133" path="socket:[17700]" dev="sockfs" ino=17700 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.432740][ T525] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 66.442649][ T419] usb 4-1: Using ep0 maxpacket: 16 [ 66.448132][ T419] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 66.457249][ T419] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 66.465171][ T419] usb 4-1: can't read configurations, error -61 [ 66.471336][ T419] usb usb4-port1: unable to enumerate USB device [ 66.473447][ T28] audit: type=1326 audit(1736699528.959:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.500724][ T28] audit: type=1326 audit(1736699528.959:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.523918][ T28] audit: type=1326 audit(1736699528.959:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.547517][ T28] audit: type=1326 audit(1736699528.959:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.570736][ T28] audit: type=1326 audit(1736699528.959:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.593992][ T28] audit: type=1326 audit(1736699528.959:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.617609][ T28] audit: type=1326 audit(1736699528.959:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.640782][ T28] audit: type=1326 audit(1736699528.959:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2d985d29 code=0x7ffc0000 [ 66.691045][ T525] usb 2-1: Using ep0 maxpacket: 8 [ 66.697199][ T525] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 66.705232][ T525] usb 2-1: config 11 has no interface number 0 [ 66.711198][ T525] usb 2-1: config 11 interface 95 has no altsetting 0 [ 66.719145][ T525] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 66.728040][ T525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.052705][ T525] usb 2-1: Product: syz [ 67.089922][ T525] usb 2-1: Manufacturer: syz [ 67.094888][ T525] usb 2-1: SerialNumber: syz [ 67.134791][ T886] loop0: detected capacity change from 0 to 256 [ 67.144365][ T886] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 67.333447][ T525] usb 2-1: USB disconnect, device number 7 [ 67.539166][ T891] loop4: detected capacity change from 0 to 256 [ 67.601313][ T891] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 68.796034][ T873] Bluetooth: hci0: command 0x1003 tx timeout [ 68.842820][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.053841][ T899] loop3: detected capacity change from 0 to 128 [ 69.092296][ T904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 69.102068][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.111929][ T904] device bridge_slave_0 left promiscuous mode [ 69.118804][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.203749][ T899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.216976][ T899] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.282700][ T904] syz.1.144 (904) used greatest stack depth: 21352 bytes left [ 69.751761][ T294] EXT4-fs (loop3): unmounting filesystem. [ 69.866041][ T525] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 69.938267][ T939] device wg2 entered promiscuous mode [ 70.029308][ T941] xt_hashlimit: max too large, truncated to 1048576 [ 70.053637][ T941] xt_bpf: check failed: parse error [ 70.055723][ T525] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 70.092224][ T525] usb 2-1: can't read configurations, error -61 [ 70.191165][ T952] loop0: detected capacity change from 0 to 16 [ 70.198848][ T952] erofs: (device loop0): mounted with root inode @ nid 36. [ 70.402186][ T525] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 70.553556][ T957] input: syz1 as /devices/virtual/input/input23 [ 70.669139][ T525] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 70.678741][ T525] usb 2-1: can't read configurations, error -61 [ 70.690740][ T525] usb usb2-port1: attempt power cycle [ 70.759112][ T959] loop3: detected capacity change from 0 to 40427 [ 70.779120][ T959] F2FS-fs (loop3): Image doesn't support compression [ 70.779568][ T966] loop4: detected capacity change from 0 to 128 [ 70.790184][ T959] F2FS-fs (loop3): invalid crc value [ 70.842814][ T959] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 70.885330][ T959] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.920458][ T974] device pim6reg1 entered promiscuous mode [ 71.143501][ T294] syz-executor: attempt to access beyond end of device [ 71.143501][ T294] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 71.247844][ T977] device bridge0 entered promiscuous mode [ 71.253792][ T977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 71.262459][ T977] device bridge_slave_1 left promiscuous mode [ 71.268400][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.314292][ T977] device bridge_slave_0 left promiscuous mode [ 71.320297][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.322201][ T525] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 71.352192][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 71.364653][ T525] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 71.379142][ T977] device bridge0 left promiscuous mode [ 71.384533][ T525] usb 2-1: can't read configurations, error -61 [ 71.535070][ T980] loop2: detected capacity change from 0 to 40427 [ 71.541989][ T980] F2FS-fs (loop2): Image doesn't support compression [ 71.549171][ T525] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 71.552190][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 71.559518][ T980] F2FS-fs (loop2): invalid crc value [ 71.566994][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 71.567008][ T28] audit: type=1400 audit(1736699534.049:326): avc: denied { append } for pid=982 comm="syz.3.163" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.596765][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.597415][ T980] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 71.607492][ T24] usb 5-1: config 40 has an invalid descriptor of length 0, skipping remainder of the config [ 71.621325][ T525] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 71.626035][ T24] usb 5-1: config 40 has 0 interfaces, different from the descriptor's value: 1 [ 71.639348][ T525] usb 2-1: can't read configurations, error -61 [ 71.648693][ T525] usb usb2-port1: unable to enumerate USB device [ 71.660475][ T980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.660762][ T24] usb 5-1: string descriptor 0 read error: -22 [ 71.673870][ T24] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 71.682765][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.696312][ T28] audit: type=1400 audit(1736699534.179:327): avc: denied { mounton } for pid=979 comm="syz.2.165" path="/34/bus/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.702966][ T980] syz.2.165: attempt to access beyond end of device [ 71.702966][ T980] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.784868][ T980] syz.2.165: attempt to access beyond end of device [ 71.784868][ T980] loop2: rw=2049, sector=77824, nr_sectors = 128 limit=40427 [ 71.798722][ T980] syz.2.165: attempt to access beyond end of device [ 71.798722][ T980] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.820211][ T292] syz-executor: attempt to access beyond end of device [ 71.820211][ T292] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 71.834460][ T292] syz-executor: attempt to access beyond end of device [ 71.834460][ T292] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 71.853081][ T292] syz-executor: attempt to access beyond end of device [ 71.853081][ T292] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 71.944884][ T292] syz-executor (292) used greatest stack depth: 20968 bytes left [ 72.081533][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.088874][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.096454][ T995] device bridge_slave_0 entered promiscuous mode [ 72.106307][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.113497][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.120907][ T995] device bridge_slave_1 entered promiscuous mode [ 72.206659][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.213658][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.220817][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.227633][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.294038][ T995] device veth0_vlan entered promiscuous mode [ 72.308460][ T995] device veth1_macvtap entered promiscuous mode [ 72.323561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.331586][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.340132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.351239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.367960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.381486][ T28] audit: type=1400 audit(1736699534.859:328): avc: denied { mount } for pid=1009 comm="syz.1.172" name="/" dev="configfs" ino=14087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 72.407640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.416650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.425823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.435495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.444635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.452026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.466614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.501008][ T28] audit: type=1400 audit(1736699534.979:329): avc: denied { mounton } for pid=995 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.525111][ T1013] xt_hashlimit: max too large, truncated to 1048576 [ 72.557927][ T1015] loop5: detected capacity change from 0 to 512 [ 72.568779][ T1013] xt_bpf: check failed: parse error [ 72.577515][ T28] audit: type=1400 audit(1736699535.039:330): avc: denied { read } for pid=1014 comm="syz.5.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.611408][ T1015] EXT4-fs error (device loop5): __ext4_iget:5057: inode #2: block 100663296: comm syz.5.168: invalid block [ 72.612420][ T28] audit: type=1400 audit(1736699535.079:331): avc: denied { read } for pid=1009 comm="syz.1.172" path="socket:[18064]" dev="sockfs" ino=18064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.650690][ T28] audit: type=1400 audit(1736699535.129:332): avc: denied { setattr } for pid=1009 comm="syz.1.172" name="/" dev="configfs" ino=14087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.675179][ T1015] EXT4-fs (loop5): get root inode failed [ 72.680774][ T1015] EXT4-fs (loop5): mount failed [ 72.693272][ T337] device bridge_slave_1 left promiscuous mode [ 72.702639][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.731531][ T337] device bridge_slave_0 left promiscuous mode [ 72.754224][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.812255][ T337] device veth1_macvtap left promiscuous mode [ 72.837825][ T337] device veth0_vlan left promiscuous mode [ 72.888564][ T1015] loop5: detected capacity change from 0 to 16 [ 72.903978][ T1024] input: syz1 as /devices/virtual/input/input24 [ 72.925986][ T1015] erofs: (device loop5): mounted with root inode @ nid 36. [ 72.943320][ T1015] syz.5.168: attempt to access beyond end of device [ 72.943320][ T1015] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 72.977716][ T1015] syz.5.168: attempt to access beyond end of device [ 72.977716][ T1015] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 73.019488][ T1015] syz.5.168: attempt to access beyond end of device [ 73.019488][ T1015] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 73.288899][ T28] audit: type=1400 audit(1736699535.769:333): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.351724][ T1035] FAULT_INJECTION: forcing a failure. [ 73.351724][ T1035] name failslab, interval 1, probability 0, space 0, times 1 [ 73.364831][ T1035] CPU: 1 PID: 1035 Comm: syz.5.178 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 73.374386][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.384480][ T1035] Call Trace: [ 73.387611][ T1035] <TASK> [ 73.390376][ T1035] dump_stack_lvl+0x151/0x1b7 [ 73.394892][ T1035] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 73.400184][ T1035] ? kfree+0x7a/0xf0 [ 73.403913][ T1035] dump_stack+0x15/0x18 [ 73.407904][ T1035] should_fail_ex+0x3d0/0x520 [ 73.412429][ T1035] __should_failslab+0xaf/0xf0 [ 73.417021][ T1035] ? p9_fd_create+0x177/0x520 [ 73.421966][ T1035] should_failslab+0x9/0x20 [ 73.426306][ T1035] __kmem_cache_alloc_node+0x3d/0x2a0 [ 73.431517][ T1035] ? p9_fd_create+0x177/0x520 [ 73.436029][ T1035] kmalloc_trace+0x2a/0xa0 [ 73.440284][ T1035] p9_fd_create+0x177/0x520 [ 73.444623][ T1035] ? p9_fd_create_unix+0x480/0x480 [ 73.449568][ T1035] ? p9_client_create+0x770/0x1220 [ 73.454517][ T1035] ? p9_client_create+0x770/0x1220 [ 73.459462][ T1035] p9_client_create+0x867/0x1220 [ 73.464238][ T1035] ? do_trace_9p_fid_put+0x110/0x110 [ 73.469359][ T1035] ? kstrdup+0x54/0x70 [ 73.473263][ T1035] v9fs_session_init+0x1f2/0x1950 [ 73.478127][ T1035] ? v9fs_show_options+0x570/0x570 [ 73.483072][ T1035] ? kasan_save_alloc_info+0x1f/0x30 [ 73.488191][ T1035] ? __kasan_kmalloc+0x9c/0xb0 [ 73.492793][ T1035] ? kmalloc_trace+0x44/0xa0 [ 73.497217][ T1035] v9fs_mount+0xca/0xb60 [ 73.501307][ T1035] ? incfs_get_verity_signature+0x420/0x420 [ 73.507049][ T1035] ? cap_capable+0x1d2/0x270 [ 73.511457][ T1035] legacy_get_tree+0xf1/0x190 [ 73.515967][ T1035] ? incfs_get_verity_signature+0x420/0x420 [ 73.521697][ T1035] vfs_get_tree+0x88/0x290 [ 73.525946][ T1035] do_new_mount+0x2ba/0xb30 [ 73.530287][ T1035] ? do_move_mount_old+0x160/0x160 [ 73.535233][ T1035] ? security_capable+0x87/0xb0 [ 73.539921][ T1035] ? ns_capable+0x89/0xe0 [ 73.544098][ T1035] path_mount+0x671/0x1070 [ 73.548342][ T1035] ? user_path_at_empty+0x14e/0x1a0 [ 73.553374][ T1035] __se_sys_mount+0x2c4/0x3b0 [ 73.557887][ T1035] ? __this_cpu_preempt_check+0x13/0x20 [ 73.563269][ T1035] ? __x64_sys_mount+0xd0/0xd0 [ 73.567869][ T1035] ? debug_smp_processor_id+0x17/0x20 [ 73.573087][ T1035] __x64_sys_mount+0xbf/0xd0 [ 73.577508][ T1035] x64_sys_call+0x49d/0x9a0 [ 73.581846][ T1035] do_syscall_64+0x3b/0xb0 [ 73.586105][ T1035] ? clear_bhb_loop+0x55/0xb0 [ 73.590643][ T1035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.596337][ T1035] RIP: 0033:0x7f5fe5185d29 [ 73.600589][ T1035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.620039][ T1035] RSP: 002b:00007f5fe6087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.628277][ T1035] RAX: ffffffffffffffda RBX: 00007f5fe5375fa0 RCX: 00007f5fe5185d29 [ 73.636086][ T1035] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 73.643897][ T1035] RBP: 00007f5fe6087090 R08: 00000000200003c0 R09: 0000000000000000 [ 73.651716][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.659529][ T1035] R13: 0000000000000000 R14: 00007f5fe5375fa0 R15: 00007ffe19e42b98 [ 73.667338][ T1035] </TASK> [ 73.822248][ T525] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 73.883682][ T1044] netlink: 80 bytes leftover after parsing attributes in process `syz.5.179'. [ 73.888668][ T300] usb 5-1: USB disconnect, device number 9 [ 73.892407][ T1044] netlink: 80 bytes leftover after parsing attributes in process `syz.5.179'. [ 73.892428][ T1044] netlink: 80 bytes leftover after parsing attributes in process `syz.5.179'. [ 73.917551][ T1044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.022390][ T28] audit: type=1400 audit(1736699536.489:334): avc: denied { create } for pid=1036 comm="syz.5.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.243651][ T28] audit: type=1400 audit(1736699536.489:335): avc: denied { setopt } for pid=1036 comm="syz.5.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.342277][ T525] usb 2-1: Using ep0 maxpacket: 8 [ 74.349675][ T525] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 74.359559][ T525] usb 2-1: config 11 has no interface number 0 [ 74.365852][ T525] usb 2-1: config 11 interface 95 has no altsetting 0 [ 74.376517][ T525] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 74.385617][ T525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.393942][ T525] usb 2-1: Product: syz [ 74.397996][ T525] usb 2-1: Manufacturer: syz [ 74.402419][ T525] usb 2-1: SerialNumber: syz [ 74.588835][ T1071] FAULT_INJECTION: forcing a failure. [ 74.588835][ T1071] name failslab, interval 1, probability 0, space 0, times 0 [ 74.601017][ T1073] loop5: detected capacity change from 0 to 256 [ 74.605066][ T1071] CPU: 0 PID: 1071 Comm: syz.4.187 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 74.614388][ T1073] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 74.616974][ T1071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.638683][ T1071] Call Trace: [ 74.641800][ T1071] <TASK> [ 74.644575][ T1071] dump_stack_lvl+0x151/0x1b7 [ 74.649088][ T1071] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 74.654515][ T1071] dump_stack+0x15/0x18 [ 74.658500][ T1071] should_fail_ex+0x3d0/0x520 [ 74.663106][ T1071] __should_failslab+0xaf/0xf0 [ 74.667693][ T1071] ? __get_vm_area_node+0x129/0x370 [ 74.672725][ T1071] should_failslab+0x9/0x20 [ 74.677061][ T1071] __kmem_cache_alloc_node+0x3d/0x2a0 [ 74.682273][ T1071] ? 0xffffffffa0001d54 [ 74.686264][ T1071] ? __get_vm_area_node+0x129/0x370 [ 74.691305][ T1071] kmalloc_node_trace+0x26/0xb0 [ 74.695990][ T1071] __get_vm_area_node+0x129/0x370 [ 74.700846][ T1071] __vmalloc_node_range+0x338/0x1560 [ 74.706061][ T1071] ? bpf_prog_alloc_no_stats+0x3e/0x400 [ 74.711433][ T1071] ? avc_denied+0x1b0/0x1b0 [ 74.715771][ T1071] ? kstrtoull+0x1cd/0x2e0 [ 74.720049][ T1071] ? selinux_capable+0x2f1/0x430 [ 74.724807][ T1071] ? vmap+0x2b0/0x2b0 [ 74.728657][ T1071] ? selinux_capset+0xf0/0xf0 [ 74.733133][ T1071] ? bpf_prog_alloc_no_stats+0x3e/0x400 [ 74.738512][ T1071] __vmalloc+0x7a/0x90 [ 74.742420][ T1071] ? bpf_prog_alloc_no_stats+0x3e/0x400 [ 74.747798][ T1071] bpf_prog_alloc_no_stats+0x3e/0x400 [ 74.753009][ T1071] bpf_prog_alloc+0x22/0x1c0 [ 74.757561][ T1071] bpf_prog_load+0x84a/0x1bf0 [ 74.762072][ T1071] ? map_freeze+0x3a0/0x3a0 [ 74.766416][ T1071] ? selinux_bpf+0xcb/0x100 [ 74.770757][ T1071] ? security_bpf+0x82/0xb0 [ 74.775095][ T1071] __sys_bpf+0x52c/0x7f0 [ 74.779283][ T1071] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 74.784500][ T1071] ? __ia32_sys_read+0x90/0x90 [ 74.789090][ T1071] ? debug_smp_processor_id+0x17/0x20 [ 74.794288][ T1071] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 74.800193][ T1071] __x64_sys_bpf+0x7c/0x90 [ 74.804448][ T1071] x64_sys_call+0x87f/0x9a0 [ 74.808784][ T1071] do_syscall_64+0x3b/0xb0 [ 74.813151][ T1071] ? clear_bhb_loop+0x55/0xb0 [ 74.817664][ T1071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.823389][ T1071] RIP: 0033:0x7fda2d985d29 [ 74.827643][ T1071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.847187][ T1071] RSP: 002b:00007fda2e6d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.855446][ T1071] RAX: ffffffffffffffda RBX: 00007fda2db75fa0 RCX: 00007fda2d985d29 [ 74.863317][ T1071] RDX: 0000000000000094 RSI: 0000000020000200 RDI: 0000000000000005 [ 74.871126][ T1071] RBP: 00007fda2e6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 74.878937][ T1071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.886754][ T1071] R13: 0000000000000000 R14: 00007fda2db75fa0 R15: 00007ffe3a47b228 [ 74.894568][ T1071] </TASK> [ 74.900363][ T1071] syz.4.187: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 74.917394][ T1071] CPU: 0 PID: 1071 Comm: syz.4.187 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 74.926957][ T1071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.936851][ T1071] Call Trace: [ 74.939973][ T1071] <TASK> [ 74.942750][ T1071] dump_stack_lvl+0x151/0x1b7 [ 74.947265][ T1071] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 74.952573][ T1071] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 74.958204][ T1071] dump_stack+0x15/0x18 [ 74.962280][ T1071] warn_alloc+0x21a/0x3a0 [ 74.966451][ T1071] ? should_failslab+0x9/0x20 [ 74.970962][ T1071] ? zone_watermark_ok_safe+0x270/0x270 [ 74.976338][ T1071] ? kmalloc_node_trace+0x3d/0xb0 [ 74.981200][ T1071] ? __get_vm_area_node+0x361/0x370 [ 74.986237][ T1071] __vmalloc_node_range+0x35c/0x1560 [ 74.991356][ T1071] ? avc_denied+0x1b0/0x1b0 [ 74.995693][ T1071] ? kstrtoull+0x1cd/0x2e0 [ 74.999957][ T1071] ? selinux_capable+0x2f1/0x430 [ 75.004727][ T1071] ? vmap+0x2b0/0x2b0 [ 75.008540][ T1071] ? selinux_capset+0xf0/0xf0 [ 75.013055][ T1071] ? bpf_prog_alloc_no_stats+0x3e/0x400 [ 75.018434][ T1071] __vmalloc+0x7a/0x90 [ 75.022337][ T1071] ? bpf_prog_alloc_no_stats+0x3e/0x400 [ 75.027808][ T1071] bpf_prog_alloc_no_stats+0x3e/0x400 [ 75.033015][ T1071] bpf_prog_alloc+0x22/0x1c0 [ 75.037442][ T1071] bpf_prog_load+0x84a/0x1bf0 [ 75.041957][ T1071] ? map_freeze+0x3a0/0x3a0 [ 75.046299][ T1071] ? selinux_bpf+0xcb/0x100 [ 75.050636][ T1071] ? security_bpf+0x82/0xb0 [ 75.054977][ T1071] __sys_bpf+0x52c/0x7f0 [ 75.059053][ T1071] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 75.064264][ T1071] ? __ia32_sys_read+0x90/0x90 [ 75.068863][ T1071] ? debug_smp_processor_id+0x17/0x20 [ 75.074067][ T1071] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 75.079969][ T1071] __x64_sys_bpf+0x7c/0x90 [ 75.084224][ T1071] x64_sys_call+0x87f/0x9a0 [ 75.088560][ T1071] do_syscall_64+0x3b/0xb0 [ 75.092902][ T1071] ? clear_bhb_loop+0x55/0xb0 [ 75.097414][ T1071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.103143][ T1071] RIP: 0033:0x7fda2d985d29 [ 75.107493][ T1071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.126934][ T1071] RSP: 002b:00007fda2e6d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.135183][ T1071] RAX: ffffffffffffffda RBX: 00007fda2db75fa0 RCX: 00007fda2d985d29 [ 75.143166][ T1071] RDX: 0000000000000094 RSI: 0000000020000200 RDI: 0000000000000005 [ 75.150979][ T1071] RBP: 00007fda2e6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 75.158786][ T1071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.166599][ T1071] R13: 0000000000000000 R14: 00007fda2db75fa0 R15: 00007ffe3a47b228 [ 75.174413][ T1071] </TASK> [ 75.179302][ T1071] Mem-Info: [ 75.182404][ T1071] active_anon:9174 inactive_anon:0 isolated_anon:0 [ 75.182404][ T1071] active_file:5088 inactive_file:1989 isolated_file:0 [ 75.182404][ T1071] unevictable:0 dirty:299 writeback:0 [ 75.182404][ T1071] slab_reclaimable:8297 slab_unreclaimable:73445 [ 75.182404][ T1071] mapped:28924 shmem:5325 pagetables:621 [ 75.182404][ T1071] sec_pagetables:0 bounce:0 [ 75.182404][ T1071] kernel_misc_reclaimable:0 [ 75.182404][ T1071] free:1515507 free_pcp:17502 free_cma:0 [ 75.230222][ T525] usb 2-1: USB disconnect, device number 12 [ 75.238012][ T1071] Node 0 active_anon:36796kB inactive_anon:0kB active_file:20352kB inactive_file:7956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115696kB dirty:1196kB writeback:0kB shmem:21300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4516kB pagetables:2484kB sec_pagetables:0kB all_unreclaimable? no [ 75.270550][ T1071] DMA32 free:2966484kB boost:0kB min:62552kB low:78188kB high:93824kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971540kB mlocked:0kB bounce:0kB free_pcp:5056kB local_pcp:56kB free_cma:0kB [ 75.309948][ T1071] lowmem_reserve[]: 0 3932 3932 3932 [ 75.320374][ T1071] Normal free:3095544kB boost:0kB min:84900kB low:106124kB high:127348kB reserved_highatomic:0KB active_anon:45196kB inactive_anon:0kB active_file:20352kB inactive_file:7956kB unevictable:0kB writepending:1196kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:56952kB local_pcp:15004kB free_cma:0kB [ 75.355877][ T1081] device wg2 entered promiscuous mode [ 75.362975][ T1071] lowmem_reserve[]: 0 0 0 0 [ 75.367529][ T1071] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 722*4096kB (M) = 2966484kB [ 75.383332][ T1071] Normal: 228*4kB (UM) 111*8kB (UME) 15*16kB (UME) 66*32kB (UME) 127*64kB (UME) 24*128kB (UME) 46*256kB (UM) 19*512kB (ME) 11*1024kB (ME) 8*2048kB (UME) 740*4096kB (UM) = 3095544kB [ 75.401715][ T1071] 15976 total pagecache pages [ 75.406455][ T1071] 0 pages in swap cache [ 75.410499][ T1071] Free swap = 124996kB [ 75.415954][ T1084] input: syz1 as /devices/virtual/input/input25 [ 75.423836][ T1071] Total swap = 124996kB [ 75.427875][ T1071] 2097051 pages RAM [ 75.431493][ T1071] 0 pages HighMem/MovableOnly [ 75.442662][ T1071] 347566 pages reserved [ 75.447778][ T1071] 0 pages cma reserved [ 75.477047][ T1087] loop1: detected capacity change from 0 to 512 [ 75.518852][ T1087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.532362][ T1087] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.980223][ T1087] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 206 free clusters [ 76.090958][ T1087] incfs: Can't find or create .index dir in ./file0 [ 76.772017][ T1087] incfs: mount failed -28 [ 76.800502][ T293] EXT4-fs (loop1): unmounting filesystem. [ 76.887638][ T1114] loop3: detected capacity change from 0 to 512 [ 76.895904][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 76.895921][ T28] audit: type=1400 audit(1736699539.379:341): avc: denied { bind } for pid=1092 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.923313][ T1106] netlink: 56 bytes leftover after parsing attributes in process `syz.4.196'. [ 76.932937][ T1106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.196'. [ 76.972614][ T1114] EXT4-fs error (device loop3): __ext4_iget:5057: inode #2: block 100663296: comm syz.3.202: invalid block [ 76.991260][ T1114] EXT4-fs (loop3): get root inode failed [ 77.003225][ T1114] EXT4-fs (loop3): mount failed [ 77.073085][ T1117] fuse: Bad value for 'fd' [ 77.083120][ T1117] overlayfs: overlapping lowerdir path [ 77.128754][ T28] audit: type=1400 audit(1736699539.409:342): avc: denied { setopt } for pid=1092 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.142189][ T300] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 77.256360][ T40] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 77.264916][ T1125] netem: change failed [ 77.270743][ T28] audit: type=1400 audit(1736699539.749:343): avc: denied { name_bind } for pid=1121 comm="syz.4.205" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 77.333681][ T1114] loop3: detected capacity change from 0 to 16 [ 77.360572][ T300] usb 2-1: Using ep0 maxpacket: 16 [ 77.373588][ T1114] erofs: (device loop3): mounted with root inode @ nid 36. [ 77.401278][ T1114] bio_check_eod: 2 callbacks suppressed [ 77.401299][ T1114] syz.3.202: attempt to access beyond end of device [ 77.401299][ T1114] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 77.410465][ T300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.443256][ T40] usb 6-1: config 0 has an invalid interface number: 39 but max is 0 [ 77.453687][ T1130] loop4: detected capacity change from 0 to 2048 [ 77.462527][ T40] usb 6-1: config 0 has no interface number 0 [ 77.468622][ T40] usb 6-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 77.478337][ T300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.490392][ T1130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.502770][ T1132] syz.3.202: attempt to access beyond end of device [ 77.502770][ T1132] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 77.517426][ T300] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.523646][ T40] usb 6-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 77.531809][ T1114] syz.3.202: attempt to access beyond end of device [ 77.531809][ T1114] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 77.553730][ T300] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 77.563793][ T300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.564900][ T1130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.577678][ T1114] syz.3.202: attempt to access beyond end of device [ 77.577678][ T1114] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 77.593337][ T300] usb 2-1: config 0 descriptor?? [ 77.619432][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.652163][ T40] usb 6-1: Product: syz [ 77.656177][ T40] usb 6-1: Manufacturer: syz [ 77.660601][ T40] usb 6-1: SerialNumber: syz [ 77.742418][ T40] usb 6-1: config 0 descriptor?? [ 77.942192][ T525] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 77.951077][ T1137] input: syz1 as /devices/virtual/input/input26 [ 77.957992][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 78.002579][ T300] uclogic 0003:5543:0064.0004: No inputs registered, leaving [ 78.010461][ T300] uclogic 0003:5543:0064.0004: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 78.123615][ T525] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.133657][ T525] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.146418][ T525] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 78.155324][ T525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.158117][ T40] usb 6-1: USB disconnect, device number 2 [ 78.164020][ T525] usb 5-1: config 0 descriptor?? [ 78.175274][ T24] usb 1-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 78.185807][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.186997][ T525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 78.200058][ T24] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 78.218332][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.226303][ T28] audit: type=1400 audit(1736699540.709:344): avc: denied { create } for pid=1111 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.231204][ T525] usb 2-1: USB disconnect, device number 13 [ 78.247354][ T24] usb 1-1: config 0 descriptor?? [ 78.443039][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.39/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.666887][ T24] usb 1-1: string descriptor 0 read error: -71 [ 78.674293][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 78.688425][ T24] usb 1-1: USB disconnect, device number 7 [ 78.730717][ T28] audit: type=1400 audit(1736699541.209:345): avc: denied { getopt } for pid=1146 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.771811][ T1149] loop5: detected capacity change from 0 to 2048 [ 78.783708][ T1152] loop3: detected capacity change from 0 to 512 [ 78.803917][ T1152] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.214: casefold flag without casefold feature [ 78.820901][ T1152] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.214: couldn't read orphan inode 15 (err -117) [ 78.834259][ T1149] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 78.842738][ T1149] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.867990][ T1152] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.870430][ T28] audit: type=1400 audit(1736699541.349:346): avc: denied { append } for pid=1140 comm="syz.5.210" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.899216][ T1143] fs-verity: sha512 using implementation "sha512-avx2" [ 78.907116][ T1152] FAULT_INJECTION: forcing a failure. [ 78.907116][ T1152] name failslab, interval 1, probability 0, space 0, times 0 [ 78.919818][ T28] audit: type=1400 audit(1736699541.379:347): avc: denied { ioctl } for pid=1140 comm="syz.5.210" path="/9/file0/file0/file0" dev="loop5" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.919996][ T1152] CPU: 0 PID: 1152 Comm: syz.3.214 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 78.952083][ T1143] syz.5.210 (1143) used greatest stack depth: 20616 bytes left [ 78.954197][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.954213][ T1152] Call Trace: [ 78.954219][ T1152] <TASK> [ 78.954227][ T1152] dump_stack_lvl+0x151/0x1b7 [ 78.954257][ T1152] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 78.954283][ T1152] ? idr_alloc+0x205/0x2f0 [ 78.954303][ T1152] dump_stack+0x15/0x18 [ 78.954325][ T1152] should_fail_ex+0x3d0/0x520 [ 78.954357][ T1152] __should_failslab+0xaf/0xf0 [ 78.954379][ T1152] ? __list_lru_init+0xa6/0x370 [ 78.954400][ T1152] should_failslab+0x9/0x20 [ 78.954434][ T1152] __kmem_cache_alloc_node+0x3d/0x2a0 [ 78.954457][ T1152] ? __prealloc_shrinker+0x4a9/0x570 [ 78.954488][ T1152] ? __list_lru_init+0xa6/0x370 [ 78.954510][ T1152] kmalloc_trace+0x2a/0xa0 [ 78.954537][ T1152] __list_lru_init+0xa6/0x370 [ 78.954558][ T1152] alloc_super+0x698/0x800 [ 78.954581][ T1152] sget+0x1e5/0x500 [ 78.982202][ T28] audit: type=1400 audit(1736699541.379:348): avc: denied { write } for pid=1140 comm="syz.5.210" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.982316][ T1152] ? free_anon_bdev+0x30/0x30 [ 78.987744][ T28] audit: type=1400 audit(1736699541.389:349): avc: denied { mounton } for pid=1151 comm="syz.3.214" path="/41/file0/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.991976][ T1152] ? ovl_mount+0x40/0x40 [ 79.003524][ T28] audit: type=1400 audit(1736699541.389:350): avc: denied { setattr } for pid=1140 comm="syz.5.210" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.005081][ T1152] mount_nodev+0x31/0xf0 [ 79.005112][ T1152] ovl_mount+0x2c/0x40 [ 79.005137][ T1152] legacy_get_tree+0xf1/0x190 [ 79.005167][ T1152] ? virtio_fs_request_complete+0xd60/0xd60 [ 79.005194][ T1152] vfs_get_tree+0x88/0x290 [ 79.005217][ T1152] do_new_mount+0x2ba/0xb30 [ 79.148254][ T1152] ? do_move_mount_old+0x160/0x160 [ 79.153309][ T1152] ? security_capable+0x87/0xb0 [ 79.157993][ T1152] ? ns_capable+0x89/0xe0 [ 79.162172][ T1152] path_mount+0x671/0x1070 [ 79.166409][ T1152] ? user_path_at_empty+0x14e/0x1a0 [ 79.171450][ T1152] __se_sys_mount+0x2c4/0x3b0 [ 79.175978][ T1152] ? __this_cpu_preempt_check+0x13/0x20 [ 79.181349][ T1152] ? __x64_sys_mount+0xd0/0xd0 [ 79.185945][ T1152] ? debug_smp_processor_id+0x17/0x20 [ 79.191156][ T1152] __x64_sys_mount+0xbf/0xd0 [ 79.195594][ T1152] x64_sys_call+0x49d/0x9a0 [ 79.199913][ T1152] do_syscall_64+0x3b/0xb0 [ 79.204287][ T1152] ? clear_bhb_loop+0x55/0xb0 [ 79.208798][ T1152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.214539][ T1152] RIP: 0033:0x7f150b585d29 [ 79.218948][ T1152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.238391][ T1152] RSP: 002b:00007f150c3e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.246632][ T1152] RAX: ffffffffffffffda RBX: 00007f150b775fa0 RCX: 00007f150b585d29 [ 79.254446][ T1152] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 79.262466][ T1152] RBP: 00007f150c3e0090 R08: 0000000020000100 R09: 0000000000000000 [ 79.270302][ T1152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.278087][ T1152] R13: 0000000000000000 R14: 00007f150b775fa0 R15: 00007fff5266ba98 [ 79.285916][ T1152] </TASK> [ 79.290611][ T995] EXT4-fs (loop5): unmounting filesystem. [ 79.306700][ T294] EXT4-fs (loop3): unmounting filesystem. [ 79.352294][ T40] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 79.605144][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.616060][ T40] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.624988][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.636494][ T40] usb 2-1: config 0 descriptor?? [ 79.636720][ T1178] input: syz1 as /devices/virtual/input/input27 [ 79.693239][ T1179] xt_hashlimit: max too large, truncated to 1048576 [ 79.715174][ T1179] xt_bpf: check failed: parse error [ 80.059000][ T40] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 80.097241][ T40] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input28 [ 80.225579][ T40] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 80.327505][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.334571][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.403521][ T1187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.410568][ T1187] IPv6: NLM_F_CREATE should be set when creating new route [ 80.417663][ T1187] IPv6: NLM_F_CREATE should be set when creating new route [ 80.443988][ T40] usb 5-1: USB disconnect, device number 10 [ 80.446113][ T1187] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 80.453348][ T1189] loop3: detected capacity change from 0 to 512 [ 80.475831][ T295] EXT4-fs (loop4): unmounting filesystem. [ 80.501958][ T24] usb 2-1: USB disconnect, device number 14 [ 80.522845][ T1189] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.226: casefold flag without casefold feature [ 80.552766][ T1189] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.226: couldn't read orphan inode 15 (err -117) [ 80.582555][ T1189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.651724][ T1198] tmpfs: Unknown parameter 'nolazytimeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 80.670036][ T1189] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.828656][ T1217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 80.837643][ T1217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 80.852320][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 80.875417][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 80.887409][ T294] EXT4-fs (loop3): unmounting filesystem. [ 84.122418][ T1225] loop5: detected capacity change from 0 to 40427 [ 84.252374][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 84.252725][ T28] audit: type=1400 audit(1736699543.529:411): avc: denied { create } for pid=1214 comm="syz.5.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.309623][ T1225] F2FS-fs (loop5): fault_injection options not supported [ 84.319873][ T1225] F2FS-fs (loop5): invalid crc value [ 84.343321][ T1230] input: syz1 as /devices/virtual/input/input29 [ 84.575726][ T1225] F2FS-fs (loop5): Found nat_bits in checkpoint [ 84.708647][ T1225] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 84.732657][ T28] audit: type=1400 audit(1736699543.539:412): avc: denied { setopt } for pid=1214 comm="syz.5.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.764518][ T28] audit: type=1400 audit(1736699543.549:413): avc: denied { read } for pid=1214 comm="syz.5.233" path="socket:[19136]" dev="sockfs" ino=19136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.881311][ T28] audit: type=1400 audit(1736699543.679:414): avc: denied { create } for pid=1214 comm="syz.5.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.918628][ T28] audit: type=1400 audit(1736699543.689:415): avc: denied { setopt } for pid=1214 comm="syz.5.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.049301][ T28] audit: type=1400 audit(1736699543.759:416): avc: denied { ioctl } for pid=1214 comm="syz.5.233" path="socket:[19139]" dev="sockfs" ino=19139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.192193][ T28] audit: type=1400 audit(1736699547.209:417): avc: denied { setattr } for pid=1214 comm="syz.5.233" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.305232][ T28] audit: type=1400 audit(1736699547.429:418): avc: denied { bind } for pid=1236 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.341467][ T28] audit: type=1400 audit(1736699547.429:419): avc: denied { name_bind } for pid=1236 comm="syz.1.237" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 85.393935][ T28] audit: type=1400 audit(1736699547.429:420): avc: denied { node_bind } for pid=1236 comm="syz.1.237" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.428419][ T1242] loop1: detected capacity change from 0 to 40427 [ 85.441169][ T1242] F2FS-fs (loop1): invalid crc value [ 85.453628][ T1242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.514695][ T1242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.866348][ T1276] FAULT_INJECTION: forcing a failure. [ 85.866348][ T1276] name failslab, interval 1, probability 0, space 0, times 0 [ 85.878899][ T1276] CPU: 1 PID: 1276 Comm: syz.0.250 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 85.888375][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.898377][ T1276] Call Trace: [ 85.901495][ T1276] <TASK> [ 85.904359][ T1276] dump_stack_lvl+0x151/0x1b7 [ 85.908874][ T1276] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 85.914170][ T1276] ? alloc_empty_file+0x38/0x180 [ 85.918954][ T1276] dump_stack+0x15/0x18 [ 85.922932][ T1276] should_fail_ex+0x3d0/0x520 [ 85.927443][ T1276] ? __alloc_file+0x29/0x2a0 [ 85.931883][ T1276] __should_failslab+0xaf/0xf0 [ 85.936560][ T1276] should_failslab+0x9/0x20 [ 85.940896][ T1276] kmem_cache_alloc+0x3b/0x320 [ 85.945499][ T1276] ? _raw_spin_trylock_bh+0x190/0x190 [ 85.950716][ T1276] __alloc_file+0x29/0x2a0 [ 85.954966][ T1276] alloc_empty_file+0x95/0x180 [ 85.959559][ T1276] alloc_file+0x5a/0x5e0 [ 85.963650][ T1276] alloc_file_pseudo+0x259/0x2f0 [ 85.968443][ T1276] ? shmem_get_inode+0x55a/0xc20 [ 85.973317][ T1276] ? alloc_empty_file_noaccount+0x80/0x80 [ 85.978863][ T1276] ? shmem_get_inode+0x7fd/0xc20 [ 85.983645][ T1276] ? __kasan_check_write+0x14/0x20 [ 85.988595][ T1276] ? clear_nlink+0x89/0xe0 [ 85.992841][ T1276] __shmem_file_setup+0x1d6/0x2a0 [ 85.997697][ T1276] shmem_file_setup+0x2f/0x40 [ 86.002213][ T1276] __se_sys_memfd_create+0x1e1/0x3e0 [ 86.007335][ T1276] __x64_sys_memfd_create+0x5b/0x70 [ 86.012366][ T1276] x64_sys_call+0x871/0x9a0 [ 86.016705][ T1276] do_syscall_64+0x3b/0xb0 [ 86.020956][ T1276] ? clear_bhb_loop+0x55/0xb0 [ 86.025643][ T1276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.031379][ T1276] RIP: 0033:0x7f6d55d85d29 [ 86.035655][ T1276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.055072][ T1276] RSP: 002b:00007f6d55bddd68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 86.063316][ T1276] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f6d55d85d29 [ 86.071138][ T1276] RDX: 00007f6d55bdddec RSI: 0000000000000000 RDI: 00007f6d55e02469 [ 86.078940][ T1276] RBP: 0000000020000000 R08: 00007f6d55bddb07 R09: 0000000000000000 [ 86.086751][ T1276] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 86.094559][ T1276] R13: 00007f6d55bdddec R14: 00007f6d55bdddf0 R15: 00007ffce264b1a8 [ 86.102377][ T1276] </TASK> [ 86.106859][ T1278] futex_wake_op: syz.1.240 tries to shift op by -1; fix this program [ 86.123590][ T1277] loop5: detected capacity change from 0 to 1024 [ 86.132992][ T1235] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 86.186963][ T1277] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 87.885087][ T569] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 87.893469][ T293] syz-executor: attempt to access beyond end of device [ 87.893469][ T293] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.984236][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.000535][ T1235] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.011969][ T1235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.021238][ T1235] usb 4-1: config 0 descriptor?? [ 88.235237][ T1297] input: syz1 as /devices/virtual/input/input30 [ 88.266576][ T995] EXT4-fs (loop5): unmounting filesystem. [ 88.987377][ T1304] xt_hashlimit: max too large, truncated to 1048576 [ 89.008319][ T1304] xt_bpf: check failed: parse error [ 89.143484][ T1235] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 89.151424][ T569] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 89.186634][ T569] usb 5-1: can't read configurations, error -71 [ 89.291669][ T1235] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input31 [ 89.341654][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 89.341672][ T28] audit: type=1400 audit(1736699551.819:429): avc: denied { mount } for pid=1309 comm="syz.5.258" name="/" dev="configfs" ino=14087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.380669][ T28] audit: type=1400 audit(1736699551.859:430): avc: denied { search } for pid=1309 comm="syz.5.258" name="/" dev="configfs" ino=14087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.410297][ T1235] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 89.449307][ T28] audit: type=1400 audit(1736699551.889:431): avc: denied { create } for pid=1309 comm="syz.5.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.517666][ T24] usb 4-1: USB disconnect, device number 9 [ 89.579289][ T1317] serio: Serial port pts0 [ 89.647266][ T28] audit: type=1400 audit(1736699552.129:432): avc: denied { name_bind } for pid=1316 comm="syz.4.261" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 89.675991][ T28] audit: type=1400 audit(1736699552.139:433): avc: denied { bind } for pid=1321 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.682224][ T1326] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 89.742385][ T1328] loop4: detected capacity change from 0 to 256 [ 89.751393][ T1328] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 89.764240][ T28] audit: type=1400 audit(1736699552.249:434): avc: denied { mount } for pid=1327 comm="syz.4.265" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.800424][ T28] audit: type=1400 audit(1736699552.249:435): avc: denied { mount } for pid=1324 comm="syz.1.264" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.835128][ T28] audit: type=1400 audit(1736699552.309:436): avc: denied { write } for pid=1327 comm="syz.4.265" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.868924][ T28] audit: type=1400 audit(1736699552.309:437): avc: denied { add_name } for pid=1327 comm="syz.4.265" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.890136][ T28] audit: type=1400 audit(1736699552.309:438): avc: denied { associate } for pid=1327 comm="syz.4.265" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.933668][ T1340] loop5: detected capacity change from 0 to 256 [ 90.960064][ T1340] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.988759][ T1346] loop3: detected capacity change from 0 to 256 [ 91.022712][ T1346] FAT-fs (loop3): Directory bread(block 64) failed [ 91.038631][ T1346] FAT-fs (loop3): Directory bread(block 65) failed [ 91.045330][ T1346] FAT-fs (loop3): Directory bread(block 66) failed [ 91.051758][ T1346] FAT-fs (loop3): Directory bread(block 67) failed [ 91.073081][ T1346] FAT-fs (loop3): Directory bread(block 68) failed [ 91.079998][ T1346] FAT-fs (loop3): Directory bread(block 69) failed [ 91.087050][ T1346] FAT-fs (loop3): Directory bread(block 70) failed [ 91.093809][ T1346] FAT-fs (loop3): Directory bread(block 71) failed [ 91.100287][ T1346] FAT-fs (loop3): Directory bread(block 72) failed [ 91.107470][ T1346] FAT-fs (loop3): Directory bread(block 73) failed [ 91.222275][ T569] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 91.289824][ T1353] xt_hashlimit: max too large, truncated to 1048576 [ 91.296762][ T1353] xt_bpf: check failed: parse error [ 91.424148][ T569] usb 2-1: config 0 has no interfaces? [ 91.431622][ T569] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.440801][ T569] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.448879][ T569] usb 2-1: Product: syz [ 91.453671][ T569] usb 2-1: Manufacturer: syz [ 91.462540][ T569] usb 2-1: config 0 descriptor?? [ 91.670470][ T316] usb 2-1: USB disconnect, device number 15 [ 92.177184][ T1358] loop5: detected capacity change from 0 to 40427 [ 92.187650][ T1362] loop3: detected capacity change from 0 to 256 [ 92.201092][ T1358] F2FS-fs (loop5): fault_injection options not supported [ 92.209348][ T1358] F2FS-fs (loop5): invalid crc value [ 92.238854][ T1358] F2FS-fs (loop5): Found nat_bits in checkpoint [ 92.292079][ T1358] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 92.533576][ T1370] serio: Serial port pts1 [ 92.553945][ T338] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.602247][ T872] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.656034][ T995] syz-executor: attempt to access beyond end of device [ 92.656034][ T995] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.741993][ T1382] loop3: detected capacity change from 0 to 512 [ 92.851182][ T1389] loop5: detected capacity change from 0 to 512 [ 92.867307][ T1382] EXT4-fs (loop3): 1 orphan inode deleted [ 92.868838][ T1389] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 92.873332][ T1382] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.882083][ T1389] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.895546][ T1382] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.907649][ T337] EXT4-fs error (device loop3): ext4_release_dquot:6811: comm kworker/u4:4: Failed to release dquot type 1 [ 92.915984][ T1389] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 206 free clusters [ 92.940912][ T1389] incfs: Can't find or create .index dir in ./file0 [ 92.948744][ T1389] incfs: mount failed -28 [ 92.985665][ T1396] input: syz1 as /devices/virtual/input/input32 [ 93.348433][ T995] EXT4-fs (loop5): unmounting filesystem. [ 94.114927][ T1403] usb usb8: usbfs: process 1403 (syz.1.286) did not claim interface 0 before use [ 94.163483][ T294] EXT4-fs (loop3): unmounting filesystem. [ 94.324582][ T1423] loop5: detected capacity change from 0 to 512 [ 94.334143][ T1427] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.347307][ T1423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.352572][ T28] kauditd_printk_skb: 304 callbacks suppressed [ 94.352593][ T28] audit: type=1400 audit(1736699556.829:742): avc: denied { mounton } for pid=1410 comm="syz.5.285" path="/24/bus" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.372845][ T1427] FAT-fs (loop9): unable to read boot sector [ 94.442234][ T28] audit: type=1400 audit(1736699556.869:743): avc: denied { execmem } for pid=1418 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 94.461460][ T28] audit: type=1400 audit(1736699556.889:744): avc: denied { read } for pid=1426 comm="syz.4.294" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.484122][ T28] audit: type=1400 audit(1736699556.889:745): avc: denied { open } for pid=1426 comm="syz.4.294" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.511864][ T1423] EXT4-fs (loop5): orphan cleanup on readonly fs [ 94.514757][ T28] audit: type=1400 audit(1736699556.889:746): avc: denied { ioctl } for pid=1426 comm="syz.4.294" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.543232][ T1427] netlink: 96 bytes leftover after parsing attributes in process `syz.4.294'. [ 94.559633][ T1423] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.285: bg 0: block 248: padding at end of block bitmap is not set [ 94.611697][ T28] audit: type=1400 audit(1736699557.039:747): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.643370][ T1423] Quota error (device loop5): write_blk: dquota write failed [ 94.650837][ T1423] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 94.660679][ T1423] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.285: Failed to acquire dquot type 1 [ 94.660954][ T28] audit: type=1400 audit(1736699557.039:748): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.692728][ T1423] EXT4-fs (loop5): 1 truncate cleaned up [ 94.698629][ T1423] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 94.744654][ T28] audit: type=1400 audit(1736699557.039:749): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.915948][ T1439] loop4: detected capacity change from 0 to 2048 [ 94.976831][ T1423] syz.5.285 (1423) used greatest stack depth: 20104 bytes left [ 94.998619][ T1439] loop4: detected capacity change from 0 to 512 [ 95.005761][ T1441] loop1: detected capacity change from 0 to 256 [ 95.029051][ T1441] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 95.052930][ T1439] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.073490][ T1439] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 95.128028][ T1439] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 95.165287][ T1439] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 95.203680][ T1439] System zones: 0-2, 18-18, 34-34 [ 95.239302][ T1439] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 95.284239][ T1439] EXT4-fs (loop4): 1 truncate cleaned up [ 95.309476][ T1452] loop3: detected capacity change from 0 to 256 [ 95.311108][ T1439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.332467][ T1452] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 95.458105][ T1453] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 95.458105][ T1453] [ 95.492195][ T1453] exFAT-fs (loop3): Filesystem has been set read-only [ 95.498815][ T1453] exFAT-fs (loop3): error, failed to bmap (inode : ffff88813612c0d0 iblock : 0, err : -5) [ 95.603399][ T1439] EXT4-fs (loop4): shut down requested (2) [ 95.612250][ T1439] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 95.729919][ T295] EXT4-fs (loop4): unmounting filesystem. [ 95.950179][ T995] EXT4-fs (loop5): unmounting filesystem. [ 96.262201][ T525] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.443583][ T525] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 96.453888][ T525] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.467693][ T525] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.476742][ T525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.501595][ T525] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 96.510907][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.761514][ T1485] incfs: Backing dir is not set, filesystem can't be mounted. [ 96.768950][ T1485] incfs: mount failed -2 [ 96.840515][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.853787][ T1485] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 96.906530][ T1491] xt_hashlimit: max too large, truncated to 1048576 [ 96.923827][ T1491] xt_bpf: check failed: parse error [ 96.964678][ T1493] loop1: detected capacity change from 0 to 256 [ 96.992570][ T1493] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 97.576072][ T1497] device veth1_macvtap left promiscuous mode [ 97.587439][ T1497] device macsec0 entered promiscuous mode [ 97.758661][ T1506] mmap: syz.0.318 (1506) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.826278][ T1516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 97.828017][ T1518] loop4: detected capacity change from 0 to 512 [ 97.842291][ T1518] EXT4-fs: journaled quota format not specified [ 98.224716][ T1226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.277247][ T1530] xt_hashlimit: max too large, truncated to 1048576 [ 98.296973][ T1530] xt_bpf: check failed: parse error [ 98.422206][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 98.428861][ T1226] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.448704][ T1226] usb 1-1: config 0 has no interface number 0 [ 98.467310][ T1226] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.496387][ T1226] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.525084][ T1226] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 98.551389][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.576162][ T1226] usb 1-1: config 0 descriptor?? [ 98.845686][ T1543] loop4: detected capacity change from 0 to 256 [ 98.868365][ T1543] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.916511][ T1537] loop3: detected capacity change from 0 to 40427 [ 98.964436][ T1537] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 98.974183][ T1537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.983692][ T1537] F2FS-fs (loop3): invalid crc value [ 98.993921][ T1537] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.042867][ T1537] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 99.050217][ T1537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.130389][ T1555] device pim6reg1 entered promiscuous mode [ 99.143075][ T525] usb 6-1: USB disconnect, device number 3 [ 99.188694][ T1563] syz.1.338[1563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.188776][ T1563] syz.1.338[1563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.394848][ T1226] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 99.442055][ T1226] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 99.443241][ T28] kauditd_printk_skb: 189 callbacks suppressed [ 99.443258][ T28] audit: type=1400 audit(1736699561.929:939): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.455227][ T1226] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 99.456239][ T28] audit: type=1400 audit(1736699561.929:940): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.476261][ T1226] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 99.494777][ T1567] loop1: detected capacity change from 0 to 512 [ 99.506007][ T1226] uclogic: probe of 0003:28BD:0071.0007 failed with error -71 [ 99.522413][ T28] audit: type=1400 audit(1736699561.969:941): avc: denied { bpf } for pid=1566 comm="syz.1.349" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.529090][ T1226] usb 1-1: USB disconnect, device number 8 [ 99.546777][ T28] audit: type=1400 audit(1736699561.969:942): avc: denied { map_create } for pid=1566 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.574011][ T28] audit: type=1400 audit(1736699561.969:943): avc: denied { prog_load } for pid=1566 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.584344][ T1567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.594148][ T525] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 99.602986][ T1567] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.610926][ T28] audit: type=1400 audit(1736699561.969:944): avc: denied { perfmon } for pid=1566 comm="syz.1.349" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.644539][ T28] audit: type=1400 audit(1736699562.029:945): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 99.671439][ T1567] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 206 free clusters [ 99.692680][ T28] audit: type=1400 audit(1736699562.029:946): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.743039][ T28] audit: type=1400 audit(1736699562.029:947): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.766432][ T1567] incfs: Can't find or create .index dir in ./file0 [ 99.773090][ T1567] incfs: mount failed -28 [ 99.777454][ T28] audit: type=1400 audit(1736699562.029:948): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.813218][ T293] EXT4-fs (loop1): unmounting filesystem. [ 99.832191][ T525] usb 6-1: Using ep0 maxpacket: 16 [ 99.852257][ T525] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.871511][ T525] usb 6-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 99.897870][ T525] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.922204][ T525] usb 6-1: config 1 interface 0 has no altsetting 0 [ 99.942995][ T1572] loop3: detected capacity change from 0 to 40427 [ 99.949487][ T525] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 99.959197][ T1572] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 99.966987][ T525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.975071][ T1572] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.983216][ T525] usb 6-1: Product: syz [ 99.987146][ T525] usb 6-1: Manufacturer: syz [ 99.991666][ T525] usb 6-1: SerialNumber: syz [ 100.009371][ T1572] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.090653][ T1572] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.098107][ T1572] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.212479][ T525] usb 6-1: bad CDC descriptors [ 100.223773][ T525] usb 6-1: USB disconnect, device number 4 [ 100.240043][ T1598] xt_hashlimit: max too large, truncated to 1048576 [ 100.254691][ T1598] xt_bpf: check failed: parse error [ 100.406988][ T1603] device pim6reg1 entered promiscuous mode [ 100.664799][ T1610] geneve1: tun_chr_ioctl cmd 1074025692 [ 100.675515][ T1610] netlink: 'syz.1.351': attribute type 15 has an invalid length. [ 100.913844][ T1620] input: syz1 as /devices/virtual/input/input33 [ 101.624326][ T1628] loop1: detected capacity change from 0 to 128 [ 101.646900][ T1630] loop4: detected capacity change from 0 to 256 [ 101.688203][ T1630] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 101.701200][ T1626] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.708228][ T1626] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.799003][ T1628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.812430][ T1628] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.913473][ T1637] FAULT_INJECTION: forcing a failure. [ 101.913473][ T1637] name failslab, interval 1, probability 0, space 0, times 0 [ 101.925966][ T1637] CPU: 1 PID: 1637 Comm: syz.4.359 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 101.935471][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.945362][ T1637] Call Trace: [ 101.948569][ T1637] <TASK> [ 101.951389][ T1637] dump_stack_lvl+0x151/0x1b7 [ 101.955866][ T1637] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 101.961159][ T1637] dump_stack+0x15/0x18 [ 101.965175][ T1637] should_fail_ex+0x3d0/0x520 [ 101.969659][ T1637] ? security_inode_alloc+0x29/0x120 [ 101.974779][ T1637] __should_failslab+0xaf/0xf0 [ 101.979378][ T1637] should_failslab+0x9/0x20 [ 101.983717][ T1637] kmem_cache_alloc+0x3b/0x320 [ 101.988326][ T1637] security_inode_alloc+0x29/0x120 [ 101.993264][ T1637] inode_init_always+0x720/0x970 [ 101.998038][ T1637] new_inode_pseudo+0x98/0x1d0 [ 102.002642][ T1637] new_inode+0x28/0x1c0 [ 102.006632][ T1637] ? start_creating+0x1d4/0x2f0 [ 102.011318][ T1637] debugfs_create_dir+0xf3/0x490 [ 102.016093][ T1637] hci_register_dev+0x281/0x9a0 [ 102.020785][ T1637] hci_uart_tty_ioctl+0x8ed/0xa70 [ 102.025669][ T1637] ? hci_uart_tty_write+0x10/0x10 [ 102.030508][ T1637] tty_ioctl+0x903/0xc50 [ 102.034604][ T1637] ? tty_get_icount+0xa0/0xa0 [ 102.039119][ T1637] __se_sys_ioctl+0x114/0x190 [ 102.043626][ T1637] __x64_sys_ioctl+0x7b/0x90 [ 102.048036][ T1637] x64_sys_call+0x98/0x9a0 [ 102.052306][ T1637] do_syscall_64+0x3b/0xb0 [ 102.056539][ T1637] ? clear_bhb_loop+0x55/0xb0 [ 102.061056][ T1637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.067316][ T1637] RIP: 0033:0x7fda2d985d29 [ 102.071560][ T1637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.091005][ T1637] RSP: 002b:00007fda2d7de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.099248][ T1637] RAX: ffffffffffffffda RBX: 00007fda2db76160 RCX: 00007fda2d985d29 [ 102.107061][ T1637] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000008 [ 102.114884][ T1637] RBP: 00007fda2d7de090 R08: 0000000000000000 R09: 0000000000000000 [ 102.122692][ T1637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.130606][ T1637] R13: 0000000000000000 R14: 00007fda2db76160 R15: 00007ffe3a47b228 [ 102.138418][ T1637] </TASK> [ 102.141470][ T1637] debugfs: out of free dentries, can not create directory 'hci0' [ 102.174623][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.199274][ T293] EXT4-fs (loop1): unmounting filesystem. [ 102.406148][ T1662] loop3: detected capacity change from 0 to 2048 [ 102.406529][ T1663] loop5: detected capacity change from 0 to 512 [ 102.448139][ T1662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.465332][ T1662] FAULT_INJECTION: forcing a failure. [ 102.465332][ T1662] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.478482][ T1662] CPU: 1 PID: 1662 Comm: syz.3.369 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 102.488036][ T1662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.497932][ T1662] Call Trace: [ 102.501156][ T1662] <TASK> [ 102.503913][ T1662] dump_stack_lvl+0x151/0x1b7 [ 102.508427][ T1662] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 102.513724][ T1662] dump_stack+0x15/0x18 [ 102.517885][ T1662] should_fail_ex+0x3d0/0x520 [ 102.522400][ T1662] should_fail+0xb/0x10 [ 102.526404][ T1662] should_fail_usercopy+0x1a/0x20 [ 102.531283][ T1662] _copy_from_user+0x1e/0xc0 [ 102.535678][ T1662] __se_sys_mount+0x179/0x3b0 [ 102.540194][ T1662] ? preempt_schedule_common+0xf0/0xf0 [ 102.545492][ T1662] ? __x64_sys_mount+0xd0/0xd0 [ 102.550085][ T1662] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 102.555990][ T1662] __x64_sys_mount+0xbf/0xd0 [ 102.560432][ T1662] x64_sys_call+0x49d/0x9a0 [ 102.564758][ T1662] do_syscall_64+0x3b/0xb0 [ 102.569093][ T1662] ? clear_bhb_loop+0x55/0xb0 [ 102.573614][ T1662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.579610][ T1662] RIP: 0033:0x7f150b585d29 [ 102.583861][ T1662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.603394][ T1662] RSP: 002b:00007f150c3e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.611633][ T1662] RAX: ffffffffffffffda RBX: 00007f150b775fa0 RCX: 00007f150b585d29 [ 102.619444][ T1662] RDX: 0000000020004380 RSI: 0000000020000180 RDI: 0000000000000000 [ 102.627620][ T1662] RBP: 00007f150c3e0090 R08: 0000000020004300 R09: 0000000000000000 [ 102.635429][ T1662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.643241][ T1662] R13: 0000000000000000 R14: 00007f150b775fa0 R15: 00007fff5266ba98 [ 102.651060][ T1662] </TASK> [ 102.815595][ T1663] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 102.860130][ T1663] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.929067][ T294] EXT4-fs (loop3): unmounting filesystem. [ 103.068326][ T1663] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 206 free clusters [ 103.138334][ T1663] incfs: Can't find or create .index dir in ./file0 [ 103.243902][ T1663] incfs: mount failed -28 [ 103.270322][ T995] EXT4-fs (loop5): unmounting filesystem. [ 103.348850][ T1654] overlayfs: './bus' not a directory [ 103.541056][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 103.549196][ T1693] binder: 1692:1693 ioctl c0306201 200003c0 returned -14 [ 103.616245][ T1695] input: syz1 as /devices/virtual/input/input34 [ 104.212250][ T872] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.212285][ T1690] Bluetooth: hci0: command 0x1003 tx timeout [ 104.472962][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 104.472998][ T28] audit: type=1400 audit(1736699566.959:1066): avc: denied { execmem } for pid=1701 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 104.576930][ T28] audit: type=1400 audit(1736699567.049:1067): avc: denied { bpf } for pid=1701 comm="syz.5.381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 104.714511][ T28] audit: type=1400 audit(1736699567.049:1068): avc: denied { prog_load } for pid=1701 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.808018][ T28] audit: type=1400 audit(1736699567.049:1069): avc: denied { bpf } for pid=1701 comm="syz.5.381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 104.908852][ T28] audit: type=1400 audit(1736699567.059:1070): avc: denied { map_create } for pid=1701 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.003197][ T28] audit: type=1400 audit(1736699567.059:1071): avc: denied { bpf } for pid=1701 comm="syz.5.381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 105.104648][ T28] audit: type=1400 audit(1736699567.059:1072): avc: denied { prog_load } for pid=1701 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.173619][ T28] audit: type=1400 audit(1736699567.059:1073): avc: denied { bpf } for pid=1701 comm="syz.5.381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 105.242959][ T28] audit: type=1400 audit(1736699567.079:1075): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 105.293531][ T28] audit: type=1400 audit(1736699567.059:1074): avc: denied { prog_load } for pid=1701 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.562193][ T872] Bluetooth: hci1: command 0x1003 tx timeout [ 105.562172][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 105.803011][ T8] device bridge_slave_1 left promiscuous mode [ 105.808969][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.816480][ T8] device bridge_slave_0 left promiscuous mode [ 105.822487][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.830453][ T8] device veth0_vlan left promiscuous mode [ 105.892826][ T1724] FAULT_INJECTION: forcing a failure. [ 105.892826][ T1724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.923874][ T1724] CPU: 0 PID: 1724 Comm: syz.1.388 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 105.933443][ T1724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.943452][ T1724] Call Trace: [ 105.946572][ T1724] <TASK> [ 105.949362][ T1724] dump_stack_lvl+0x151/0x1b7 [ 105.953869][ T1724] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 105.959159][ T1724] dump_stack+0x15/0x18 [ 105.963146][ T1724] should_fail_ex+0x3d0/0x520 [ 105.967660][ T1724] should_fail+0xb/0x10 [ 105.971649][ T1724] should_fail_usercopy+0x1a/0x20 [ 105.976510][ T1724] _copy_from_user+0x1e/0xc0 [ 105.981024][ T1724] memdup_user+0x63/0xc0 [ 105.985106][ T1724] strndup_user+0x68/0xc0 [ 105.989271][ T1724] __se_sys_mount+0x9b/0x3b0 [ 105.993698][ T1724] ? __this_cpu_preempt_check+0x13/0x20 [ 105.999080][ T1724] ? __x64_sys_mount+0xd0/0xd0 [ 106.003720][ T1724] ? debug_smp_processor_id+0x17/0x20 [ 106.008887][ T1724] __x64_sys_mount+0xbf/0xd0 [ 106.013311][ T1724] x64_sys_call+0x49d/0x9a0 [ 106.017654][ T1724] do_syscall_64+0x3b/0xb0 [ 106.021904][ T1724] ? clear_bhb_loop+0x55/0xb0 [ 106.026418][ T1724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.032147][ T1724] RIP: 0033:0x7f7eef785d29 [ 106.036404][ T1724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.055930][ T1724] RSP: 002b:00007f7ef0548038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.064173][ T1724] RAX: ffffffffffffffda RBX: 00007f7eef975fa0 RCX: 00007f7eef785d29 [ 106.071992][ T1724] RDX: 0000000020000280 RSI: 0000000020000400 RDI: 0000000020000300 [ 106.079795][ T1724] RBP: 00007f7ef0548090 R08: 0000000000000000 R09: 0000000000000000 [ 106.087705][ T1724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.095515][ T1724] R13: 0000000000000000 R14: 00007f7eef975fa0 R15: 00007ffe463050b8 [ 106.103351][ T1724] </TASK> [ 106.109359][ T1728] xt_hashlimit: max too large, truncated to 1048576 [ 106.127326][ T1728] xt_bpf: check failed: parse error [ 109.484739][ T28] kauditd_printk_skb: 414 callbacks suppressed [ 109.484757][ T28] audit: type=1400 audit(1736699571.969:1490): avc: denied { execmem } for pid=1769 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 109.510791][ T28] audit: type=1400 audit(1736699571.969:1491): avc: denied { bpf } for pid=1769 comm="syz.0.405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 109.531687][ T28] audit: type=1400 audit(1736699571.969:1492): avc: denied { prog_load } for pid=1769 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.550655][ T28] audit: type=1400 audit(1736699571.969:1493): avc: denied { bpf } for pid=1769 comm="syz.0.405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 109.550686][ T28] audit: type=1400 audit(1736699571.969:1494): avc: denied { bpf } for pid=1769 comm="syz.0.405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 109.550712][ T28] audit: type=1400 audit(1736699571.969:1495): avc: denied { mounton } for pid=1769 comm="syz.0.405" path="/101/file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 109.550740][ T28] audit: type=1400 audit(1736699571.969:1496): avc: denied { read } for pid=1769 comm="syz.0.405" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 109.550769][ T28] audit: type=1400 audit(1736699571.969:1497): avc: denied { write } for pid=1769 comm="syz.0.405" name="mcfilter6" dev="proc" ino=4026532339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 109.550796][ T28] audit: type=1400 audit(1736699571.969:1498): avc: denied { bpf } for pid=1769 comm="syz.0.405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 109.550822][ T28] audit: type=1400 audit(1736699571.969:1499): avc: denied { map_create } for pid=1769 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.656378][ T1786] capability: warning: `syz.3.412' uses 32-bit capabilities (legacy support in use) [ 112.809607][ T1808] FAULT_INJECTION: forcing a failure. [ 112.809607][ T1808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.831051][ T1808] CPU: 1 PID: 1808 Comm: syz.1.419 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 112.840926][ T1808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.840946][ T1808] Call Trace: [ 112.840954][ T1808] <TASK> [ 112.840967][ T1808] dump_stack_lvl+0x151/0x1b7 [ 112.840998][ T1808] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 112.866677][ T1808] dump_stack+0x15/0x18 [ 112.870655][ T1808] should_fail_ex+0x3d0/0x520 [ 112.875433][ T1808] should_fail+0xb/0x10 [ 112.879429][ T1808] should_fail_usercopy+0x1a/0x20 [ 112.879465][ T1808] _copy_from_user+0x1e/0xc0 [ 112.888711][ T1808] __se_sys_mount+0x179/0x3b0 [ 112.888753][ T1808] ? __this_cpu_preempt_check+0x13/0x20 [ 112.898603][ T1808] ? __x64_sys_mount+0xd0/0xd0 [ 112.898636][ T1808] ? debug_smp_processor_id+0x17/0x20 [ 112.908428][ T1808] __x64_sys_mount+0xbf/0xd0 [ 112.908472][ T1808] x64_sys_call+0x49d/0x9a0 [ 112.908495][ T1808] do_syscall_64+0x3b/0xb0 [ 112.921519][ T1808] ? clear_bhb_loop+0x55/0xb0 [ 112.921558][ T1808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.931786][ T1808] RIP: 0033:0x7f7eef785d29 [ 112.931811][ T1808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.931829][ T1808] RSP: 002b:00007f7ef0548038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.931851][ T1808] RAX: ffffffffffffffda RBX: 00007f7eef975fa0 RCX: 00007f7eef785d29 [ 112.971612][ T1808] RDX: 0000000020004380 RSI: 0000000020000180 RDI: 0000000000000000 [ 112.971631][ T1808] RBP: 00007f7ef0548090 R08: 0000000020004300 R09: 0000000000000000 [ 112.971643][ T1808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.971654][ T1808] R13: 0000000000000000 R14: 00007f7eef975fa0 R15: 00007ffe463050b8 [ 112.971679][ T1808] </TASK> [ 114.160993][ T1823] device pim6reg1 entered promiscuous mode [ 114.199347][ T1829] xt_hashlimit: max too large, truncated to 1048576 [ 114.206205][ T1829] xt_bpf: check failed: parse error [ 115.443497][ T28] kauditd_printk_skb: 275 callbacks suppressed [ 115.443515][ T28] audit: type=1400 audit(1736699577.929:1775): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 115.471351][ T28] audit: type=1400 audit(1736699577.929:1776): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 115.493748][ T28] audit: type=1400 audit(1736699577.979:1777): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 115.516020][ T28] audit: type=1400 audit(1736699577.999:1778): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 115.538085][ T28] audit: type=1400 audit(1736699578.019:1779): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 115.561235][ T28] audit: type=1400 audit(1736699578.039:1780): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 115.593040][ T28] audit: type=1400 audit(1736699578.039:1781): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 115.616404][ T28] audit: type=1400 audit(1736699578.059:1782): avc: denied { bpf } for pid=1837 comm="syz.5.428" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 115.637999][ T28] audit: type=1400 audit(1736699578.059:1783): avc: denied { map_create } for pid=1837 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.657744][ T28] audit: type=1400 audit(1736699578.059:1784): avc: denied { bpf } for pid=1837 comm="syz.5.428" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 115.680191][ T1844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7969 sclass=netlink_route_socket pid=1844 comm=syz.3.429 [ 118.731054][ T1867] FAULT_INJECTION: forcing a failure. [ 118.731054][ T1867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.744279][ T1867] CPU: 1 PID: 1867 Comm: syz.3.438 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 118.753839][ T1867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.763733][ T1867] Call Trace: [ 118.766855][ T1867] <TASK> [ 118.769718][ T1867] dump_stack_lvl+0x151/0x1b7 [ 118.774237][ T1867] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 118.779665][ T1867] ? vfs_write+0x952/0xed0 [ 118.783915][ T1867] ? __kasan_slab_free+0x11/0x20 [ 118.788688][ T1867] dump_stack+0x15/0x18 [ 118.792682][ T1867] should_fail_ex+0x3d0/0x520 [ 118.797197][ T1867] should_fail+0xb/0x10 [ 118.801192][ T1867] should_fail_usercopy+0x1a/0x20 [ 118.806060][ T1867] _copy_from_user+0x1e/0xc0 [ 118.810478][ T1867] __sys_bpf+0x23b/0x7f0 [ 118.814555][ T1867] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 118.819766][ T1867] ? fpregs_restore_userregs+0x130/0x290 [ 118.825233][ T1867] __x64_sys_bpf+0x7c/0x90 [ 118.829573][ T1867] x64_sys_call+0x87f/0x9a0 [ 118.833911][ T1867] do_syscall_64+0x3b/0xb0 [ 118.838161][ T1867] ? clear_bhb_loop+0x55/0xb0 [ 118.842680][ T1867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.848403][ T1867] RIP: 0033:0x7f150b585d29 [ 118.852664][ T1867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.872117][ T1867] RSP: 002b:00007f150c3e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.880349][ T1867] RAX: ffffffffffffffda RBX: 00007f150b775fa0 RCX: 00007f150b585d29 [ 118.888388][ T1867] RDX: 0000000000000069 RSI: 00000000200002c0 RDI: 000000000000000a [ 118.896200][ T1867] RBP: 00007f150c3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 118.904013][ T1867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.911823][ T1867] R13: 0000000000000000 R14: 00007f150b775fa0 R15: 00007fff5266ba98 [ 118.919636][ T1867] </TASK> [ 120.452244][ T28] kauditd_printk_skb: 208 callbacks suppressed [ 120.452263][ T28] audit: type=1400 audit(1736699582.939:1993): avc: denied { bpf } for pid=1874 comm="syz.5.441" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 120.482536][ T28] audit: type=1400 audit(1736699582.939:1994): avc: denied { bpf } for pid=1875 comm="syz.0.439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 120.503059][ T28] audit: type=1400 audit(1736699582.939:1995): avc: denied { map_create } for pid=1875 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.522806][ T28] audit: type=1400 audit(1736699582.939:1996): avc: denied { bpf } for pid=1875 comm="syz.0.439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 120.536749][ T1881] capability: warning: `syz.1.440' uses deprecated v2 capabilities in a way that may be insecure [ 120.543596][ T28] audit: type=1400 audit(1736699582.939:1997): avc: denied { prog_load } for pid=1875 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.572589][ T28] audit: type=1400 audit(1736699582.939:1998): avc: denied { bpf } for pid=1875 comm="syz.0.439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 120.593097][ T28] audit: type=1400 audit(1736699582.939:1999): avc: denied { bpf } for pid=1875 comm="syz.0.439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 120.615182][ T28] audit: type=1400 audit(1736699582.939:2000): avc: denied { prog_load } for pid=1875 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.634615][ T28] audit: type=1400 audit(1736699582.939:2001): avc: denied { bpf } for pid=1875 comm="syz.0.439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 120.655515][ T28] audit: type=1400 audit(1736699582.939:2002): avc: denied { map_create } for pid=1875 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.230597][ T1906] xt_hashlimit: max too large, truncated to 1048576 [ 124.237564][ T1906] xt_bpf: check failed: parse error [ 125.469135][ T28] kauditd_printk_skb: 174 callbacks suppressed [ 125.469151][ T28] audit: type=1400 audit(1736699587.949:2177): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.497177][ T28] audit: type=1400 audit(1736699587.949:2178): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.519120][ T28] audit: type=1400 audit(1736699587.999:2179): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.541352][ T28] audit: type=1400 audit(1736699588.019:2180): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.563469][ T28] audit: type=1400 audit(1736699588.049:2181): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.585466][ T28] audit: type=1400 audit(1736699588.069:2182): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.607573][ T28] audit: type=1400 audit(1736699588.089:2183): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.629680][ T28] audit: type=1400 audit(1736699588.109:2184): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.651880][ T28] audit: type=1400 audit(1736699588.129:2185): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 125.673850][ T28] audit: type=1400 audit(1736699588.159:2186): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=6 req=393 state=1 status=67 (errno 9: Bad file descriptor) [ 126.213204][ T1914] syz.1.452 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.237344][ T1916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 126.963223][ T10] device veth1_macvtap left promiscuous mode [ 126.969062][ T10] device veth0_vlan left promiscuous mode [ 127.653032][ T10] device bridge_slave_1 left promiscuous mode [ 127.658966][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.666275][ T10] device bridge_slave_0 left promiscuous mode [ 127.672269][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.680143][ T10] device bridge_slave_1 left promiscuous mode [ 127.686121][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.693825][ T10] device bridge_slave_1 left promiscuous mode [ 127.699756][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.707281][ T10] device bridge_slave_0 left promiscuous mode [ 127.713490][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.721358][ T10] device veth1_macvtap left promiscuous mode [ 127.727580][ T10] device veth0_vlan left promiscuous mode [ 127.733352][ T10] device veth1_macvtap left promiscuous mode [ 127.739308][ T10] device veth0_vlan left promiscuous mode