last executing test programs: 15m7.374160504s ago: executing program 32 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002440)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x7, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x80000000, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x20000004, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffffd, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x6, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x7, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0x8b87, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x9, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffd}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r6 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 14m28.982211273s ago: executing program 33 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x2, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, 0x0) 14m22.455470341s ago: executing program 34 (id=440): r0 = syz_clone3(&(0x7f0000000240)={0x10204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f00000000c0)=""/106, 0x6a, &(0x7f0000000140)=""/176, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x3, 0x4002) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x80, 0x0, 0x0) pipe2(&(0x7f0000000a40)={0xffffffffffffffff}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x98, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x76}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x30}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x50) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="0700200010000104efd200004000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000004001980140003006272696467655f736c6176655f310000"], 0x38}}, 0x0) r9 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x2c, {0x2c, 0x10, "afb1bd539a610e968c1b7ed913b28ff47397ecf7096a220825dd6d04e06346461dda9ca837067a0eb7ad"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="00033a0000003a034e23d4cb35a84fe74e53828304c03aed703e5e66db52204de767c6e838e274ffad83f80caf4a7878f07bf3ae9c2a2fc82c296011f4"], &(0x7f0000000380)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0xffff, 0xf00, 0x3, [0x3f, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xc2, 0x5, 0xfbff}, @generic={0xc, 0x10, 0xa, "f94c4bdeaed22bc9ce"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x2, 0xfeff}, @generic={0xb1, 0x10, 0x4, "c941d74f27391c416cd5b72d3d6b988e9df3dbc5e9cfb2db58b616cf4ab70a4e2791bcc6d2619b2366efb53bdb7cc1e9bbd3ed94020aaef0672cc1306f2ce715ecf8b936cf0052f1caf5a8bf3ef4258ae4df490acd0ecef3bf4f9ec90ff6ef3f686758c3c77cbceef4f018716b1fae6b0a768205a97b8a2f54c5c1e53498a32ec9c4140540f18badee39d5ce6145085a466d2667bee8e3ccccdd944222a9f94336e3281ddb37cf2d60a17a275950"}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0x10, 0xf8, "e1f6aeef", "0342d4c1"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x18, 0x1, 0xef, 0x3, 0x6, 0x3, 0x2}}}, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x20, 0x15, 0x5f, "9872977df48951c7a0518769860aaeaf305c9a6f1e2bfbdc42c9623541ca437a9f47cac3b037c400a19a638feda1a45478723d90ce8fdc04c3c4dd3d470067b6a59088c842560c9a07b5de2ff2ea909610d5a6587e8c2024d53ca133e36bdb"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x40, 0x2}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xff6b}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0xb, 0x2, '\b7'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "f57b"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x40}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x3}}) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 13m23.137282558s ago: executing program 35 (id=921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) close(r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000480)={@val={0x1c, 0x800}, @val={0x1, 0x4, 0xfd, 0xffff, 0x4}, @eth={@random="5df43458e526", @random="1dac04824a12", @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}], @ipv6=@generic={0x5, 0x6, "9fb1fd", 0xc0, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, {[@fragment={0x2f, 0x0, 0x5, 0x1, 0x0, 0xe, 0x68}, @routing={0x5e, 0x6, 0x0, 0xa, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x25}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x89, 0x0, 0x9, 0x1, 0x0, 0x7, 0x64}, @srh={0x2f, 0x2, 0x4, 0x1, 0x9, 0x60, 0x29ad, [@mcast1]}, @fragment={0x8, 0x0, 0x0, 0x1, 0x0, 0x13, 0x68}, @dstopts={0x2b, 0x4, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x401, [0xb5, 0xffffffffffffffff]}}]}, @dstopts={0x11, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}}}}}}}, 0x10c) 10m31.643687202s ago: executing program 36 (id=2547): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) close_range(r0, r0, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)="977330", 0x3}], 0x1) 10m0.743015684s ago: executing program 37 (id=2823): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001b0000000000000025ffbe4d92f52e00", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b00010062726964676500001400028008000400000000000500170001000000"], 0x44}}, 0x24) r6 = signalfd(r2, &(0x7f0000000040)={[0x9]}, 0x8) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001b0000000000000025ffbe4d92f52e00", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b00010062726964676500001400028008000400000000000500170001000000"], 0x44}}, 0x24) (async) signalfd(r2, &(0x7f0000000040)={[0x9]}, 0x8) (async) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000080)) (async) 9m56.609873535s ago: executing program 2 (id=2864): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) statfs(&(0x7f0000000080)='./file0\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r9) 9m56.526679487s ago: executing program 2 (id=2866): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r6, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=0x0], 0x50) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) io_setup(0x8f0, &(0x7f0000002400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 9m56.39692033s ago: executing program 2 (id=2868): r0 = socket(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x700, 0x1, 0x5b, 0x1, {{0xd, 0x4, 0x1, 0x1e, 0x34, 0x66, 0x0, 0x9, 0x29, 0x0, @local, @multicast1, {[@end, @generic={0x86, 0x6, "cb3e2df5"}, @cipso={0x86, 0x16, 0x2, [{0x1, 0x4, "a2c8"}, {0x5, 0xc, "f849feef4abaa781cfc5"}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8, 0x1, 0x800, 0xc, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x65, 0x0, 0x3, 0x2b, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x94, 0x4, ').'}, @end, @noop, @end]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001700)=@abs={0x0, 0x0, 0x4e24}, 0x9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x2000, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40900, 0x0) r10 = openat$incfs(r9, &(0x7f0000000080)='.log\x00', 0x0, 0x40) preadv(r10, &(0x7f0000001840)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x1, 0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x1b, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000ffff0000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000636100007b8af0ff00000000bfa100e9bfe1ccdf0f2fbf61144d6d28000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000018250000", @ANYRES32=0x1, @ANYBLOB="0000000006000000dc43e0fffcffffff9500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0xe, &(0x7f0000000640)=""/14, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x8, 0x6, 0x4}, 0x10, 0xa234, r1, 0x0, &(0x7f0000000ec0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x401}, 0x94) 9m55.434534518s ago: executing program 2 (id=2878): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockname(r3, &(0x7f00000000c0)=@phonet, &(0x7f0000000300)=0x80) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/95, 0x0, 0x5000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) 9m53.852341849s ago: executing program 2 (id=2887): socket(0x80000000000000a, 0x2, 0x0) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000001400)) fsmount(0xffffffffffffffff, 0x0, 0x83) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x83) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x700, 0x400, 0x2, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x5, 0x400) sendfile(r3, r3, &(0x7f0000000700)=0x11d5da1a, 0x9) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_capset\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0, 0xffffffffffffffff}, 0x4) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018ac990076aca3d41ccf917ca65aae807dff399764736ce6bbbc368ceac64f47f15c524f9ebfd432c72636bed1f2a0c0ebab9e3a7f9e07afaf50f59813c1cd966d7fdcaec0eb72922cc4914d45b76b9e5ab7cc1eaa8b013ab5a0e27589dc248158fed360c27e669a27d936e0f1b6619a6925d8c8c352733c54acc3261aef8ce5aa6358245a11d3a6d353f3d6e6f4a00dd3aefb351223203ba5f663cad6888434300e95b42b9bd890815897fd7f45eb96a1bf3943a5e0b1d34059f942fea7929d494600158be58ac1ca8284eeed2465946a8f6ba2dcdae6b7e108571e266a139db21012bb8f3fdd240b4679032505e5739f25b58d94942dca1fb4c192cb1e0144dc831d54f4eec32c0f832088e9d35d29c17bb0094a8c6db7769d11b196c7f40c07b0a010b265d3dc3a416741544363c61bb62a32070000006058381fe596edbf9930aeba8d04070a9f789d1ef212d421a9953eb9baa1c9c301742d78157d4b58e378ab5faf25c5b7f7d076d33d3a7dac676f3d4f56489a7dd78ab0c920592dc0c3b478a884b7377b53cd5c2a09d84a46e4898e6d41effca3aa9e693fc056c2f86b64e7048377a4bcd048a897bb3497b0e25f095cd5692866a08b920c750c18c2213ffd7df78b80061915f1d92c83114480ed6c48e9e501a66aae269abc972dafe29fad71", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x739, 0x45, &(0x7f00000000c0)=""/69, 0x41100, 0x8, '\x00', r2, @sk_lookup=0x24, r3, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x4, &(0x7f0000000380)=[r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f00000003c0)=[{0x1, 0x1, 0x2, 0xf}, {0x2, 0x1, 0x6, 0x3}, {0x0, 0x4, 0x10, 0x5}, {0x2, 0x3, 0x2, 0xb}], 0x10, 0x41a}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x739, 0x45, &(0x7f00000000c0)=""/69, 0x41100, 0x8, '\x00', r2, @sk_lookup=0x24, r3, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x4, &(0x7f0000000380)=[r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f00000003c0)=[{0x1, 0x1, 0x2, 0xf}, {0x2, 0x1, 0x6, 0x3}, {0x0, 0x4, 0x10, 0x5}, {0x2, 0x3, 0x2, 0xb}], 0x10, 0x41a}, 0x94) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) (async) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) 9m53.560789825s ago: executing program 2 (id=2891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2, 0x0, 0x3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 9m53.511546976s ago: executing program 38 (id=2891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2, 0x0, 0x3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 7m18.707293905s ago: executing program 7 (id=4227): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setuid(0xee01) setreuid(0x0, 0xee01) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000053c0)=[{{&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f0000002300)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000002280)=""/75, 0x4b}], 0x5}, 0x5}, {{&(0x7f0000002380)=@generic, 0x80, &(0x7f0000002680)=[{&(0x7f0000002400)=""/237, 0xed}, {&(0x7f0000002500)=""/176, 0xb0}, {&(0x7f00000025c0)=""/182, 0xb6}, {&(0x7f0000000100)=""/9, 0x9}], 0x4, &(0x7f00000026c0)=""/182, 0xb6}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002780)=""/231, 0xe7}, {&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/116, 0x74}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x4, &(0x7f00000039c0)=""/111, 0x6f}, 0x9}, {{&(0x7f0000003a40)=@nfc_llcp, 0x80, &(0x7f0000004b00)=[{&(0x7f0000003ac0)=""/28, 0x1c}, {&(0x7f0000003b00)=""/4096, 0x1000}], 0x2, &(0x7f0000004b40)=""/30, 0x1e}, 0xfff}, {{&(0x7f0000004b80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004c00)=""/189, 0xbd}, {&(0x7f0000004cc0)=""/105, 0x69}], 0x2, &(0x7f0000004d80)=""/86, 0x56}, 0x1}, {{&(0x7f0000004e00)=@nfc_llcp, 0x80, &(0x7f0000005100)=[{&(0x7f0000004e80)}, {&(0x7f0000004ec0)=""/89, 0x59}, {&(0x7f0000004f40)=""/50, 0x32}, {&(0x7f0000004f80)=""/192, 0xc0}, {&(0x7f0000005040)=""/142, 0x8e}], 0x5, &(0x7f0000005180)=""/188, 0xbc}, 0x7}, {{&(0x7f0000005240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005380)=[{&(0x7f00000052c0)=""/156, 0x9c}], 0x1}, 0x3}], 0x7, 0x2123, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000000c0)=0x3) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) setuid(0xee01) (async) setreuid(0x0, 0xee01) (async) io_setup(0x2278, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) recvmmsg(r4, &(0x7f00000053c0)=[{{&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f0000002300)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000002280)=""/75, 0x4b}], 0x5}, 0x5}, {{&(0x7f0000002380)=@generic, 0x80, &(0x7f0000002680)=[{&(0x7f0000002400)=""/237, 0xed}, {&(0x7f0000002500)=""/176, 0xb0}, {&(0x7f00000025c0)=""/182, 0xb6}, {&(0x7f0000000100)=""/9, 0x9}], 0x4, &(0x7f00000026c0)=""/182, 0xb6}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002780)=""/231, 0xe7}, {&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/116, 0x74}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x4, &(0x7f00000039c0)=""/111, 0x6f}, 0x9}, {{&(0x7f0000003a40)=@nfc_llcp, 0x80, &(0x7f0000004b00)=[{&(0x7f0000003ac0)=""/28, 0x1c}, {&(0x7f0000003b00)=""/4096, 0x1000}], 0x2, &(0x7f0000004b40)=""/30, 0x1e}, 0xfff}, {{&(0x7f0000004b80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004c00)=""/189, 0xbd}, {&(0x7f0000004cc0)=""/105, 0x69}], 0x2, &(0x7f0000004d80)=""/86, 0x56}, 0x1}, {{&(0x7f0000004e00)=@nfc_llcp, 0x80, &(0x7f0000005100)=[{&(0x7f0000004e80)}, {&(0x7f0000004ec0)=""/89, 0x59}, {&(0x7f0000004f40)=""/50, 0x32}, {&(0x7f0000004f80)=""/192, 0xc0}, {&(0x7f0000005040)=""/142, 0x8e}], 0x5, &(0x7f0000005180)=""/188, 0xbc}, 0x7}, {{&(0x7f0000005240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005380)=[{&(0x7f00000052c0)=""/156, 0x9c}], 0x1}, 0x3}], 0x7, 0x2123, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000000c0)=0x3) (async) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) 7m18.342152952s ago: executing program 7 (id=4236): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x154, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffdd}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5f}, {0x6, 0x11, 0x9}}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x8c4) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}, @common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x260, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000017000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000002000000000000000000000018120400", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='mm_page_free_batched\x00', r5}, 0x18) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x4, 0x5, {0x5, 0xa, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000007000000480000000c"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r11) 7m16.170696704s ago: executing program 7 (id=4268): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) capget(&(0x7f0000feaff9)={0x20080522}, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1512, &(0x7f00000002c0)="$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") 7m15.702717304s ago: executing program 7 (id=4270): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r0 = syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file0/file0\x00', 0x2ac48c8, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc913}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000800)="b2227637227a1d2adebd1a77e1e55c2c8be6ee2d6c511103fee73498de3e5fc6445bcaf6f90cf009dd1da3fdec3da7e25ff759367c8df479eaa41c79f14c28127a1f669b6a0c897951490fb78d3fe3eda7722ffba9718546ced6769ab2232e4a582150db1be88db720d6") move_mount(r0, &(0x7f0000000880)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x41) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a4, &(0x7f0000000480)="$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") r4 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000080)='./file0/file0\x00', r2, 0x4000, r4}, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000100)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 7m15.196493563s ago: executing program 7 (id=4272): r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x7, 0xfffffffa, 0x8001, 0x7fffffff}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='afs_io_error\x00', r3, 0x0, 0x7}, 0x18) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="ee440bd09cdece07338d322734f98e026291ef9fbd328f30277bf43ee40ca2f57bae600599c44029bdfd0df66ff3c6f5598e4ede40fc6e5e8fad5108b6c5e79f548cf08ab0c75b79e631e97f4345396ed7a41adaf4e6dcb2f9125fd33c", 0x5d}], 0x1}}], 0x1, 0x9200000000040014) (async) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) ioctl$KVM_GET_PIT2(r7, 0x8070ae9f, &(0x7f0000000280)) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) (async) r8 = dup3(r1, r0, 0x0) recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 7m15.005017907s ago: executing program 7 (id=4274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/113) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000940)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000980)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000002d80)={0x12bc, 0x11, 0x100, 0x70bd29, 0x25dfdbfd, {0x7}, [@generic="e28fcecb9ed0d190cdcc4bd51532aa326aa793998b40e3acb2bf8469847bef0ebf864222f9aa4847ba2e748f717bb967b5a1b71a9b3d99575bc83dbf", @nested={0x1165, 0x68, 0x0, 0x1, [@generic="cdda18c49db83c0b933c7e3d063e982fe30c736af58ea805d4238e1f393261c4ab42f25ac43ddcbe2faa160d1aa5639c0b7d8795f8548fe7df028cc19936cbb3b3d2e66a98462840cf2656535be5870a07d899327d84c8210b1c019d9c", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r1}, @generic="e22b83cc649f669751c45eeb4e13c58cc4a5b7590191f09f4e98ca545abe69186089f1ca9dfb133f3bd16fbef7a105d9abc2618eeaad13bd025dfaa59f25d417858c08079c81b2f2d032083360223cfdb8b3e48499e165ec81e46676cb16309980dce5afbe5557c524582270cf1b96258a3885562fc452a476586b63de15f6870148b9a8096896a9b081a877a847f4ff39f4ddfbd95d1092608a4674617225cea0184e39c554b9dc25baa34a2ecec84ebf635bb140ec11d170f43b10d4bc786d90969102f927b6200581e0dabc3a43d1383d3ae68679906850e4f73a", @typed={0x8, 0x10d, 0x0, 0x0, @pid=r2}, @typed={0x1004, 0x144, 0x0, 0x0, @binary="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"}]}, @nested={0xc2, 0x112, 0x0, 0x1, [@generic="b6a2232788ef89b808d84d40767e0174d7c27d09a934a5cc4d1ae6fcc50ca3ee4199e1aa0f121a8962852d25578d04f221c2842a5f40492cfa5e681b9355f903e147df22bf776b05115d0aec46b2bf97403048b372559328b25836ae84bff5b5648c2122a8ad72eb3b440afed99f1c2bf6b54d5334107e4517e7fa70b74c23aa42030d2b3af8af93b126d60f494181ee65105fd566bb82a47a9976c529ed9d58de06f90a26bd9d157fd6e102908610fb7ff8062acd072f4aecd2fd01d6ce"]}, @typed={0x3d, 0x5f, 0x0, 0x0, @binary="ee9c9d20fbbb0c31e60239bcb93304da4de59d28604b7edd5bb31508004eba027087d9489a95dc0a74edc2c2370fba8610795e312c2f29734f"}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@rdmsr={0x32, 0x18, {0x648}}, @rdmsr={0x32, 0x18, {0x865}}, @code={0xa, 0x5d, {"0fc7080f01c5b9360a0000b800280000ba000000000f300f791a410f350f791f660f38f68dc300000048b85f000000000000000f23c00f21f83501000b000f23f8f236f2440f23a8650f01df"}}, @code={0xa, 0x72, {"c7442400be7722dec7442402fdff0000c7442406000000000f011424b8010000000f01d966b8b9008ee048b8ce5d0000000000000f23d00f21f8352000000d0f23f8b9720300000f32450f01c366420f5cfc0f2240c442f9211b66b81f010f00d0"}}, @uexit={0x0, 0x18, 0x38e26f8c}, @wrmsr={0x1e, 0x20, {0x879, 0x3}}, @rdmsr={0x32, 0x18, {0xa7a}}, @wr_crn={0x46, 0x20, {0x8, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0xfbe}}, @uexit={0x0, 0x18, 0x7}, @code={0xa, 0x51, {"660f3822f6420fc778ebc4a3095cb00040000000640fb0c866b8b9000f00d8f0806ea10366b8e4008ed08f8978d2760066263e66450fc77200b9390b00000f32"}}, @wr_crn={0x46, 0x20, {0x0, 0x7f}}, @wrmsr={0x1e, 0x20, {0x8aa, 0x9}}, @uexit={0x0, 0x1}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x0, 0x6}, @wr_crn={0x46, 0x20, {0x3, 0xffffffff}}, @code={0xa, 0x4b, {"f4c4c1e5ddd436f3450fc7b04a000000b805000000b97fb4d0c60f01d9f30fc737650f009901000000f2e325f3470fbdc3f4652e64660f38f529"}}], 0x2eb}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f0000000280), &(0x7f0000000300)=r10}, 0x20) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x100000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@subj_role={'subj_role', 0x3d, '@-7*\''}}]}}, 0x0, 0x0, &(0x7f0000000880)="26a1b87a8c2cd7b76e37669283e05ad03744c22fbceb88c48a2370c46d09762ad0456118008b356b0854218445fe7dcb48adf392b875a65f5f4b12c6fe96c7a1fd4a792e71f764962fec237d095c4bd752cebeffb11219be275b60e387bcb7dc0d988f87b8e169261aa65dad3da52fb048cb") ioctl$BTRFS_IOC_ADD_DEV(r12, 0x5000940a, &(0x7f0000001d80)={{r13}, "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"}) sendmsg$tipc(r11, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 7m14.952616598s ago: executing program 39 (id=4274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/113) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000940)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000980)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000002d80)={0x12bc, 0x11, 0x100, 0x70bd29, 0x25dfdbfd, {0x7}, [@generic="e28fcecb9ed0d190cdcc4bd51532aa326aa793998b40e3acb2bf8469847bef0ebf864222f9aa4847ba2e748f717bb967b5a1b71a9b3d99575bc83dbf", @nested={0x1165, 0x68, 0x0, 0x1, [@generic="cdda18c49db83c0b933c7e3d063e982fe30c736af58ea805d4238e1f393261c4ab42f25ac43ddcbe2faa160d1aa5639c0b7d8795f8548fe7df028cc19936cbb3b3d2e66a98462840cf2656535be5870a07d899327d84c8210b1c019d9c", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r1}, @generic="e22b83cc649f669751c45eeb4e13c58cc4a5b7590191f09f4e98ca545abe69186089f1ca9dfb133f3bd16fbef7a105d9abc2618eeaad13bd025dfaa59f25d417858c08079c81b2f2d032083360223cfdb8b3e48499e165ec81e46676cb16309980dce5afbe5557c524582270cf1b96258a3885562fc452a476586b63de15f6870148b9a8096896a9b081a877a847f4ff39f4ddfbd95d1092608a4674617225cea0184e39c554b9dc25baa34a2ecec84ebf635bb140ec11d170f43b10d4bc786d90969102f927b6200581e0dabc3a43d1383d3ae68679906850e4f73a", @typed={0x8, 0x10d, 0x0, 0x0, @pid=r2}, @typed={0x1004, 0x144, 0x0, 0x0, @binary="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"}]}, @nested={0xc2, 0x112, 0x0, 0x1, [@generic="b6a2232788ef89b808d84d40767e0174d7c27d09a934a5cc4d1ae6fcc50ca3ee4199e1aa0f121a8962852d25578d04f221c2842a5f40492cfa5e681b9355f903e147df22bf776b05115d0aec46b2bf97403048b372559328b25836ae84bff5b5648c2122a8ad72eb3b440afed99f1c2bf6b54d5334107e4517e7fa70b74c23aa42030d2b3af8af93b126d60f494181ee65105fd566bb82a47a9976c529ed9d58de06f90a26bd9d157fd6e102908610fb7ff8062acd072f4aecd2fd01d6ce"]}, @typed={0x3d, 0x5f, 0x0, 0x0, @binary="ee9c9d20fbbb0c31e60239bcb93304da4de59d28604b7edd5bb31508004eba027087d9489a95dc0a74edc2c2370fba8610795e312c2f29734f"}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@rdmsr={0x32, 0x18, {0x648}}, @rdmsr={0x32, 0x18, {0x865}}, @code={0xa, 0x5d, {"0fc7080f01c5b9360a0000b800280000ba000000000f300f791a410f350f791f660f38f68dc300000048b85f000000000000000f23c00f21f83501000b000f23f8f236f2440f23a8650f01df"}}, @code={0xa, 0x72, {"c7442400be7722dec7442402fdff0000c7442406000000000f011424b8010000000f01d966b8b9008ee048b8ce5d0000000000000f23d00f21f8352000000d0f23f8b9720300000f32450f01c366420f5cfc0f2240c442f9211b66b81f010f00d0"}}, @uexit={0x0, 0x18, 0x38e26f8c}, @wrmsr={0x1e, 0x20, {0x879, 0x3}}, @rdmsr={0x32, 0x18, {0xa7a}}, @wr_crn={0x46, 0x20, {0x8, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0xfbe}}, @uexit={0x0, 0x18, 0x7}, @code={0xa, 0x51, {"660f3822f6420fc778ebc4a3095cb00040000000640fb0c866b8b9000f00d8f0806ea10366b8e4008ed08f8978d2760066263e66450fc77200b9390b00000f32"}}, @wr_crn={0x46, 0x20, {0x0, 0x7f}}, @wrmsr={0x1e, 0x20, {0x8aa, 0x9}}, @uexit={0x0, 0x1}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x0, 0x6}, @wr_crn={0x46, 0x20, {0x3, 0xffffffff}}, @code={0xa, 0x4b, {"f4c4c1e5ddd436f3450fc7b04a000000b805000000b97fb4d0c60f01d9f30fc737650f009901000000f2e325f3470fbdc3f4652e64660f38f529"}}], 0x2eb}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f0000000280), &(0x7f0000000300)=r10}, 0x20) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x100000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@subj_role={'subj_role', 0x3d, '@-7*\''}}]}}, 0x0, 0x0, &(0x7f0000000880)="26a1b87a8c2cd7b76e37669283e05ad03744c22fbceb88c48a2370c46d09762ad0456118008b356b0854218445fe7dcb48adf392b875a65f5f4b12c6fe96c7a1fd4a792e71f764962fec237d095c4bd752cebeffb11219be275b60e387bcb7dc0d988f87b8e169261aa65dad3da52fb048cb") ioctl$BTRFS_IOC_ADD_DEV(r12, 0x5000940a, &(0x7f0000001d80)={{r13}, "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"}) sendmsg$tipc(r11, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 3m32.155638133s ago: executing program 0 (id=5635): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000008c0), 0x2, 0x42000) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000900)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448f0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES64=r3, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r7, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000540)="66baa000ecc744240011000000c7442402b16e0000b8010000000f01c143f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f80f79949b8135ffffb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0xaaaaaa7, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="021300"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 3m31.878048819s ago: executing program 0 (id=5637): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e21, 0xa7e9, @mcast2, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="3f209e5d2dd46b713019e7881e0c6d31537387cc0c97341ff6363121fd94a027a69127db08c9e9bbcdc15e953f5a309ecd07fe7b5cb1664beda1252bf3eafb9596a8145f6a3d3836ebf312dfc2782ed1361884ac28e1d65ed6fa", 0x5a}, {&(0x7f0000000040)="754c841794175e608ffc6ebf495245c7788029a28e0b48a7962f0045011bf8d04aa20999378ebd179950dd6ad7785ed6a1a1", 0x32}, {&(0x7f0000000380)="75e0d819b92df255f7fea24af636b0e283e8a8c9d3fdd3b5549b8bf0c631dc783450652dcffe5769419f22b5bba1aee3446b9f7a28cb9c5db29dc5a4c060bf9b490e02f8b2979be9d9889437b5f42d211ff407cb4809dda6bdb4754af63a27a2374c5394b0c25c353e14ad5ebba4b905441141f628713b5bbac69f83f2d35a294ed51f327ad94712bbf6ea08b0a17fc8460f61e6cda9172d82d3201f59833606364dfb50966164352951eded", 0xac}], 0x3, &(0x7f0000000440)=[@rthdr={{0x48, 0x29, 0x39, {0x87, 0x6, 0x1, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0xffff}]}}}], 0x68}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000003010103000000000000000000000007140019800800020008040001000e000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x54) prctl$PR_SET_PDEATHSIG(0x1, 0x23) prctl$PR_SET_PDEATHSIG(0x1, 0x19) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28000441}}], 0x2, 0x40008004) 3m31.852030389s ago: executing program 0 (id=5639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0'}, 0xb) ftruncate(r1, 0x5) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000300)=0xa, 0x4) 3m31.79473792s ago: executing program 0 (id=5640): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000805) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='cachefiles_rename\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) chmod(&(0x7f0000000080)='./file0\x00', 0x104) fchdir(r2) (async) inotify_init() (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0}, 0x94) (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/netstat\x00') 3m31.487928036s ago: executing program 0 (id=5643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000005d0c8cf204000000feffffff021810000002fd010008000008000100ac14140004000880"], 0x28}}, 0x0) (async, rerun: 32) fchdir(r1) (rerun: 32) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000002180)=""/4105, 0x1009) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000640)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407fc, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, 0x0, 0x0) (async) connect$pppl2tp(r6, 0x0, 0x0) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e4", 0x1d}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d650241163d5fc6b6e90b1d440a017dc84cfec4161d7c33c21eae64d70", 0x6f}, {&(0x7f0000001a40)}], 0x3}}], 0x1, 0x4000040) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) 3m31.454939697s ago: executing program 0 (id=5645): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pwritev(r0, &(0x7f00000000c0)=[{}, {&(0x7f0000000040)="8564c200883dd78ea5cc7896455dde8c4e1096ae69e2c20adc90c851fb99a7e6b420fdbcb127af9992cc59721a1be8429ad161964c51f0b3b751ac92da5ac0bc6d72c75570d373551aa28e2e5e7d3f93", 0x50}], 0x2, 0x8, 0x9) ioctl$TCFLSH(r0, 0x5433, 0x4) 3m16.251227074s ago: executing program 40 (id=5645): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pwritev(r0, &(0x7f00000000c0)=[{}, {&(0x7f0000000040)="8564c200883dd78ea5cc7896455dde8c4e1096ae69e2c20adc90c851fb99a7e6b420fdbcb127af9992cc59721a1be8429ad161964c51f0b3b751ac92da5ac0bc6d72c75570d373551aa28e2e5e7d3f93", 0x50}], 0x2, 0x8, 0x9) ioctl$TCFLSH(r0, 0x5433, 0x4) 2m37.721219914s ago: executing program 4 (id=6102): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='iocost_iocg_forgive_debt\x00', r5}, 0xffffff46) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffe2d) (async) poll(0x0, 0x0, 0x80) (async) r6 = socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) (async) r7 = syz_open_dev$mouse(&(0x7f0000000200), 0x6, 0x14000) openat(r7, &(0x7f0000000240)='./file0\x00', 0x40000, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 2m37.464985999s ago: executing program 4 (id=6106): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x2000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) nanosleep(&(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095003300000000009500a505000000006901ee3d8cf6fbc48bc095b6462f7756"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 2m37.218478394s ago: executing program 4 (id=6112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x7) (async) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r4], &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) (async) prlimit64(0x0, 0xe, 0x0, 0x0) io_getevents(0x0, 0x6, 0x2, &(0x7f0000000300)=[{}, {}], 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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") (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) 2m37.166044685s ago: executing program 4 (id=6113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000200)='./bus\x00', 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='btrfs_transaction_commit\x00', r0, 0x0, 0x40}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r3}, 0x18) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) unshare(0x22020600) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) close_range(r4, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./bus\x00', &(0x7f0000000500)='./bus\x00', &(0x7f00000000c0), 0x4001, 0x0) (async) mount$incfs(&(0x7f0000000240)='./bus\x00', &(0x7f0000000500)='./bus\x00', &(0x7f00000000c0), 0x4001, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x66) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x66) 2m34.694721864s ago: executing program 4 (id=6127): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x84, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 2m34.671365194s ago: executing program 4 (id=6128): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000040f4b1ff4b9ebaa37b7b61bd7276aa98a783e3a18690b8ef218326e3b8d0afc3290ab8f1744addfe8bd9cb8a61b30fd9323bd6f18994519143071ed5d0b82429491334d2eec3593039e88507f279b5f18956a63c2bd5bb19c6739c77252318ce280de958806433788905f751ea669c807cb56087c9c6d2d2d23ba231ba63709a0ac122ebcac24b9e85a560e984d1e045f41b5618409201002b4ad36ebb27700754d674e1fca1083f32ecee1bb673f337d5f41824ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r9}, 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x43451) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="090300ff0300000000400d00000004000180"], 0x18}}, 0x0) 2m34.626392415s ago: executing program 41 (id=6128): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000040f4b1ff4b9ebaa37b7b61bd7276aa98a783e3a18690b8ef218326e3b8d0afc3290ab8f1744addfe8bd9cb8a61b30fd9323bd6f18994519143071ed5d0b82429491334d2eec3593039e88507f279b5f18956a63c2bd5bb19c6739c77252318ce280de958806433788905f751ea669c807cb56087c9c6d2d2d23ba231ba63709a0ac122ebcac24b9e85a560e984d1e045f41b5618409201002b4ad36ebb27700754d674e1fca1083f32ecee1bb673f337d5f41824ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r9}, 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x43451) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="090300ff0300000000400d00000004000180"], 0x18}}, 0x0) 1m57.754538694s ago: executing program 8 (id=6494): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext3\x00', &(0x7f0000000100)='./file1\x00', 0x3a8446b, &(0x7f0000000500)={[{@user_xattr}, {@debug}], [{@dont_appraise}]}, 0xfd, 0x564, &(0x7f0000000b00)="$eJzs3d9rW+UbAPDnpE33+7sOxvgqIoVdOJlL19YfE7yYl6LDgd7P0mZlNFlGk461Dtwu3I03MgQRB8Nr9d7L4T/gXzHQwZBRFPEmctKTmK3JmnXZmprPB872vjkne8+T9zzv3jcnIQEMrYn0j1zECxHxZRJxsG3faGQ7J9aPW3twdS7dkqjXP/o9iSR7rHl8kv29L6v8PyJ+/jzieG5ju9WV1cXZUqm4lNUna+VLk9WV1RMXyrMLxYXixemZmVNvzEy//dabfYv11bN/fvPhnfdOfXF07esf7x26mcTp2J/ta4/jKVxrr0zERPaa5OP0IwdO9aGxQZJs9wmwJSNZnucjHQMOxkiW9cB/32cRUQeGVCL/YUg15wHNtX2f1sE7xv131xdAG+MfXX9vJHY31kZ715KHVkbpene8D+2nbfz0262b6Rb9ex8CYFPXrkfEydHRjeNfko1/W3eyh2MebcP4B8/PnXT+81qn+U+uNf+JDvOffR1ydys2z//cvT4001U6/3un4/y3ddNqfCSrHWjM+fLJ+QulYjq2/S8ijkV+V1p/3P2cU2t36932tc//0i1tvzkXzM7j3uiuh58zP1ubfZqY292/HvFix/lv0ur/pEP/p6/H2R7bOFK89XK3fZvH/2zVv4t4pWP/51vHJI+/PznZuB4mm1fFRn/cOPJLt/a3O/60//eux/9XtiRs9X9mPGm/X1t98jZu7/672G3fVq//seTjRnkse+zKbK22NBUxlnyw8fHpf5/brDePT+M/dvTx41+n639PRHzSY/w3Dv/w0tbjf7bS+Oc7Xv/d+v/JC3ff//Tbzq3f7rH/X4+k7QZzL+Nfryf4VC8eAAAAAAAADJhcROyPJFdolXO5QmH98x2HY2+uVKnWjp+vLF+cj8Z3Zccjn2ve6T7Y9nmIqezzsM369CP1mYg4FBFfjexp1AtzldL8dgcPAAAAAAAAAAAAAAAAAAAAA2Jfl+//p34d2e6zA545P/kNw2vT/O/HLz0BA8n//zC85D8ML/kPw0v+w/CS/zC85D8ML/kPw0v+AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dPXMm3eprD67OpfX5yyvLi5XLJ+aL1cVCeXmuMFdZulRYqFQWSsXCXKW82b9XqlQuTU3H8pXJWrFam6yurJ4rV5Yv1s5dKH9/IKKYfy5RAQAAAAAAAAAAAAAAAAAAwM5SXVldnC2ViksKjcKuGIjT2EGF0cE4DYU+FzoMFmPbMEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQET8EwAA//+ndDnV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000000000000000000000000000008129da3300000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newqdisc={0x44c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x420, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x1, 0x5, 0x5, 0x1, 0x7, 0x7, 0x9, 0x6, 0x101, 0x1, 0xf, 0x7, 0x8, 0x6, 0xa, 0x0, 0x5, 0x4, 0x9, 0x5, 0x4, 0x3, 0x9, 0x5, 0x7, 0x101, 0x7, 0x9, 0x7f, 0x100, 0x5, 0x7, 0xf, 0x81, 0x0, 0x8, 0xff3, 0x9, 0x40, 0x7, 0x2, 0x7, 0x3ff, 0x200, 0x16d5, 0x8, 0xffffffc4, 0x0, 0x40, 0x80000001, 0x7ff, 0x6, 0x2, 0x38000, 0x4, 0x7f, 0x2, 0x6a, 0x10001, 0x1, 0xff, 0x0, 0xb, 0xd, 0xfece, 0x7, 0x5, 0x6, 0x3, 0x410, 0xb03, 0x0, 0x9, 0xf, 0x9, 0x2, 0xfffffffc, 0x0, 0x6f8, 0x0, 0x9, 0xe90e, 0x4, 0x8, 0x5, 0x3, 0x3, 0x3, 0xffffffff, 0xd567, 0x8, 0xfffffffa, 0x9, 0x2, 0x1, 0x7fffffff, 0x6, 0x8, 0x7fff, 0x1, 0x5, 0x8, 0x2, 0xe, 0x1, 0x1, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x4, 0x7, 0x0, 0xdf, 0xb, 0xdebc, 0xb, 0x246d, 0xffffd27c, 0x5, 0x3, 0x80, 0x7, 0x7, 0x9, 0xe144, 0xd2, 0xfffffffd, 0x9, 0x7fffffff, 0x3, 0xb0000000, 0xfffffffa, 0x4, 0x7, 0x7, 0x2, 0x8000, 0xffffd13e, 0x7, 0x9, 0xfae, 0x3, 0x4, 0x96, 0x6, 0x1, 0x4, 0x8, 0xa6e, 0x1, 0x5, 0x6c0, 0x2, 0x3, 0x2, 0x0, 0x3, 0x1, 0x0, 0xfffffff8, 0x3, 0x83, 0x2, 0x4, 0x3, 0x7f, 0xd, 0x0, 0x7, 0x28000, 0x996, 0x3, 0x5, 0x765, 0x3, 0x5, 0x0, 0x1, 0x3ff, 0x7fffffff, 0x9930, 0x9, 0xe, 0x4, 0x7ff, 0x4000000, 0x257, 0x3, 0xf, 0x62f, 0x417d8eae, 0x1ff, 0x1, 0x4, 0x7c2, 0x1, 0xe, 0x8, 0xff, 0x0, 0x51, 0x7fffffff, 0x2, 0x3, 0x2, 0x5, 0x95, 0x4, 0x100, 0x0, 0xe80, 0x100, 0x8, 0x4a3a, 0x5, 0x4, 0x6db46a61, 0x17d, 0x0, 0x7, 0xfffffffa, 0x81, 0x2000000, 0x0, 0x63, 0x3, 0x4, 0x7, 0x1ff, 0x7a5, 0x8000, 0xfffffffe, 0x5, 0xcd, 0x8, 0x1b9, 0x100, 0x53be, 0x6, 0x5, 0x9, 0x401, 0x1, 0xffffae7e, 0x5, 0x1, 0x8, 0x1, 0x3, 0x46, 0xc19, 0xffffffff, 0xb34]}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f00000000c0), 0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r10, 0x407, 0x5) write$FUSE_INIT(r10, &(0x7f0000000340)={0x50, 0x3d6bf7b3fa2b4728, 0x0, {0x7, 0x29, 0x5, 0x8021008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async) write$FUSE_INIT(r10, &(0x7f0000000340)={0x50, 0x3d6bf7b3fa2b4728, 0x0, {0x7, 0x29, 0x5, 0x8021008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) 1m57.389267411s ago: executing program 8 (id=6498): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@noblock_validity}, {@bh}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@debug}, {@inlinecrypt}, {@orlov}, {@jqfmt_vfsv1}, {@errors_remount}]}, 0x0, 0x5fc, &(0x7f0000000c00)="$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") r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4000000) 1m55.290809411s ago: executing program 8 (id=6505): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/195, 0xc3}, {&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000240)=""/122, 0x7a}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f00000003c0)}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/121, 0x79}], 0x9, &(0x7f0000000400)=""/58, 0x3a}, 0x400}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000900)=""/228, 0xe4}], 0x2, &(0x7f0000000a40)=""/174, 0xae}, 0x8}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/173, 0xad}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000000d80)=""/25, 0x19}, {&(0x7f0000000dc0)=""/66, 0x42}, {&(0x7f0000000e40)=""/240, 0xf0}], 0x6, &(0x7f0000000fc0)=""/74, 0x4a}}, {{&(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/167, 0xa7}, {&(0x7f0000001180)}], 0x2, &(0x7f0000001200)=""/16, 0x10}, 0xb2fb}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001240)=""/117, 0x75}, {&(0x7f00000012c0)=""/218, 0xda}, {&(0x7f00000013c0)=""/210, 0xd2}, {&(0x7f00000014c0)=""/76, 0x4c}], 0x4, &(0x7f0000001580)=""/25, 0x19}, 0x9}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001640)=""/141, 0x8d}, {&(0x7f0000001700)=""/50, 0x32}, {&(0x7f0000001740)=""/165, 0xa5}, {&(0x7f0000001800)=""/148, 0x94}], 0x4, &(0x7f0000001900)=""/114, 0x72}, 0x3}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/254, 0xfe}, {&(0x7f0000001a80)=""/87, 0x57}, {&(0x7f0000001b00)=""/93, 0x5d}], 0x3, &(0x7f0000001bc0)=""/195, 0xc3}, 0x8}], 0x7, 0x40002020, 0x0) 1m55.280463552s ago: executing program 8 (id=6506): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x4e, 0x0}}], 0x1, 0x40000) socket(0x2, 0x80805, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r9, 0x25, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) 1m54.198314303s ago: executing program 8 (id=6515): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffff, @multicast1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x115040) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004884) 1m54.034676576s ago: executing program 8 (id=6516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000300)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) (async) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000400)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x9b}) ppoll(&(0x7f0000000080)=[{r5, 0x4048}, {r6, 0x8100}, {r3}, {r0}, {r6, 0x140}, {r6, 0x14}, {r4, 0x8367}, {r2, 0x4001}], 0x8, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x9]}, 0x8) 1m53.986615097s ago: executing program 42 (id=6516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000300)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) (async) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000400)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}]}, 0x1, 0x504, &(0x7f0000001000)="$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") (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x9b}) ppoll(&(0x7f0000000080)=[{r5, 0x4048}, {r6, 0x8100}, {r3}, {r0}, {r6, 0x140}, {r6, 0x14}, {r4, 0x8367}, {r2, 0x4001}], 0x8, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x9]}, 0x8) 1.702411457s ago: executing program 9 (id=7206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)='\v', 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 1.618348799s ago: executing program 9 (id=7211): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) 1.618252519s ago: executing program 9 (id=7212): socket(0x22, 0x2, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.602015609s ago: executing program 9 (id=7214): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x60, 0x4) sendmsg$802154_raw(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)="711f664e19874aa8041a5ab0ec", 0xd}, 0x1, 0x0, 0x0, 0x20004040}, 0x4044014) recvmmsg(r0, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2, 0x0) 1.134564178s ago: executing program 5 (id=7219): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.125365548s ago: executing program 5 (id=7221): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 1.06270306s ago: executing program 5 (id=7223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1.06139583s ago: executing program 5 (id=7225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x22c, 0x0, 0x100000001}]}) 1.04536417s ago: executing program 5 (id=7226): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[], 0x0) 756.359225ms ago: executing program 9 (id=7227): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 698.835946ms ago: executing program 9 (id=7228): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, 0x0) 698.716586ms ago: executing program 1 (id=7229): ioprio_set$pid(0x1, 0x0, 0x2000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 698.540547ms ago: executing program 1 (id=7230): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000004c0)=""/79, &(0x7f0000000480)=""/35}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="3c9c20523ded4c0f106ae6b96d6b7c81dd12652802946ac25759763c968d6b9e50a9ffdca850ab65da37d03cd977de1c00849b4b64b7f7d8087576752468d6d010dc4dbf741ef8a0ac3f7f5e5a9ca0d96399660a17960c45137169f24f0bbf258dc68d62291617bf96648992ea261cf1b85662010d9fefdcd72730abce7bd15e6bbbdf23709fc161f43e02c77839c6208e381a4cdead31a44bebe16f240c5658b177618b38905afa550955915a3effef2f37ca73fd99586ab777695fd6f4c223424d7927d0cf9fed3985d7e188fbe0d97f6903dbc6cfd5c7cb90baf93c4cf5a0096139b6e461ebdf826e1c6e59f1cf82256df35eef636d26afd07f2787cacd2575c7551d67039fd61470b15523ac8f032cb142f71939bc376bc75864ebce299982b4e521521f3f25d44651157e00a6d1098df73a002bb65403a1dc9f2d4082d9cdb81380a9776e6bc1009c6b2e95f5f0a726e0a0e821cf577ee471373261bc251a77fdb7900e6b063d5f8f2ae455f013ac763150215c641b3ed93b3cae765b9074e2779a0ec7431b042ec0c7245e83f5bc7b203f01e989c8659117e19bcb272190bd22758963988e62c315a27e7a894749c552d59c307e4f1de677c59912227ef4ff00168b1bedf09cb5e8498e8926e286eb3ac3f27e2b3a551a0554c1963b976e0875913d0b139b1fef3b856452f493a26858ce54aea75418798cf70287f9c0572341edbe66ab66e862bff4184906daa99eb484ba9a8fe9c6f2b94b5a2519bb0d2816bc597a692ae91e089c3f922c6992fdf0a45ffa2d4555493b4e2ad45b92bd98bc1ea9cd7b46e0d6aa2611734a314602587c7348cd6cb2b6207da9bbc6318dc7791d8d3530dfc1649edea2aee299387f9f004cfbd1c260b49c26b850f341bcab52d9a0cdc13e530f1614b48d935c140f2ddb5206a04c917aa4e530fa2f93d2093b955dfa893508e5f0717e3ba58bbbf7c83a0b96a9ab00ccb564ae3da0160ed6277bebb4f014b4a77862ebb503dbd456010eb67bf8c518cc60b6c460e7929d650faa63b3e0207857e17d8e88b7cacf8854543f6eaf5f86015f6091baaaa50a03f3915eaea9fc5e6e0be736017628f721963f8716d162dd52c2535a87c96f9dd341463aff98241003dc8b2e4135bba31745e9353235caccb3d4064adaafb371b79540f95681ffb1f6ac8116f42a175ffd31f1df99c0f89b20c07f121fe1dc630b432a39bef3e3cfbf92574a6c9ca71ac889adcc47644e1ea0f11f8c21a509b1ca1b275e21fdceb3e553045721c4e030ae4454376660142890d753c072624c2ee5d27a25ebd6b9b2a923b62c510719791c22d33a61c002b8af5948779ce70b90f69aba9f504c8d3f2649d74fd02feeefe327d9474677be4bf110d6fa97fdf4d89484154755a30dbea41194ec7c46b28f397c49b5aa4888f1fedeb7d7fd12229ba4dedb1a02f46a5cd990c1dcfec6e3d533a4f9587f6a28f838225b74076e18c69b501f0ebdf33562e6b9047f94dde375f295d782d16da09aa141e79fc96124f7297b97ddc8d59e239a0783ad9ef3294068b91c3ab9ada4419fb4132c7ddd8dd653167af8b9435fad20db5a0ffce5d496ae656843f4cb1bf98c190dc17555bbafb7081cd935d9623ec2ffec4dd176ef4400f4ef83f0df958bd18e21809e019b8a57bfb89f68ac636da4041f202d24186dab8f8d4157789e32d03759e70c136bb758bfd1b5d49a3fa1b9fb551939fc9ba7b7afeaaee00cf7e019c716998e233e040498b46ca35a87ec2743167646287898bdc47f44da28ad4853020b1d22852ca201b7b8ef41653f502b09756183fdded700521b7b3110ca92d8c545b2f1b26d5c371f5afd3353c12a06ef9e533a1f3b787c5fb107a05b58440d4a6de49f0c34c4f2801d8e4ca1f6f5eee0af97ff50628457ba364283d2d992b4f9b62daafc6135279ebb9263b0cf3b8026cbe58f5b2f4f6c3cf1e841e16525327335e2d86c83a8d7f59f67db18db1fd518474ef630f9d2f4a03d4f0f00a61513c849c6fc85e7a7da40ed4604f0908c3852a515aab56198bc489f51606148832d24163e020a8723b0d6c84b343a485ec52882c584b32e3441058c181a22b8e093d88776bf43ae66c3de0d0babafc0dd341e1f385d6e54ec4959cf1accb88318c37a0488d893575e6a38ea6b1b94da576b0a2f5d253bff49c5d4f21aaf441deeaa748011488e8ed571baf16cc8bf50f1dcaf1415e1dfa251831166a075f19fb33adde935512ef8cffc91a607abad19fd56a137ea2b519c6d413b36c7d6d592f4d4a6b8ada921ec066233d53836ed2fb22275d6b4f38dd295da21f73afd8ba9075edb9ad253a721caa08c4aaedb77434cdf37f3c9bfbce1753dae7771d57cb37d60bdb711b01a27224e8c7e0624ae23401d9676e8b926c55061f67aa7f4a9312f414c7f23f2388cb4af37405994bf0e685f88341224d6a036891919bc175033d477d2e9f71b3f62e53d5ddfc1f27c607adf802659ecae88ae5ab362fdeb413a926c559ebd39f9f8abac01f938c62f25281ce29b32acf10003edf87941e3bac7ab8fc5f23b7091f25708968ac6b4eee6d7eaff8dba0ee43645845c68d179bf9f6ab9f348a3391fe4a7e9387d0afbfdddc6f65053305ec9c6b6947cd6812f58f66dff62be596f57f49e25fa2a772d1626befe49083cab88f9ec597eae0748018007776728c76761e90ab4341e2b8ebeb6aff6fc2fd4f28f1f9d295193eb0a34bc50974c1c93d6f480d3f65b3dc412cc72a25e1054b661139f7fdd84ce01d8fd40d73ad4c420e51b5bedee1c89dd58c3e5b1560c310e7e2287f8f0a01f823bfae541db946b0d7ea87e772b2881f5d5f36f09ecbf21df27151257857badefc198927343294623ded45662ef48f966ee7bce73e5116b49739a92b5f34c5359990fb3524c33219d3c3414b1d9b643ae7b2c188cd3118a76ee9ec5335c95afa5e96ccf7ab072754dfebd4afa0892681480399cd388d82ba6118d0c2d00b9534ac27e15a141fbd92cc4b52730ee7fe7f1150ab062772fbfe4956ea0ba731814dabc4a05d0327f5b51ca395e6ba74aeb76c698f35db68c7d09a70ab26d1b1bd5941d2d72f08ce0328002ea5e1c2fd0583e99233112f1ce3647e47362c20f2c231499a5c1474917bdfed84d1a02b2b2bd05ef07b0624d1089b7aeb7b0350ee656876901ca438df1df85b6a0ec27843b4ffaf97e47c478cf5e2bc95f1dbc26a39a56718970d0c7a4d1d1fa4f3760e30381d19de5d9b00aba120049a424b7586aefed101fab0fc064355e81ff4f41ec33a5e818a87712db81454574dc6b9dcaf2725bfeaf00905fbc09a6b6518303913b56a12149e7affad6cb62fc866ba5ad868f5356bbcc08292796659f0a38b92ffaf21a79e7a63283dc2d851ec5b8152868c0cbacdcb53f276a6a307587c5a951fedfc9c9a221efd0c03a6a35017ee3c70f1c64366603ad50ff2fb6298cb29ca59825d191fbf46941e0109049c9a0f399055187968f903174b028a59ed91188bc3aa3502bbf64bf9151536987d13a738060ba0607700e27ca75d8f11897c1656a2d11e54620b0c140bcc5d114d53e16791726592fb5cfde119462341f4a3313186467ac23e42bcfe01c5b33e499ce14e5b20559cfddbc1385cedaf71ba49113d3e24847b0f5d1011bf173b48009f840e10cb6e0e3fdea52a7468ec4edf35396c64ce7484e6eb9ed4f809b31bbc8a8097e3e2b1839b4bd2bd840f9aa3652e85aeda6ed7dcf242fb11a94710a0031bf2b0683538c292d3af365a57a69ba327692cb6c163cf7c4698851b2e158cf3abb223e00a3c835981cd261460e382780fca37530249c9ed33a8b857ba6414336bab255f8e2e750a79c36641a0dd54671f98f7280f7679147f108603394bd143f9385a0d114609b308f973feca21ea2e53de1bd6bd7809efacdc5b4487f7ffbca05dd803fc12e13b8103da1723cc8bc73f26de7d256bf7d60c7c1ac47dc47a7810c43403b780052e42b74e69e1a3380fe9b80c7a2b7f4617f4009230e8688afccd99ff92a69b1487b385ef2fb7729546c317d7b3106af5f2ac26222057158240bb07a3a61a359d1bf3e809220529580f3298b0dff10c8fe1265c8e5ea41424e5a0941c5dc94fd9d7a33ef1550f3f30a4f73ac5fab6b6c34a03f1575abebee4625d041843ec815ecf854c8455a5897a9533e4d5e95a1c5121d4716a82da80abe9325a92904837a586adb63b31ce0464b7cf0e9ac48125ccef7da201292a02b9aff8622f8334ca34447861873cb640a44dae8e5837f9add02bd1f5f577957d82021c805f1d9d00de7a1a71dc5e3fea80bad67aa76a51053290821521eb20385925d668c733859ed4e0d923c72d4ed7a20b90ac87de48ba4bfb6a3bcc63907a205bb721ce181a9bf6470a70b7ffbff9f20703243cd0a10afd1f93c781ab8cc8cff9283aa94a28a35642e09d3f7843a91a2581fc8dea10dc63efd8e1e9ded53372f4e080e3d1258e0a5ba26ea97c0e25de7df6ddd230d2345f36e7c4fe1890473fc029055b8158c4f691ef3e65c0370d8e299bc978e6c861683a5e6a448e18b145f515cbc8b89addb7ad04820d8df5da6ee12501782529e871cf6f82427e0780ba8f66c00d43b8a09ea3fc58cfc5a5e1191528f0e6f4368add0d8ca542433458f81a666b27f581cc43d3515766ee0212d2d996b2442dfc660bca3598c61fac63e866c2b8749f78cecd90c6aa0eb344016f36f079202b9b43eaa9a924427d44f4de3a96957aa87429c2f88b80247b931355b53fe7bfb69264eb2838e392368e236ddeb578188fff1006a7ceb6207962cf0b61bd3cbe213ae9b5f0357a160aa697275bdb821d436cbcfcfb1f406ba5fe6c449f81d49912ac17f66088dbf6cc02ccc6e4a58b258e02e7f0b86bfc5eb792c8115ecce5c95e49213f6f831c658d6c12678c59b760b0888dd6abb9c51aceedf982e0a99e4263966e7b3efe4141fcdd2763146eb183130ebb708a2d86c09dcc91f60ebb07b427f2f53169057235c3cbc75153323ebcd86834d5abb87eb5bedbd3537af4e7070127ec5ee42b98fced9bc84e14a7ab170becfaf0d05aeb55b58d4e650190d5722497daee40c580ee433bb5889bed411d7dca299c12a347046e4f4afa55d014178cc4f488d0958c6e9e9614ffa3f51a687a9d1d0c45794e1632b8934558feedc13e5667e73a3d6d8b1152968628b084eec9b1d7719438ffb61164e2638afc45a2790a8e7b0505ab46b2a07f14345f8bc6a025c054c71183d9165fda5e72717e5b1ea63d814ae11f5291a82ff799a265ffeed035af29706f7045565e0c36519d2a65a10971a7c147cf76614c92feeedf6cb06a7440bc01229088e492158bb4b5f1533c040701e2e27d627cfb07b645c895ddc3bc6e182176ea7012261bef6be384a1fe33fd9e46962652b36dd8dd9872dcd1700901605c40b2e56f5b37d06715b297c670d1c0ed9f240644314acdd1567b533dbcf3ef37c9c7692039323dde20756d7d8c87fe87304e6657475550b0f809994918d7da380c7a70a178fe9666494854d0a8e741de4f5dc296a10a1801738d49fd23f8ade43c20cf12c1cd8691d0a08a0dac811ab87b6cfb16431d0a2076ee16a2cd8706952a26d9d60634441c1f42690500e88dbaa3ca5739cdb903ea9a0e4a3ebcd55ff10188c550a381a4c650972ad89635d493966a16ec8da9d7b87ed087129df490f83cedcdd2b5dc24c377e208d850e4c987f7fea345bb86cb16da33f43b3ccc62fe31aa102a9e49d49c0f16eeff031bf12496f4469289a26596dca40d3fd4dfa7535155145c365e826bdad6734ffb47ffb1ae4d900cd27fadcca1ed9d4b434c6f47ae2ce0a83a3005d5858e6e587f1609517d8d9330718c647c9b08dd925338406d4cef2a39bab25a37c8092185a7fcf36324fa0648ff8da6317d55355fd18932ad3404eb010bb29aed83982514eb74be3ec28f5c84ab6dbac7bf4e7aa399cf2461bce9bc4600a8ed1e37f3a31b2bae2c92f3c8ccfec5aa296e8499ef76014661dbd0d672fa8f16b7e1bbc864b215e702cd7c12eb5be6dc3239b52a59025a2a7ed459b7def94018a62d5ae7eb059d930a4c3eef8e3ce6ea3bb09a2817c92d28065d610e4e8d943df84961e8ea31cc77bd8250d352302227ec3a9bfdf7249e2c9c6094dc5a949ec003f2c1325506b17ca0ef12d7c650ef253d51d89b40f790b7492252273222225e245c833d64c55a48d971c510a9dbaff075ce7b53422ab68747703bed9fb94c60f857f14d07119fe17ee693af929802885acd14a9893a87085944260a596180cff4bbe4151ba1b19266c1d13a491c5bc983f158d6d5d218cabc78063baf95b6e93beb3d1cbbf72b984664b01330f39b5169d517d13cbbe2f5d6290d746a45fd5c0072a6e96a885d5324b139937d23f4a7282b7ef5c598aac3cb4eee4b25ad296d7e12ea3f27f58374d2ea4154ce22065a391d0b718aa89c9438346318c584613b065af2f32d18b1bae2aa17b8480c3698188257bc2797172c78bf0b163405c1d6fe4cd1c6c68d5a72c032dabbb8e84e767882d34854e30b4264dddcd0ba7c3d03f8b543d16391dc6a4f4110f57ceda8ed64fe9087789191cd471b1bd53b3825749c84e55a425546b7bbde748270296bb207d50bfe7cdbe13734d04ba7fbd8e684f435a397f9747286b9f791b6172bd12761dee4a56852a830ea14eeb1d2834c51af097fc72f44f8122c2a05996c21222b55d6f41abf0f3f7bf58343da4cebb5f59921ee4956e4b8e6690b2313cd59d3939d8dc7ec394c01800058b614a478d69f84abc3941ab10d69029dce4acfd11ae4252d5154d2c1b4b7d68fd3fd9adedaf3686110be8cb656b9373bfd30178b3e9a998ae4d2793e6f1386b3809ab2d712ee89d45abc6e3d8e19e9e4c1f6621ad20410b3772ac920a7c94729eab9b508f0e493d36abe5df286158ea3cd5b1da16668b482dd5baa90c9d2b7a05f6f73012ba136d6e78ab935094f4f97ee7e156d6001bf2872dc7ee081e31850badf171ee96fa4c91751053e58822657a811f8db0e23e6ccd0e48f8a3bcbb90c2ec3e83989f583e51c496ac29b81b2af25988d8283c2201a6cc1f1e5cc4f926817a542b8821a8347140b2c4ef0ae629922e6625f7400b2bddb6783eded022a9f157c754e29c85f71a2d38dfade7851d182ff2100425a80ed829966238bc9e108d97dd086ba46cf623a0d5c0e5a0b1c86a304f1363034d880425d7a6fbc3ce234a0678604e74f0d40744f6ac68183d4b0570dbeb77e3b19f8ca204519015968d83ff7a39b8840170ae29f205c957ab3887eb8dbcb5339f1af44f566fa96be59f1bc82ef7edc6cb3b7860a746c4bac8ccf68a76bb9a934238e830f11d05171fe5aae1273d7446e5e80ff3959c9535215f30c63c7559561f288116c441080cd6ff338628e35eef6d92aae44866be47b0cda019bb18126fef4247c94db0c8fd29cde7460d0b2f710471564af2738ad782e16ea97cebe6a89ef8f3590d71d86257eae312ebf48e478366645c4ebf664a709bc553ca846758ba734170b26363bb88d408365827d61e16400b4b1de6e45a7e3e692459ef2b2002dc37cf91c8b8a5f8e6060fff0a72bd966b6c999322356154805586db159a874ccc52cbd9b6c5681ec8ad50b768546f2e6dd9ce4d1528203f73712ffd8be7fad6d786fc560e5047c0a87860987a6bebb9b025dd1bbbda3cdea5731c41e2e1975f7a889ff38d38fd2601d5a1b7e8ea833188e3af14caffa4b66c041103d55eb5511c5bbb85a0192aa7bf0acb17cb84a29456d466f6eda261f612d5e4603e4aea389b68648d5503e9c1b5c3984acdd325dc5dbaf35d9e44bdf7a8b4c89ce30b4b648b9e1d38fa91bc5c8d8f601a6b82e1f42f6e04acf3f9fac8d26b03a09bd7cdb35175ad55f17b22db328803d66324c0970c38d81cdc1b7ee67a2d910e8064f81fbc0d2a6a7aaade8000b8be4fe111d354731cea9380d39ece8b146d34f74b7ee87322e4d772f3570a46d81cdbbeb21f7f66fa8baa869e4b8637f8a061bb8efd7e06966f3186d1c730cc0a4f38683054f1fa775bbd3cae02102ad9c773fb7eb874bed5fd84167fa86029abeb7d9056d26b66bf7f4c5ba675482c71b08d2ecb9b23bd2be801a4df9531396c7f4bbb59602500464dc04ff7c5622eaa9887ccff24bd88a52ad69f58880012db03dc4d051626b1fb0faa510fccb6b73f3953e461165dc58eac1063b664a2a18adc06102af134737f34bace2fb21b8d54cbd674c1a10a75463345b4ffd0f9fb5894e6ff8b455f5d35bd1313392cef7c4c441ce8d21302dfd58688e5d9454bcdc03a9c3ef269697506ff9ef4522cc0efa935aa368aafcc48cc2a5b6be32a89b29d0062c33ecfe44dd070a43ebc63f3cf99a3a142176c93c1d7acef0d42261f8f6d50c837d9a43e8951b35516e050069af0633e6388323029c9092475e1a7e81639d9d2e5b81424e1576920b977d329b5b087011718a39ebd31983512c4c43df67c2919e29ef909fc8c79fe2ac41e08a269690a32b63037abfc9d5b1196b86edb8e4312f3b8b8d4e265c0e6b0db372d742f1ce5bde46490af51ee9ce24e36ce8b59f7213e68929e4174a2760f076cd1a7b38db164c67c0e902f05d4d3f8d77225586b975a1655f7dedc3c20e815f6e2cedfb8d331e9c4e0c8c2c21217fdfae1b2149612ef0eaf71bcd23224cda2d0ee00955d1ea88a56f508923ffa2fb1aeba4f4fc4a02c187fdf3b4d791d5566acfdf4b63e9c3990f12059fa2562206098967cd36f06c502ae79cb99f4880a8c28a14d207bd12c30f9604bb3bb2e00f46151bf5940445036dda64c135d8af713b033fd836ed11d64a18846c62fdb1310821901d18b45b337970a9949dc1ed45d4afb3596dde4a7df1c009f6cbdffd0f1f4eb12f1a1d23b87a72baf07b9d90913a7e247a2023e91ab2c77aae0e9d666593b61d85facac3c8f50cb4f2e9e4a435897623f3ce626edd98b50ca2a764756a438a63e26fe480bc5eb7c54ddf055cc985b051dbde037967ed3de9d08b2db79701608bdd2bb06d8471075dcd76d1422e4b3b221ec687b73056b74ff69e395da32447278dc9b6e499abeca743d4c0d2ae2cc3c0e1b253862cd22f4266e922d1c255fa755899d3d277ef04f55170e389b4c4f14e2c0ef58d9d9058e4f5122d96250d7f66288bdbac3959a6e674b51b0802cb451faf40376cf00022672766fc96e229d63d1fee5310fec48ee58b76a6d98770452b3a472ce5c20ca58e14538e961fb7dd969865e15be4c1ea65153c1d3e021f88fdc7630045b6db7d1f5b92b2fbbb1fcbd1c2175e8f6a5d00dce1400a34e3982f0115f60c4c4df2e0dfde764b10f08958ddf6955c8c5e7e287dc4328a00b74addb10a73131ff3bfd9779f23901ec8407369460d0d3f04f53b6445def63b7b19d8a38dab779ea3dd7bfc7cb74506358b23e0c190da6e306a4ade9a2dff29d4703ec25058d0034c5a84ef97a1120050155f29579b27f4fb7c400d1628e7b4312082e870e5cce27eb5eb811182a2535962e022979d2df66884ac2608175ef7b333ed88bbfa66644198ba201a74581612fe604a0bf952f8e4edf3e73eb93c52f1a1f91190f9a1ec2010ca2e97d1a8acd310d802522ab38d10b9995f2d6ce43758a9ccafae4578b45b7ad69590d81c1c84172b7e81cbb813b381304e5524323436be4fa418af2924c972d17d3fdef13b3d15384c29da414fb5ce9c757d905380f5904ca24bd4dfda8e1e782f39a42f8920060c0ccb17a6db8a767ac9e33cb431593674ed9969f617f1cc6fe972e3455bdf31276eae587f3083a0826ed6516b7a8fabbf27bf23ffb806e566ed75fe93597d5ed4113244e98c61f42fd2ceacfdeb9610673b075b148fe23956109843e07ec5a1bc6004214351537613b8f7f2c4c0ae9484fee92f446e5d2fc4a2b44175022c0a5b7b4272df00002e4ffdf4eb56f632e6bf41fc6f8f7fcb04306ac0619b0eb8fc2751bb64cc29db25162baf8b6b5d61d45f041157b8412d699e8e615af31944d80fe52b89e1a21df2615b4abbe02ee7d936cacec938a813e5f867b541cb245e0cfb5f826bc017e958686ce3e6b888ab8230629356c0134c5b5cb0d8fc267338c336d5082d20c49c68739d6b56d22198a903c36fdb6d5db70785c65ca6286f4125083704e7f9607502a951297d1838f40e424d54ba94cd33748050d511625bf3d889a5bd0bb04e263f633b200fff5aa45b0fde945554ed4c3b7bcef65ecbb63c0979bd48149a198f5b889e453a1b8bcff72ecf6280703cf90a5bc285469fc39d74c897fe5ec0a36b49825adcbbd412861b5a951dd7af16ebb70b921006ed14647afc1b115683a815dc3f4bd4983778573aefc6a637ae41dec4c041f6f6914f4e10c5c98fa6a5c052b64d3260cbef91fe234ac8127bcfa2c2031d581332c411b22d8617cd2720e1a4ccd6571e8c593457e038b387004e9c839b998384829d46e3d0ccd5ba8a1dcd338f1cf572e52a80e17c4f72fe147587735648b417858f27ef10eef745dafa9eea5f2d80c920d62e0cc2e3567fe9302ab8554e3c4a6c17a5fa5a8bcffa0df138a257fc308ad57a9ce63e6cae6e9cdf4f991f50a057daf64b20ef53b7056efbba8024eca0f703273e3c9be5e4f7008f44da6e9cb00cf3828acc53a7b12e48e1dbb778b61aea347a8f7b945a3f85745d640ce8a8567c0f00cdaef81f8a77ec849d0281c772cd276201a446a4522ba99a7426db7debabe8c98ad9aaa0f37fae2a73127d594540e015d5ad9b409a7c33e82ad27ec0a8ada34ece920e518ab6175726a904f9ccaa1fa243918d31b6728d88cbf05db8fda8d9f1155e23054eef268bb9f9f57fe887a5da5588013a6b642bd500d678671ceaae7f0c22ff7ea0ce48c055a65b2f7f8ee65ec7c00306d75efb2cb5b3385c18e05b9c9645f62b5bc363cfe8a363d77e9eedc2d7c936b5e880c30a17abdb2b33059302ab5182a6e04bc9f3a16121c86463c7a66398d7e6d98d62152429c149f4d7fbeb109eb19e8f36208d977dde6cdefd61ae2747ffc83812035a4427ab513fb0a7402adda1d3bd6aa5745cbea133a835006455aafb239b497e3b40533e8b3120053bfc2b296441fe2b2829dfbf79c325b7648981f87a1383efeb137d7e4fee9bd0a3a34a76334ee94ce7436454c99d6471c5c4e9fc937f62553e32dda49709d3873416be8da8430d0635ae982f999d95e04248504de9bb769d786a8eba4766ef18e528765dcaca0209ec27c713aac7d8da406d3f7db7812c8dfb9268b3a342b252f810e5461ac40e8fecc182898f7aa5398fe4867eb9a25c01f053843ce76c013c24a6b8861c60629e803da6b8d09e182013e417a0f5a504b1416707b9e5dfe9f2ef957487cf3cb477f0ff8347521325be19f7d382080e78764b35eccc0ab73b15179881d3cfb246033bfcac13ebdc153b3426694a40325a49f50d7c1f519b733b4b8544fea238fa4528bb654fef724447337888011e500", 0x2000, 0x0) 691.347707ms ago: executing program 1 (id=7231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 675.977507ms ago: executing program 1 (id=7232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8400, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988a8", 0xe}], 0x1) 567.248979ms ago: executing program 1 (id=7234): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 566.493349ms ago: executing program 3 (id=7236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x28) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7e, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_misc(r2, &(0x7f00000004c0)="8b", 0x1) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 566.260759ms ago: executing program 1 (id=7237): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x1947}) 506.75182ms ago: executing program 3 (id=7238): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffff2000, 0x1) 506.46904ms ago: executing program 3 (id=7239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 506.25073ms ago: executing program 5 (id=7240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r3, r3, 0x0, 0x7f03) 506.14154ms ago: executing program 3 (id=7241): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x600000000000000) 76.287569ms ago: executing program 6 (id=7242): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000380)={0x28, 0x0, r1, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 57.564049ms ago: executing program 6 (id=7243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.15353ms ago: executing program 6 (id=7244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) 788.87µs ago: executing program 6 (id=7245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xb, 0x5, 0x2, 0xbe3, 0x2, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x1, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0xfffffffd, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x4, 0x12f, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x9, 0x6c7, 0x1000, 0xc0fe626c, 0x3, 0x0, 0x2007, 0x492e0401, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x7, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x4, 0x6, 0x0, 0x5, 0xfffffffa, 0x100, 0x8d4, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0xffffffff, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x9, 0x38, 0x8, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaeb, 0x4, 0x25], [0x9, 0xbb31, 0x6, 0xb, 0x5, 0x1, 0x3d5, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x5, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x3, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 543.55µs ago: executing program 3 (id=7246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xffffffffffffffdd, 0x0, 0x0, 0x4, 0x5f, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x480) 407.8µs ago: executing program 6 (id=7247): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10162, 0x0) 193.14µs ago: executing program 6 (id=7248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0xffff1000, 0x7, 0x22, 0x7ff, 0x0, [{0x40, 0xfa, 0x4d, '\x00', 0xff}, {0x9, 0x5, 0x3, '\x00', 0x10}, {0x2, 0x6, 0x3, '\x00', 0x6}, {0xeb, 0x9, 0x22, '\x00', 0x2}, {0xf7, 0x6, 0x10, '\x00', 0x1}, {0x3, 0x4, 0x7, '\x00', 0xff}, {0x10, 0x81, 0x9, '\x00', 0x7}, {0x80, 0x3, 0xc, '\x00', 0x6}, {0x40, 0x65, 0x4, '\x00', 0x3}, {0x1, 0xfe, 0x4, '\x00', 0x7}, {0x3, 0x5, 0x2, '\x00', 0xff}, {0x0, 0x7, 0x6, '\x00', 0x42}, {0x5, 0x2, 0xff, '\x00', 0x1}, {0xc, 0x37, 0x9, '\x00', 0x6}, {0xcc, 0xd1, 0x0, '\x00', 0x15}, {0xa2, 0x1, 0xa7, '\x00', 0x3}, {0x80, 0x7, 0x2, '\x00', 0xe}, {0xa5, 0x4, 0x5, '\x00', 0x6}, {0x42, 0x9d, 0x8, '\x00', 0xf}, {0x1, 0x1, 0x11, '\x00', 0x50}, {0x9, 0x3, 0x2, '\x00', 0x5}, {0x4, 0x7, 0x0, '\x00', 0x2}, {0x9, 0x0, 0x5, '\x00', 0x3d}, {0xc, 0x4, 0x8, '\x00', 0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=7249): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0) 0s ago: executing program 6 (id=7252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f7ffffff000000ac1414bb00000000000000000000000000000004000000000a0060803b0000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002400010002000000fadbdf25070000"], 0x30}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 791.518267][T22201] Leaked locks on dev=0x0:0x3d ino=0x162: [ 791.524816][ T24] audit: type=1400 audit(791.487:36502): avc: denied { perfmon } for pid=23038 comm="syz.8.6173" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 791.546077][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 791.554102][T22201] POSIX: fl_owner=ffff88811147b400 fl_flags=0x81 fl_type=0x0 fl_pid=23047 [ 791.554612][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 791.571048][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 791.579103][ T24] audit: type=1400 audit(791.517:36503): avc: denied { mounton } for pid=23032 comm="syz.5.6177" path="/30/file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 791.602228][ T24] audit: type=1400 audit(791.527:36504): avc: denied { bpf } for pid=23038 comm="syz.8.6173" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 791.626540][ T24] audit: type=1400 audit(791.527:36505): avc: denied { prog_run } for pid=23038 comm="syz.8.6173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 791.649013][ T24] audit: type=1326 audit(791.527:36506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23038 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3ad43be9 code=0x7ffc0000 [ 792.432823][T23073] netlink: 'syz.3.6186': attribute type 3 has an invalid length. [ 793.307059][T23086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6190'. [ 793.609575][T23106] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6196'. [ 793.641405][T23106] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 794.525645][T23137] netem: change failed [ 794.546606][T23140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6205'. [ 794.693381][T23148] FAT-fs (loop8): Unrecognized mount option "@" or missing value [ 794.833769][T23156] EXT4-fs (loop8): Ignoring removed nobh option [ 794.840120][T23156] EXT4-fs (loop8): Ignoring removed bh option [ 794.846224][T23156] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 794.864566][T23156] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,nogrpid,nouid32,init_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noauto_da_alloc,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 794.934510][T23134] 9pnet: p9_fd_create_tcp (23134): problem connecting socket to 127.0.0.1 [ 794.952518][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 795.475000][T23182] incfs: Backing dir is not set, filesystem can't be mounted. [ 795.482787][T23182] incfs: mount failed -2 [ 795.692488][ T910] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 796.092453][ T910] usb 2-1: Using ep0 maxpacket: 32 [ 796.232557][ T910] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 796.241655][ T910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.251051][ T910] usb 2-1: config 0 descriptor?? [ 796.253039][T23197] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6220'. [ 796.265326][ T24] kauditd_printk_skb: 523 callbacks suppressed [ 796.265336][ T24] audit: type=1400 audit(796.507:37030): avc: denied { module_request } for pid=23196 comm="syz.3.6220" kmod="act_nat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 796.292610][ T24] audit: type=1400 audit(796.507:37031): avc: denied { ioctl } for pid=23196 comm="syz.3.6220" path="socket:[97308]" dev="sockfs" ino=97308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 796.317241][ T24] audit: type=1400 audit(796.507:37032): avc: denied { read write } for pid=23196 comm="syz.3.6220" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.340826][ T24] audit: type=1400 audit(796.507:37033): avc: denied { open } for pid=23196 comm="syz.3.6220" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.364325][ T24] audit: type=1400 audit(796.507:37034): avc: denied { ioctl } for pid=23196 comm="syz.3.6220" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.389307][ T24] audit: type=1400 audit(796.517:37035): avc: denied { ioctl } for pid=23172 comm="syz.1.6212" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 796.413736][ T24] audit: type=1400 audit(796.517:37036): avc: denied { ioctl } for pid=23196 comm="syz.3.6220" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.438729][ T24] audit: type=1400 audit(796.517:37037): avc: denied { write } for pid=23196 comm="syz.3.6220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 796.457867][ T24] audit: type=1400 audit(796.667:37038): avc: denied { read write } for pid=23196 comm="syz.3.6220" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.482977][ T24] audit: type=1400 audit(796.667:37039): avc: denied { open } for pid=23196 comm="syz.3.6220" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.494780][ T910] usb 2-1: USB disconnect, device number 44 [ 796.559899][T23203] x_tables: duplicate underflow at hook 4 [ 797.035293][T23214] netlink: 'syz.1.6227': attribute type 3 has an invalid length. [ 797.113035][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 797.163555][T23210] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 797.170197][T23210] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 797.181062][T23210] F2FS-fs (loop8): Found nat_bits in checkpoint [ 797.207439][T23210] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 797.214589][T23210] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 797.284384][T23225] attempt to access beyond end of device [ 797.284384][T23225] loop8: rw=2049, want=55296, limit=40427 [ 797.301070][T23225] attempt to access beyond end of device [ 797.301070][T23225] loop8: rw=2049, want=57344, limit=40427 [ 797.322883][T23225] attempt to access beyond end of device [ 797.322883][T23225] loop8: rw=2049, want=53248, limit=40427 [ 797.342988][T14843] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 797.363263][T23225] attempt to access beyond end of device [ 797.363263][T23225] loop8: rw=2049, want=72856, limit=40427 [ 797.389306][T22870] attempt to access beyond end of device [ 797.389306][T22870] loop8: rw=2049, want=45104, limit=40427 [ 797.485624][T23229] Module has invalid ELF structures [ 797.612575][T14843] usb 2-1: Using ep0 maxpacket: 32 [ 797.791596][T23255] netlink: 17048 bytes leftover after parsing attributes in process `syz.5.6239'. [ 797.811765][T23255] device veth1_macvtap left promiscuous mode [ 797.936076][T23266] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 797.972739][T14843] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 798.042921][T14843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.119447][T23273] syz.8.6244[23273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.120687][T23273] syz.8.6244[23273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.192166][T14843] usb 2-1: Product: syz [ 798.194520][T23266] tipc: Started in network mode [ 798.204023][T14843] usb 2-1: Manufacturer: syz [ 798.208254][T23266] tipc: Own node identity ac141413, cluster identity 4711 [ 798.212908][T14843] usb 2-1: SerialNumber: syz [ 798.217950][T23266] tipc: New replicast peer: 10.1.1.2 [ 798.234666][T23266] tipc: Enabled bearer , priority 10 [ 798.241073][T14843] usb 2-1: config 0 descriptor?? [ 798.282947][T14843] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 798.296998][T23273] fs-verity: sha512 using implementation "sha512-avx2" [ 798.417341][T23287] syz.8.6248[23287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.417421][T23287] syz.8.6248[23287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.474250][T23287] EXT4-fs (loop8): Unrecognized mount option "dont_measure" or missing value [ 798.738713][T23296] fuse: Bad value for 'fd' [ 798.902709][T23300] syz.6.6251[23300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.902782][T23300] syz.6.6251[23300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.152126][ T910] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 799.824642][T14843] tipc: 32-bit node address hash set to 131414ac [ 799.996396][T23312] attempt to access beyond end of device [ 799.996396][T23312] loop8: rw=2049, want=234, limit=128 [ 800.023066][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 800.142462][ T910] usb 4-1: Using ep0 maxpacket: 16 [ 800.193323][T17316] usb 2-1: USB disconnect, device number 45 [ 800.210337][T23317] tmpfs: Unknown parameter '' [ 800.262511][ T910] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.273566][ T910] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.287475][ T910] usb 4-1: config 0 interface 0 has no altsetting 0 [ 800.294282][ T910] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 800.303437][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.313127][ T910] usb 4-1: config 0 descriptor?? [ 800.356793][T23321] syz.1.6258[23321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.356837][T23321] syz.1.6258[23321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.843648][ T9787] attempt to access beyond end of device [ 800.843648][ T9787] loop8: rw=1, want=1041, limit=128 [ 800.922521][ T910] usbhid 4-1:0.0: can't add hid device: -71 [ 800.928965][ T910] usbhid: probe of 4-1:0.0 failed with error -71 [ 800.937812][ T910] usb 4-1: USB disconnect, device number 20 [ 801.289632][ T24] kauditd_printk_skb: 760 callbacks suppressed [ 801.289643][ T24] audit: type=1400 audit(801.527:37800): avc: denied { prog_load } for pid=23340 comm="syz.1.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.315239][ T24] audit: type=1400 audit(801.557:37801): avc: denied { bpf } for pid=23340 comm="syz.1.6263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 801.335468][ T24] audit: type=1400 audit(801.557:37802): avc: denied { perfmon } for pid=23340 comm="syz.1.6263" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 801.357238][ T24] audit: type=1400 audit(801.587:37803): avc: denied { map_create } for pid=23331 comm="syz.5.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.377177][ T24] audit: type=1400 audit(801.587:37804): avc: denied { prog_load } for pid=23331 comm="syz.5.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.396274][ T24] audit: type=1400 audit(801.597:37805): avc: denied { bpf } for pid=23340 comm="syz.1.6263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 801.416610][ T24] audit: type=1400 audit(801.597:37806): avc: denied { prog_run } for pid=23340 comm="syz.1.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.438530][ T24] audit: type=1400 audit(801.617:37807): avc: denied { execmem } for pid=23340 comm="syz.1.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 801.466103][ T24] audit: type=1400 audit(801.617:37808): avc: denied { execmem } for pid=23340 comm="syz.1.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 801.485760][T23347] syz.3.6265[23347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 801.485818][T23347] syz.3.6265[23347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 801.486857][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6264'. [ 801.509015][ T24] audit: type=1400 audit(801.677:37809): avc: denied { read write } for pid=21702 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 801.600334][T23356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23356 comm=syz.3.6267 [ 801.675647][T23357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=23357 comm=syz.3.6267 [ 801.810601][T23362] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6269'. [ 802.215508][T23381] fuse: Bad value for 'fd' [ 802.313839][T23369] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 802.320548][T23369] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 802.337779][T23369] F2FS-fs (loop8): Found nat_bits in checkpoint [ 802.375455][T23369] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 802.382676][T23369] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 802.720726][T22870] attempt to access beyond end of device [ 802.720726][T22870] loop8: rw=2049, want=45104, limit=40427 [ 804.062700][T23428] udc-core: couldn't find an available UDC or it's busy [ 804.069768][T23428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 804.069893][T23427] udc-core: couldn't find an available UDC or it's busy [ 804.088934][T23427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 804.217127][T23446] kvm [23443]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x5407 [ 804.229015][T23446] kvm [23443]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x5b07 [ 804.312453][T14847] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 804.522473][T14843] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 804.559308][T23462] tmpfs: Unknown parameter '0xffffffffffffffff' [ 804.633160][T23466] exfat: Deprecated parameter 'utf8' [ 804.642513][T23466] exfat: Deprecated parameter 'namecase' [ 804.648229][T23466] exfat: Deprecated parameter 'utf8' [ 804.663991][T23466] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 804.742561][T14847] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.756122][T14847] usb 4-1: config 1 interface 0 has no altsetting 1 [ 804.812678][T14843] usb 2-1: Using ep0 maxpacket: 8 [ 804.922523][T14847] usb 4-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 804.931650][T14847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.939748][T14843] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 804.947892][T14847] usb 4-1: Product: syz [ 804.952060][T14843] usb 2-1: config 0 has no interface number 0 [ 804.958172][T14847] usb 4-1: Manufacturer: syz [ 804.962873][T14847] usb 4-1: SerialNumber: syz [ 805.032475][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 805.100876][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6305'. [ 805.132497][T14843] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 805.141716][T14843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.149850][T14843] usb 2-1: Product: syz [ 805.154701][T14843] usb 2-1: Manufacturer: syz [ 805.159333][T14843] usb 2-1: SerialNumber: syz [ 805.166530][T14843] usb 2-1: config 0 descriptor?? [ 805.203393][T17315] usb 4-1: USB disconnect, device number 21 [ 805.366927][T23486] xt_hashlimit: max too large, truncated to 1048576 [ 805.383042][T23486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6309'. [ 805.523378][T23446] udc-core: couldn't find an available UDC or it's busy [ 805.530431][T23446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 805.582499][T14843] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 805.588994][T14843] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 805.600101][T14843] usb 2-1: USB disconnect, device number 46 [ 806.023403][T23510] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6316'. [ 806.142617][T17315] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 806.434589][ T24] kauditd_printk_skb: 623 callbacks suppressed [ 806.434601][ T24] audit: type=1400 audit(806.507:38433): avc: denied { prog_load } for pid=23511 comm="syz.1.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 806.485308][ T24] audit: type=1400 audit(806.517:38434): avc: denied { create } for pid=23511 comm="syz.1.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 806.505502][ T24] audit: type=1400 audit(806.517:38435): avc: denied { setopt } for pid=23511 comm="syz.1.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 806.533903][ T24] audit: type=1400 audit(806.757:38436): avc: denied { prog_load } for pid=23517 comm="syz.1.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 806.554604][T17315] usb 9-1: Using ep0 maxpacket: 16 [ 806.556781][ T24] audit: type=1400 audit(806.757:38437): avc: denied { bpf } for pid=23517 comm="syz.1.6318" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 806.580380][ T24] audit: type=1400 audit(806.757:38438): avc: denied { perfmon } for pid=23517 comm="syz.1.6318" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 806.602776][ T24] audit: type=1400 audit(806.767:38439): avc: denied { prog_run } for pid=23517 comm="syz.1.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 806.621716][ T24] audit: type=1400 audit(806.767:38440): avc: denied { name_bind } for pid=23516 comm="syz.6.6319" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 806.644304][ T24] audit: type=1400 audit(806.797:38441): avc: denied { map_create } for pid=23523 comm="syz.1.6320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 806.664339][ T24] audit: type=1400 audit(806.797:38442): avc: denied { perfmon } for pid=23523 comm="syz.1.6320" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 806.685216][T17315] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.697220][T17315] usb 9-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 806.708157][T17315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.719160][T17315] usb 9-1: config 0 descriptor?? [ 806.766224][T23532] xt_hashlimit: max too large, truncated to 1048576 [ 807.081921][T23548] bridge: RTM_NEWNEIGH with invalid ether address [ 807.115564][T23552] netlink: 'syz.1.6328': attribute type 12 has an invalid length. [ 807.289020][T17315] usbhid 9-1:0.0: can't add hid device: -71 [ 807.295082][T17315] usbhid: probe of 9-1:0.0 failed with error -71 [ 807.302104][T17315] usb 9-1: USB disconnect, device number 26 [ 807.780421][T23565] 9pnet: Insufficient options for proto=fd [ 807.877477][T23579] Unknown ioctl 35076 [ 808.049971][T23603] 9pnet: Insufficient options for proto=fd [ 808.060957][T23604] incfs: mount failed -22 [ 809.082467][T14838] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 809.234903][T23626] F2FS-fs (loop8): invalid crc value [ 809.241385][T23626] F2FS-fs (loop8): Found nat_bits in checkpoint [ 809.277736][T23626] F2FS-fs (loop8): Start checkpoint disabled! [ 809.285022][T23626] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 809.377366][ T9787] attempt to access beyond end of device [ 809.377366][ T9787] loop8: rw=2049, want=40968, limit=40427 [ 809.388793][ T9787] attempt to access beyond end of device [ 809.388793][ T9787] loop8: rw=2049, want=40984, limit=40427 [ 809.471403][T14838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 809.484530][T14838] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 809.529403][T14838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.558728][T14838] usb 2-1: config 0 descriptor?? [ 810.089044][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 810.438273][T14838] usbhid 2-1:0.0: can't add hid device: -71 [ 810.444303][T14838] usbhid: probe of 2-1:0.0 failed with error -71 [ 810.451871][T14838] usb 2-1: USB disconnect, device number 47 [ 810.891807][T23676] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6360'. [ 810.901081][T23677] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6360'. [ 811.242035][T23682] tmpfs: Bad value for 'huge' [ 811.454976][ T24] kauditd_printk_skb: 483 callbacks suppressed [ 811.454989][ T24] audit: type=1400 audit(811.696:38926): avc: denied { create } for pid=23688 comm="syz.5.6364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 811.748099][ T24] audit: type=1400 audit(811.836:38927): avc: denied { module_request } for pid=23701 comm="syz.6.6367" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 811.770256][ T24] audit: type=1400 audit(811.846:38928): avc: denied { prog_load } for pid=23701 comm="syz.6.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 811.781263][T23707] syz.1.6368[23707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 811.788966][T23707] syz.1.6368[23707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 811.789587][ T24] audit: type=1400 audit(811.846:38929): avc: denied { bpf } for pid=23701 comm="syz.6.6367" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 811.832203][ T24] audit: type=1400 audit(811.846:38930): avc: denied { bpf } for pid=23701 comm="syz.6.6367" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 811.853713][ T24] audit: type=1400 audit(811.846:38931): avc: denied { perfmon } for pid=23701 comm="syz.6.6367" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 811.874471][ T24] audit: type=1400 audit(811.866:38932): avc: denied { create } for pid=23701 comm="syz.6.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.894547][ T24] audit: type=1400 audit(811.946:38933): avc: denied { mounton } for pid=23701 comm="syz.6.6367" path="/111/bus" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 811.916643][ T24] audit: type=1400 audit(812.016:38934): avc: denied { prog_load } for pid=23706 comm="syz.1.6368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 811.935358][ T24] audit: type=1400 audit(812.016:38935): avc: denied { bpf } for pid=23706 comm="syz.1.6368" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 812.153278][T23724] incfs: Can't find or create .index dir in ./file0 [ 812.160021][T23724] incfs: mount failed -14 [ 812.282168][T23734] 9pnet: Insufficient options for proto=fd [ 812.377041][T23757] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4112 sclass=netlink_xfrm_socket pid=23757 comm=syz.5.6384 [ 812.767519][ T910] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 812.842503][T17315] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 813.079903][T23783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6391'. [ 813.102794][ T910] usb 2-1: not running at top speed; connect to a high speed hub [ 813.182581][ T910] usb 2-1: config 127 has an invalid interface number: 241 but max is 0 [ 813.191149][ T910] usb 2-1: config 127 has no interface number 0 [ 813.198280][ T910] usb 2-1: config 127 interface 241 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 813.210053][T17315] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 813.221215][ T910] usb 2-1: config 127 interface 241 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 813.232666][T17315] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.242605][ T910] usb 2-1: config 127 interface 241 has no altsetting 0 [ 813.283322][T17315] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.296282][T17315] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 813.306369][T17315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.335834][T17315] usb 9-1: config 0 descriptor?? [ 814.046838][ T910] usb 2-1: New USB device found, idVendor=0cf3, idProduct=311e, bcdDevice= f.5b [ 814.056810][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.065186][ T910] usb 2-1: Product: syz [ 814.069440][ T910] usb 2-1: Manufacturer: syz [ 814.074774][ T910] usb 2-1: SerialNumber: syz [ 814.188066][T23820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=23820 comm=syz.5.6401 [ 814.230885][T23820] overlayfs: missing 'workdir' [ 814.237226][T23820] netlink: 'syz.5.6401': attribute type 4 has an invalid length. [ 814.244970][T23820] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6401'. [ 814.274215][T17315] acrux 0003:1A34:0802.0045: unknown main item tag 0x0 [ 814.281311][T17315] acrux 0003:1A34:0802.0045: unknown main item tag 0x0 [ 814.289534][T17315] acrux 0003:1A34:0802.0045: unknown main item tag 0x0 [ 814.296651][T17315] acrux 0003:1A34:0802.0045: unknown main item tag 0x0 [ 814.303741][T17315] acrux 0003:1A34:0802.0045: unknown main item tag 0x0 [ 814.323025][T17315] acrux 0003:1A34:0802.0045: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.8-1/input0 [ 814.334528][T17315] acrux 0003:1A34:0802.0045: no inputs found [ 814.340560][T17315] acrux 0003:1A34:0802.0045: Failed to enable force feedback support, error: -19 [ 814.393922][ T910] usb 2-1: USB disconnect, device number 48 [ 814.605463][T14847] usb 9-1: USB disconnect, device number 27 [ 814.879794][T23836] sch_fq: defrate 0 ignored. [ 815.113352][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 816.556984][ T24] kauditd_printk_skb: 545 callbacks suppressed [ 816.557033][ T24] audit: type=1400 audit(823.676:39481): avc: denied { map_create } for pid=23870 comm="syz.8.6416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 816.621440][ T24] audit: type=1400 audit(823.676:39482): avc: denied { bpf } for pid=23870 comm="syz.8.6416" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 816.782754][ T24] audit: type=1400 audit(823.686:39483): avc: denied { map_read map_write } for pid=23870 comm="syz.8.6416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 816.841365][ T24] audit: type=1400 audit(823.706:39484): avc: denied { prog_load } for pid=23870 comm="syz.8.6416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 816.895765][ T24] audit: type=1400 audit(823.706:39485): avc: denied { perfmon } for pid=23870 comm="syz.8.6416" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 817.073911][T23878] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 817.100553][T23878] EXT4-fs error (device loop8): ext4_lookup:1830: inode #12: comm syz.8.6416: iget: bad i_size value: 2533274857506816 [ 817.164411][T23884] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6418'. [ 817.182295][ T24] audit: type=1400 audit(823.716:39486): avc: denied { prog_run } for pid=23870 comm="syz.8.6416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 817.333677][ T24] audit: type=1400 audit(823.786:39487): avc: denied { read write } for pid=23870 comm="syz.8.6416" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.430431][ T24] audit: type=1400 audit(823.786:39488): avc: denied { read write open } for pid=23870 comm="syz.8.6416" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.470794][ T24] audit: type=1400 audit(823.786:39489): avc: denied { ioctl } for pid=23870 comm="syz.8.6416" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.496190][ T24] audit: type=1400 audit(823.986:39490): avc: denied { write } for pid=23869 comm="syz.5.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 817.771176][T23907] tmpfs: Unknown parameter 'nolazytime' [ 817.783809][T23914] bridge: RTM_NEWNEIGH with invalid ether address [ 817.876462][T23912] ------------[ cut here ]------------ [ 817.890690][T23912] WARNING: CPU: 1 PID: 23912 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e8/0x3e0 [ 817.901013][T23912] Modules linked in: [ 817.905045][T23912] CPU: 1 PID: 23912 Comm: syz.8.6423 Not tainted syzkaller #0 [ 817.913220][T23912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 817.923765][T23912] RIP: 0010:ovl_dir_modified+0x2e8/0x3e0 [ 817.929424][T23912] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 a0 a2 aa ff 49 ff 04 24 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 b5 70 ff <0f> 0b e9 2a ff ff ff e8 2c b5 70 ff 0f 0b 43 80 7c 35 00 00 0f 85 [ 817.950166][T23912] RSP: 0018:ffffc90000f37728 EFLAGS: 00010293 [ 817.956402][T23912] RAX: ffffffff81f2ed98 RBX: 0000000000000000 RCX: ffff8881462113c0 [ 818.023647][T23912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.112935][T23912] RBP: ffffc90000f37770 R08: dffffc0000000000 R09: ffffed10237bd1e9 [ 818.139999][T23912] R10: ffffed10237bd1e9 R11: 1ffff110237bd1e8 R12: ffff88811bde8ea0 [ 818.168605][T23912] R13: 1ffff11021fe58f4 R14: dffffc0000000000 R15: ffff88810ff2c7a0 [ 818.203839][T23912] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 818.252597][T23912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.268647][T23912] CR2: 000000110c2dfe34 CR3: 000000013c283000 CR4: 00000000003506a0 [ 818.302464][T23912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 818.328477][T23912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 818.358699][T23912] Call Trace: [ 818.362093][T23912] ovl_do_remove+0x6dc/0xc60 [ 818.395525][T23912] ? ovl_set_redirect+0x620/0x620 [ 818.420747][T23912] ? down_write+0xac/0x110 [ 818.435903][T23912] ? down_read_killable+0xe0/0xe0 [ 818.457550][T23932] xt_CONNSECMARK: invalid mode: 0 [ 818.462810][T23912] ? selinux_inode_rmdir+0x22/0x30 [ 818.483903][T23912] ovl_rmdir+0x1a/0x20 [ 818.487977][T23912] vfs_rmdir+0x1b3/0x3e0 [ 818.576033][T23912] incfs_kill_sb+0xfe/0x210 [ 818.580552][T23912] deactivate_locked_super+0xa0/0x100 [ 818.962580][T23912] deactivate_super+0xaf/0xe0 [ 819.027756][T23912] cleanup_mnt+0x446/0x500 [ 819.032314][T23912] __cleanup_mnt+0x19/0x20 [ 819.040090][T23912] task_work_run+0x127/0x190 [ 819.047002][T23912] do_exit+0xa4f/0x2480 [ 819.051202][T23912] ? put_task_struct+0x90/0x90 [ 819.056165][T23912] ? cgroup_freezing+0x86/0xb0 [ 819.060982][T23912] do_group_exit+0x141/0x310 [ 819.065662][T23912] ? __kasan_check_write+0x14/0x20 [ 819.070771][T23912] get_signal+0xf7d/0x12e0 [ 819.077327][T23912] arch_do_signal_or_restart+0xbf/0x10f0 [ 819.085014][T23912] ? futex_exit_release+0x1d0/0x1d0 [ 819.093873][T23912] ? ida_free+0x2b4/0x300 [ 819.098302][T23912] ? rcu_gp_kthread_wake+0x90/0x90 [ 819.124005][T23912] ? ida_alloc_range+0x7d0/0x7d0 [ 819.129984][T23912] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 819.139149][T23912] ? __se_sys_futex+0x2b4/0x360 [ 819.139294][T23949] sch_fq: defrate 4294967295 ignored. [ 819.149540][T23912] ? fpu__clear_all+0x20/0x20 [ 819.161851][T23912] exit_to_user_mode_loop+0xa2/0xe0 [ 819.168150][T23912] syscall_exit_to_user_mode+0x68/0x90 [ 819.173838][T23912] do_syscall_64+0x3d/0x40 [ 819.178296][T23912] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 819.184406][T23912] RIP: 0033:0x7fbb3ad43be9 [ 819.188843][T23912] Code: Unable to access opcode bytes at RIP 0x7fbb3ad43bbf. [ 819.207281][T23912] RSP: 002b:00007fbb397ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 819.242789][T23912] RAX: fffffffffffffe00 RBX: 00007fbb3af7afa8 RCX: 00007fbb3ad43be9 [ 819.251902][T23912] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb3af7afa8 [ 819.260852][T23912] RBP: 00007fbb3af7afa0 R08: 0000000000000000 R09: 0000000000000000 [ 819.271871][T23912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.281962][T23912] R13: 00007fbb3af7b038 R14: 00007ffcc4a534e0 R15: 00007ffcc4a535c8 [ 819.300620][T23912] ---[ end trace aeb774f489cc952e ]--- [ 819.309278][T23912] ------------[ cut here ]------------ [ 819.318111][T23912] WARNING: CPU: 0 PID: 23912 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e8/0x3e0 [ 819.345001][T23963] usb usb8: check_ctrlrecip: process 23963 (syz.5.6438) requesting ep 01 but needs 81 [ 819.349026][T23912] Modules linked in: [ 819.357407][T23963] usb usb8: usbfs: process 23963 (syz.5.6438) did not claim interface 0 before use [ 819.369256][T23912] CPU: 0 PID: 23912 Comm: syz.8.6423 Tainted: G W syzkaller #0 [ 819.370368][T23963] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.387380][T23912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 819.397759][T23912] RIP: 0010:ovl_dir_modified+0x2e8/0x3e0 [ 819.404633][T23912] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 a0 a2 aa ff 49 ff 04 24 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 b5 70 ff <0f> 0b e9 2a ff ff ff e8 2c b5 70 ff 0f 0b 43 80 7c 35 00 00 0f 85 [ 819.425701][T23912] RSP: 0018:ffffc90000f37728 EFLAGS: 00010293 [ 819.431787][T23912] RAX: ffffffff81f2ed98 RBX: 0000000000000000 RCX: ffff8881462113c0 [ 819.441988][T23912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.450471][T23912] RBP: ffffc90000f37770 R08: dffffc0000000000 R09: ffffed10237bd1e9 [ 819.459608][T23912] R10: ffffed10237bd1e9 R11: 1ffff110237bd1e8 R12: ffff88811bde8ea0 [ 819.468175][T23912] R13: 1ffff11021fe58f4 R14: dffffc0000000000 R15: ffff88810ff2c7a0 [ 819.480911][T23912] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 819.491306][T23912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.498929][T23912] CR2: 00007fff71886b98 CR3: 000000014941c000 CR4: 00000000003506b0 [ 819.508232][T23912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 819.517267][T23912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 819.526536][T23912] Call Trace: [ 819.531113][T23912] ovl_do_remove+0x6dc/0xc60 [ 819.537561][T23912] ? ovl_set_redirect+0x620/0x620 [ 819.545279][T23912] ? down_write+0xac/0x110 [ 819.550012][T23912] ? down_read_killable+0xe0/0xe0 [ 819.555741][T23912] ? selinux_inode_rmdir+0x22/0x30 [ 819.560861][T23912] ovl_rmdir+0x1a/0x20 [ 819.566322][T23912] vfs_rmdir+0x1b3/0x3e0 [ 819.578771][T23912] incfs_kill_sb+0x18a/0x210 [ 819.583567][T23977] device wg2 entered promiscuous mode [ 819.589822][T23912] deactivate_locked_super+0xa0/0x100 [ 819.595394][T23912] deactivate_super+0xaf/0xe0 [ 819.600200][T23912] cleanup_mnt+0x446/0x500 [ 819.604790][T23912] __cleanup_mnt+0x19/0x20 [ 819.609788][T23912] task_work_run+0x127/0x190 [ 819.615149][T23912] do_exit+0xa4f/0x2480 [ 819.619941][T23912] ? put_task_struct+0x90/0x90 [ 819.625172][T23912] ? cgroup_freezing+0x86/0xb0 [ 819.630116][T23912] do_group_exit+0x141/0x310 [ 819.635854][T23912] ? __kasan_check_write+0x14/0x20 [ 819.636286][T23982] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6443'. [ 819.641286][T23912] get_signal+0xf7d/0x12e0 [ 819.656943][T23912] arch_do_signal_or_restart+0xbf/0x10f0 [ 819.663210][T23912] ? futex_exit_release+0x1d0/0x1d0 [ 819.669326][T23912] ? ida_free+0x2b4/0x300 [ 819.674310][T23912] ? rcu_gp_kthread_wake+0x90/0x90 [ 819.680470][T23912] ? ida_alloc_range+0x7d0/0x7d0 [ 819.686349][T23912] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 819.692073][T23912] ? __se_sys_futex+0x2b4/0x360 [ 819.697129][T23912] ? fpu__clear_all+0x20/0x20 [ 819.701862][T23912] exit_to_user_mode_loop+0xa2/0xe0 [ 819.707254][T23912] syscall_exit_to_user_mode+0x68/0x90 [ 819.714438][T23912] do_syscall_64+0x3d/0x40 [ 819.719882][T23912] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 819.726806][T23912] RIP: 0033:0x7fbb3ad43be9 [ 819.731494][T23912] Code: Unable to access opcode bytes at RIP 0x7fbb3ad43bbf. [ 819.739847][T23912] RSP: 002b:00007fbb397ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 819.748501][T23912] RAX: fffffffffffffe00 RBX: 00007fbb3af7afa8 RCX: 00007fbb3ad43be9 [ 819.757984][T23912] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb3af7afa8 [ 819.769480][T23912] RBP: 00007fbb3af7afa0 R08: 0000000000000000 R09: 0000000000000000 [ 819.778648][T23912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.787819][T23912] R13: 00007fbb3af7b038 R14: 00007ffcc4a534e0 R15: 00007ffcc4a535c8 [ 819.798568][T23912] ---[ end trace aeb774f489cc952f ]--- [ 819.817099][T23998] 9pnet: p9_errstr2errno: server reported unknown error aaaa [ 820.172482][T17315] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 820.182459][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 820.543010][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6460'. [ 820.552026][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6460'. [ 820.588022][ T7] tipc: Subscription rejected, illegal request [ 820.613338][T17315] usb 9-1: unable to get BOS descriptor or descriptor too short [ 820.632614][ T3769] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 820.640428][ T3769] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 820.662498][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 820.702728][T17315] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 820.715425][T17315] usb 9-1: config 1 has no interface number 1 [ 820.912554][T17315] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.921611][T17315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.930680][T17315] usb 9-1: Product: syz [ 820.934931][T17315] usb 9-1: Manufacturer: syz [ 820.939649][T17315] usb 9-1: SerialNumber: syz [ 821.002510][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 821.442681][T17315] usb 9-1: 2:1 : invalid UAC_AS_GENERAL desc [ 821.451438][T24064] overlayfs: failed to clone upperpath [ 821.486480][T24065] overlayfs: './file0' not a directory [ 821.504692][T17315] usb 9-1: USB disconnect, device number 28 [ 821.568189][ T24] kauditd_printk_skb: 824 callbacks suppressed [ 821.568201][ T24] audit: type=1400 audit(828.805:40315): avc: denied { read } for pid=24066 comm="syz.1.6472" dev="nsfs" ino=4026532771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 821.595630][ T24] audit: type=1400 audit(828.805:40316): avc: denied { read open } for pid=24066 comm="syz.1.6472" path="net:[4026532771]" dev="nsfs" ino=4026532771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 821.619184][ T24] audit: type=1400 audit(828.805:40317): avc: denied { create } for pid=24066 comm="syz.1.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 821.639381][ T24] audit: type=1400 audit(828.805:40318): avc: denied { write } for pid=24066 comm="syz.1.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 821.659442][ T24] audit: type=1400 audit(828.865:40319): avc: denied { prog_load } for pid=24066 comm="syz.1.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 821.678519][ T24] audit: type=1400 audit(828.915:40320): avc: denied { map_create } for pid=24066 comm="syz.1.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 821.697285][ T24] audit: type=1400 audit(828.915:40321): avc: denied { prog_load } for pid=24066 comm="syz.1.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 821.716127][ T24] audit: type=1400 audit(828.915:40322): avc: denied { bpf } for pid=24066 comm="syz.1.6472" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 821.736399][ T24] audit: type=1400 audit(828.915:40323): avc: denied { perfmon } for pid=24066 comm="syz.1.6472" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 821.757011][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 821.764614][ T24] audit: type=1400 audit(828.955:40324): avc: denied { map_create } for pid=24066 comm="syz.1.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 821.914845][T24079] 9pnet: Could not find request transport: nd [ 822.069498][T24086] FAT-fs (loop8): Directory bread(block 64) failed [ 822.077178][T24086] FAT-fs (loop8): Directory bread(block 65) failed [ 822.084264][T24086] FAT-fs (loop8): Directory bread(block 66) failed [ 822.090884][T24086] FAT-fs (loop8): Directory bread(block 67) failed [ 822.097486][T24086] FAT-fs (loop8): Directory bread(block 68) failed [ 822.104162][T24086] FAT-fs (loop8): Directory bread(block 69) failed [ 822.110734][T24086] FAT-fs (loop8): Directory bread(block 70) failed [ 822.117505][T24086] FAT-fs (loop8): Directory bread(block 71) failed [ 822.124139][T24086] FAT-fs (loop8): Directory bread(block 72) failed [ 822.130723][T24086] FAT-fs (loop8): Directory bread(block 73) failed [ 822.312805][T24093] tipc: Enabling of bearer rejected, failed to enable media [ 822.646080][T24107] fuse: Bad value for 'fd' [ 822.716023][T24118] netlink: 'syz.6.6487': attribute type 12 has an invalid length. [ 822.724098][T24118] netlink: 'syz.6.6487': attribute type 29 has an invalid length. [ 822.731909][T24118] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6487'. [ 822.740977][T24118] netlink: 'syz.6.6487': attribute type 1 has an invalid length. [ 822.748847][T24118] netlink: 11 bytes leftover after parsing attributes in process `syz.6.6487'. [ 822.846491][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 822.857510][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6486'. [ 823.103534][T24151] syz.3.6496[24151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 823.103593][T24151] syz.3.6496[24151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 823.341239][T24154] fuse: Bad value for 'fd' [ 823.475655][T24158] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 823.485895][T24158] EXT4-fs (loop8): Ignoring removed bh option [ 823.492031][T24158] EXT4-fs (loop8): Ignoring removed orlov option [ 823.498850][T24158] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 823.511080][T24158] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e028, mo2=0000] [ 823.520120][T24158] EXT4-fs error (device loop8): ext4_ext_check_inode:500: inode #3: comm syz.8.6498: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 2, max 0(0), depth 0(0) [ 823.537892][T24158] EXT4-fs (loop8): Remounting filesystem read-only [ 823.545098][T24158] EXT4-fs error (device loop8): ext4_quota_enable:6450: comm syz.8.6498: Bad quota inode: 3, type: 0 [ 823.556631][T24158] EXT4-fs warning (device loop8): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 823.617655][T24158] EXT4-fs (loop8): mount failed [ 824.952514][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 825.406204][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 825.922125][T24201] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 825.922125][T24201] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 825.922125][T24201] [ 826.003960][T24201] EXT4-fs (loop8): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 826.599396][ T24] kauditd_printk_skb: 489 callbacks suppressed [ 826.599408][ T24] audit: type=1400 audit(833.835:40814): avc: denied { unmount } for pid=22870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 826.649397][ T24] audit: type=1400 audit(833.855:40815): avc: denied { write } for pid=22870 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.671710][ T24] audit: type=1400 audit(833.855:40816): avc: denied { remove_name } for pid=22870 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.694936][ T24] audit: type=1400 audit(833.855:40817): avc: denied { rmdir } for pid=22870 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.717409][ T24] audit: type=1400 audit(833.865:40818): avc: denied { unmount } for pid=22870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 826.737418][ T24] audit: type=1400 audit(833.865:40819): avc: denied { rmdir } for pid=22870 comm="syz-executor" name=".index" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 826.759039][ T24] audit: type=1400 audit(833.865:40820): avc: denied { write } for pid=22870 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.792163][ T24] audit: type=1400 audit(833.865:40821): avc: denied { remove_name } for pid=22870 comm="syz-executor" name=".incomplete" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.815097][ T24] audit: type=1400 audit(833.865:40822): avc: denied { rmdir } for pid=22870 comm="syz-executor" name=".incomplete" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 826.867393][ T24] audit: type=1400 audit(833.865:40823): avc: denied { unlink } for pid=22870 comm="syz-executor" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 827.020870][T24218] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.028110][T24218] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.036066][T24218] device bridge_slave_0 entered promiscuous mode [ 827.044072][T24218] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.051128][T24218] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.058897][T24218] device bridge_slave_1 entered promiscuous mode [ 827.456468][T24218] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.463568][T24218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.470847][T24218] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.477923][T24218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.513232][T24177] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.521158][T24177] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.545615][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 827.563576][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.586660][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.598362][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.607546][T24177] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.614610][T24177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.623937][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.632844][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.641251][T24177] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.648304][T24177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.656367][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.664965][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.673704][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 827.705165][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 827.733917][ T7] tipc: Disabling bearer [ 827.739335][ T7] tipc: Left network mode [ 827.754958][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 827.775102][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 827.829994][T24218] device veth0_vlan entered promiscuous mode [ 827.838844][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 827.850754][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 827.874870][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 827.900186][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 827.933059][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 827.944426][T24177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 827.952998][T24218] device veth1_macvtap entered promiscuous mode [ 828.092471][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 828.108435][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 828.135436][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 828.144279][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 828.153007][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 828.249886][T24260] 9pnet: Insufficient options for proto=fd [ 828.385208][T24269] tun0: tun_chr_ioctl cmd 1074025680 [ 828.395329][T24269] device syzkaller0 entered promiscuous mode [ 828.586335][T24273] overlayfs: failed to clone upperpath [ 828.635005][ T7] device bridge_slave_1 left promiscuous mode [ 828.651370][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.682658][ T7] device bridge_slave_0 left promiscuous mode [ 828.707313][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.729071][ T7] device veth1_macvtap left promiscuous mode [ 828.739568][ T7] device veth0_vlan left promiscuous mode [ 828.991625][T24286] overlayfs: failed to clone upperpath [ 829.727968][T24316] xt_TCPMSS: Only works on TCP SYN packets [ 830.562608][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 830.984206][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6548'. [ 831.014066][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6548'. [ 831.024692][T24326] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6548'. [ 831.598774][T24351] netlink: 'syz.5.6554': attribute type 3 has an invalid length. [ 831.606748][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6554'. [ 831.616457][ T24] kauditd_printk_skb: 518 callbacks suppressed [ 831.616469][ T24] audit: type=1400 audit(838.855:41342): avc: denied { create } for pid=24350 comm="syz.5.6554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 831.712641][T24352] device bridge4 entered promiscuous mode [ 831.930583][ T24] audit: type=1400 audit(838.935:41343): avc: denied { write } for pid=24341 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 831.950566][ T24] audit: type=1400 audit(838.975:41344): avc: denied { map_create } for pid=24341 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 832.012560][ T24] audit: type=1400 audit(838.975:41345): avc: denied { bpf } for pid=24341 comm="syz.3.6552" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 832.053621][ T24] audit: type=1400 audit(838.975:41346): avc: denied { map_read map_write } for pid=24341 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 832.096675][ T24] audit: type=1400 audit(838.985:41347): avc: denied { prog_load } for pid=24341 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 832.136907][ T24] audit: type=1400 audit(838.985:41348): avc: denied { perfmon } for pid=24341 comm="syz.3.6552" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 832.159592][T24372] udc-core: couldn't find an available UDC or it's busy [ 832.167003][T24372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 832.177364][T24372] udc-core: couldn't find an available UDC or it's busy [ 832.184680][T24374] udc-core: couldn't find an available UDC or it's busy [ 832.192281][ T24] audit: type=1400 audit(838.985:41349): avc: denied { prog_run } for pid=24341 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 832.211359][T24374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 832.220571][ T24] audit: type=1400 audit(839.235:41350): avc: denied { read write } for pid=24354 comm="syz.1.6555" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 832.258735][T24372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 832.280454][T24369] syz.5.6558[24369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 832.280518][T24369] syz.5.6558[24369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 832.285835][ T24] audit: type=1400 audit(839.235:41351): avc: denied { open } for pid=24354 comm="syz.1.6555" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 832.388642][T24366] netlink: 'syz.1.6557': attribute type 15 has an invalid length. [ 832.415519][T24366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6557'. [ 833.532472][ T903] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 833.602692][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 834.122314][ T903] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 834.131663][ T903] usb 2-1: config 0 has no interface number 0 [ 834.138401][ T903] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 834.149729][ T903] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 834.158880][ T903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.168738][ T903] usb 2-1: config 0 descriptor?? [ 834.215357][T24398] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 834.458800][T24427] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 834.549091][T24428] cannot load conntrack support for proto=3 [ 834.703057][T14847] usb 2-1: USB disconnect, device number 49 [ 834.860145][T24443] IPv6: NLM_F_CREATE should be specified when creating new route [ 835.592446][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 836.540980][T24470] netlink: 'syz.9.6589': attribute type 15 has an invalid length. [ 836.555727][T24470] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6589'. [ 836.783728][ T24] kauditd_printk_skb: 475 callbacks suppressed [ 836.783860][ T24] audit: type=1400 audit(843.965:41821): avc: denied { prog_load } for pid=24478 comm="syz.9.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.004889][ T24] audit: type=1400 audit(843.965:41822): avc: denied { map_create } for pid=24478 comm="syz.9.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.042058][ T24] audit: type=1400 audit(843.965:41823): avc: denied { map_read map_write } for pid=24478 comm="syz.9.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.197948][ T24] audit: type=1400 audit(843.975:41824): avc: denied { bpf } for pid=24478 comm="syz.9.6593" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.269780][ T24] audit: type=1400 audit(843.975:41825): avc: denied { bpf } for pid=24478 comm="syz.9.6593" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.429699][ T24] audit: type=1400 audit(843.975:41826): avc: denied { perfmon } for pid=24478 comm="syz.9.6593" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.534249][ T24] audit: type=1400 audit(843.975:41827): avc: denied { prog_run } for pid=24478 comm="syz.9.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.552878][ T24] audit: type=1400 audit(843.985:41828): avc: denied { prog_load } for pid=24478 comm="syz.9.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.571502][ T24] audit: type=1400 audit(843.985:41829): avc: denied { map_create } for pid=24478 comm="syz.9.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.591280][ T24] audit: type=1400 audit(844.015:41830): avc: denied { read write } for pid=24478 comm="syz.9.6593" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.914885][T24490] SELinux: Context is not valid (left unmapped). [ 839.170558][T24520] netem: change failed [ 839.786527][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6611'. [ 839.795673][T24549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=24549 comm=syz.3.6611 [ 839.986114][T14841] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 840.262494][T14841] usb 10-1: device descriptor read/64, error -71 [ 840.299193][T24568] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6617'. [ 840.633000][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 840.676230][T14841] usb 10-1: device descriptor read/64, error -71 [ 840.952552][T14841] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 841.242566][T14841] usb 10-1: device descriptor read/64, error -71 [ 841.632419][T14841] usb 10-1: device descriptor read/64, error -71 [ 841.752718][T14841] usb usb10-port1: attempt power cycle [ 841.896819][ T24] kauditd_printk_skb: 286 callbacks suppressed [ 841.896831][ T24] audit: type=1400 audit(849.135:42117): avc: denied { create } for pid=24594 comm="syz.3.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 841.923666][ T24] audit: type=1400 audit(849.135:42118): avc: denied { bind } for pid=24594 comm="syz.3.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 841.943036][ T24] audit: type=1400 audit(849.135:42119): avc: denied { name_bind } for pid=24594 comm="syz.3.6626" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 841.963945][ T24] audit: type=1400 audit(849.135:42120): avc: denied { node_bind } for pid=24594 comm="syz.3.6626" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 841.985713][ T24] audit: type=1400 audit(849.135:42121): avc: denied { setopt } for pid=24594 comm="syz.3.6626" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 842.007378][ T24] audit: type=1400 audit(849.135:42122): avc: denied { map_create } for pid=24594 comm="syz.3.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 842.026367][ T24] audit: type=1400 audit(849.135:42123): avc: denied { map_read map_write } for pid=24594 comm="syz.3.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 842.045983][ T24] audit: type=1400 audit(849.135:42124): avc: denied { prog_load } for pid=24594 comm="syz.3.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 842.064991][ T24] audit: type=1400 audit(849.135:42125): avc: denied { bpf } for pid=24594 comm="syz.3.6626" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 842.085294][ T24] audit: type=1400 audit(849.135:42126): avc: denied { perfmon } for pid=24594 comm="syz.3.6626" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 842.162557][T14841] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 842.992592][T14841] usb 10-1: device descriptor read/8, error -71 [ 843.342555][T14841] usb 10-1: device descriptor read/8, error -71 [ 843.452594][ T3769] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 843.832530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.505917][T24632] xt_bpf: check failed: parse error [ 844.518416][T24632] 9pnet: Insufficient options for proto=fd [ 844.562503][ T3769] usb 2-1: config index 0 descriptor too short (expected 46875, got 100) [ 844.574091][ T3769] usb 2-1: config 0 has too many interfaces: 100, using maximum allowed: 32 [ 844.619838][ T3769] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.629989][ T3769] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 100 [ 844.854270][ T3769] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.864886][ T3769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.873054][ T3769] usb 2-1: Product: syz [ 844.877414][ T3769] usb 2-1: Manufacturer: syz [ 844.882083][ T3769] usb 2-1: SerialNumber: syz [ 845.009715][ T3769] usb 2-1: config 0 descriptor?? [ 845.323186][ T3769] usb 2-1: USB disconnect, device number 50 [ 845.672457][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 845.852434][T17316] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 845.907060][T24688] 9pnet: Insufficient options for proto=fd [ 846.222486][T17316] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.392579][T17316] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.401738][T17316] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.409819][T17316] usb 10-1: Product: syz [ 846.414098][T17316] usb 10-1: Manufacturer: syz [ 846.418754][T17316] usb 10-1: SerialNumber: syz [ 846.608424][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.616374][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.624419][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.632671][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.640604][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.648919][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.663006][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.670969][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.679211][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.687254][T24696] netlink: 'syz.3.6655': attribute type 3 has an invalid length. [ 846.749448][T24707] device veth1_macvtap left promiscuous mode [ 846.913680][ T24] kauditd_printk_skb: 371 callbacks suppressed [ 846.913690][ T24] audit: type=1400 audit(854.155:42498): avc: denied { prog_load } for pid=24722 comm="syz.6.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.022461][ T24] audit: type=1400 audit(854.185:42499): avc: denied { bpf } for pid=24722 comm="syz.6.6663" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 847.210986][ T24] audit: type=1400 audit(854.185:42500): avc: denied { perfmon } for pid=24722 comm="syz.6.6663" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 847.376678][ T24] audit: type=1400 audit(854.185:42501): avc: denied { prog_run } for pid=24722 comm="syz.6.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.395528][ T24] audit: type=1400 audit(854.185:42502): avc: denied { create } for pid=24722 comm="syz.6.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 847.414782][ T24] audit: type=1400 audit(854.185:42503): avc: denied { prog_load } for pid=24722 comm="syz.6.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.433650][ T24] audit: type=1400 audit(854.185:42504): avc: denied { map_create } for pid=24722 comm="syz.6.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.452576][ T24] audit: type=1400 audit(854.185:42505): avc: denied { execmem } for pid=24722 comm="syz.6.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 847.471441][ T24] audit: type=1400 audit(854.405:42506): avc: denied { prog_load } for pid=24722 comm="syz.6.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.490126][ T24] audit: type=1400 audit(854.405:42507): avc: denied { bpf } for pid=24722 comm="syz.6.6663" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 847.490413][T17316] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 847.519855][T17316] cdc_ncm 10-1:1.0: bind() failure [ 847.525815][T17316] cdc_ncm 10-1:1.1: bind() failure [ 847.652479][ T3760] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 848.102479][ T3760] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 848.110647][ T3760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 848.121822][ T3760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 848.133011][ T3760] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 848.149788][ T3760] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.158933][ T3760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.168131][ T3760] usb 2-1: config 0 descriptor?? [ 848.193325][T24729] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 848.605125][T24762] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6673'. [ 848.620590][T24762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6673'. [ 848.643648][T24762] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.650834][T24762] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.697159][ T3760] plantronics 0003:047F:FFFF.0046: unknown main item tag 0xd [ 848.705872][ T3760] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 848.715741][ T3760] plantronics 0003:047F:FFFF.0046: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 848.904709][T17291] usb 10-1: USB disconnect, device number 13 [ 848.937584][T17316] usb 2-1: USB disconnect, device number 51 [ 849.602254][T24787] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6681'. [ 849.624013][T24791] /dev/loop3: Can't open blockdev [ 849.649441][T24800] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6686'. [ 850.282466][ T3769] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 850.618037][ T3769] usb 10-1: Using ep0 maxpacket: 16 [ 850.712607][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 850.782225][ T3769] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 850.806609][ T3769] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 850.929928][ T3769] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.092538][ T3769] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 851.101789][ T3769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.110341][ T3769] usb 10-1: Product: syz [ 851.114839][ T3769] usb 10-1: Manufacturer: 󁤹 [ 851.119608][ T3769] usb 10-1: SerialNumber: syz [ 851.362100][T24840] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6697'. [ 851.483590][ T3769] usb 10-1: 0:2 : does not exist [ 851.490931][ T3769] usb 10-1: USB disconnect, device number 14 [ 851.512545][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 851.697305][T24856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24856 comm=syz.3.6703 [ 851.947281][ T24] kauditd_printk_skb: 370 callbacks suppressed [ 851.947294][ T24] audit: type=1400 audit(2000000004.280:42878): avc: denied { read write } for pid=24218 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 851.985793][ T24] audit: type=1400 audit(2000000004.280:42879): avc: denied { read write open } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 851.985930][T24865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6706'. [ 852.025022][ T24] audit: type=1400 audit(2000000004.280:42880): avc: denied { ioctl } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 852.052459][ T24] audit: type=1400 audit(2000000004.290:42881): avc: denied { map_create } for pid=24871 comm="syz.9.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 852.073827][ T24] audit: type=1400 audit(2000000004.290:42882): avc: denied { map_read map_write } for pid=24871 comm="syz.9.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 852.109959][ T24] audit: type=1400 audit(2000000004.290:42883): avc: denied { prog_load } for pid=24871 comm="syz.9.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 852.129450][ T24] audit: type=1400 audit(2000000004.290:42884): avc: denied { bpf } for pid=24871 comm="syz.9.6708" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 852.151137][ T24] audit: type=1400 audit(2000000004.290:42885): avc: denied { bpf } for pid=24871 comm="syz.9.6708" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 852.172103][ T24] audit: type=1400 audit(2000000004.290:42886): avc: denied { perfmon } for pid=24871 comm="syz.9.6708" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 852.193387][ T24] audit: type=1400 audit(2000000004.310:42887): avc: denied { prog_run } for pid=24871 comm="syz.9.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 852.442590][T24877] device bridge1 entered promiscuous mode [ 852.664194][T24884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'. [ 852.674260][T24884] device veth2 entered promiscuous mode [ 852.757025][T24890] binder: 24889:24890 ioctl 8933 200000000440 returned -22 [ 852.764586][T24890] binder: 24889:24890 ioctl aea3 0 returned -22 [ 852.940497][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6717'. [ 852.951866][T24895] device macsec0 entered promiscuous mode [ 853.000544][T24906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24906 comm=syz.9.6720 [ 853.242427][T17317] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 853.492443][T17317] usb 2-1: Using ep0 maxpacket: 32 [ 853.652482][T17317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 853.732523][T17317] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 853.740806][T17317] usb 2-1: config 12 has no interface number 0 [ 853.747340][T17317] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 853.912524][T17317] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 853.925723][T17317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.933974][T17317] usb 2-1: Product: syz [ 853.938174][T17317] usb 2-1: Manufacturer: syz [ 853.942967][T17317] usb 2-1: SerialNumber: syz [ 854.107232][T24177] Bluetooth: hci0: Frame reassembly failed (-84) [ 854.113915][T24929] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 854.184699][T24902] udc-core: couldn't find an available UDC or it's busy [ 854.191641][T24902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 854.285054][T17317] usb 2-1: USB disconnect, device number 52 [ 854.567301][T24932] fuse: Bad value for 'fd' [ 855.451567][T24952] syz.3.6732[24952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 855.452281][T24952] syz.3.6732[24952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 855.842677][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 856.301975][ T903] Bluetooth: hci0: command 0x1003 tx timeout [ 856.308116][T20563] Bluetooth: hci0: sending frame failed (-49) [ 857.157166][ T24] kauditd_printk_skb: 327 callbacks suppressed [ 857.157177][ T24] audit: type=1400 audit(2000000009.490:43215): avc: denied { create } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 857.184907][ T24] audit: type=1400 audit(2000000009.490:43216): avc: denied { write } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 857.205565][ T24] audit: type=1400 audit(2000000009.490:43217): avc: denied { read } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 857.226334][ T24] audit: type=1400 audit(2000000009.490:43218): avc: denied { prog_load } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 857.245692][ T24] audit: type=1400 audit(2000000009.490:43219): avc: denied { map_create } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 857.265110][ T24] audit: type=1400 audit(2000000009.490:43220): avc: denied { bpf } for pid=24965 comm="syz.3.6737" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 857.286049][ T24] audit: type=1400 audit(2000000009.490:43221): avc: denied { map_read map_write } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 857.306267][ T24] audit: type=1400 audit(2000000009.490:43222): avc: denied { perfmon } for pid=24965 comm="syz.3.6737" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 857.327383][ T24] audit: type=1400 audit(2000000009.520:43223): avc: denied { prog_run } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 857.346692][ T24] audit: type=1400 audit(2000000009.520:43224): avc: denied { map_create } for pid=24965 comm="syz.3.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 857.477101][T24970] tipc: Started in network mode [ 857.482088][T24970] tipc: Own node identity ac14140f, cluster identity 4711 [ 857.489356][T24970] tipc: New replicast peer: 255.255.255.255 [ 857.495480][T24970] tipc: Enabled bearer , priority 10 [ 858.590209][T17291] Bluetooth: hci0: command 0x1001 tx timeout [ 858.596297][T20563] Bluetooth: hci0: sending frame failed (-49) [ 858.622436][ T426] tipc: 32-bit node address hash set to f1414ac [ 858.673738][T25009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25009 comm=syz.3.6749 [ 858.686693][T25009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6749'. [ 859.049786][T25015] 9pnet: Insufficient options for proto=fd [ 859.222525][T17291] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 859.441344][T25043] incfs: Options parsing error. -22 [ 859.446627][T25043] incfs: mount failed -22 [ 859.552459][T17291] usb 2-1: device descriptor read/64, error -71 [ 860.773751][T17291] usb 2-1: device descriptor read/64, error -71 [ 860.784626][ T903] Bluetooth: hci0: command 0x1009 tx timeout [ 860.812506][T25063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6765'. [ 860.872444][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 861.043698][T17291] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 861.572470][T17291] usb 2-1: device descriptor read/64, error -71 [ 862.177967][ T24] kauditd_printk_skb: 317 callbacks suppressed [ 862.177979][ T24] audit: type=1400 audit(2000000014.510:43542): avc: denied { map_create } for pid=25094 comm="syz.3.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 862.209673][ T24] audit: type=1400 audit(2000000014.540:43543): avc: denied { prog_load } for pid=25094 comm="syz.3.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 862.230758][ T24] audit: type=1400 audit(2000000014.540:43544): avc: denied { create } for pid=25102 comm="syz.5.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 862.251993][ T24] audit: type=1400 audit(2000000014.540:43545): avc: denied { bpf } for pid=25094 comm="syz.3.6775" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 862.274265][T17291] usb 2-1: device descriptor read/64, error -71 [ 862.283552][ T24] audit: type=1400 audit(2000000014.540:43546): avc: denied { perfmon } for pid=25094 comm="syz.3.6775" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 862.305828][ T24] audit: type=1400 audit(2000000014.540:43547): avc: denied { write } for pid=25102 comm="syz.5.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 862.336229][ T24] audit: type=1400 audit(2000000014.540:43548): avc: denied { create } for pid=25102 comm="syz.5.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 862.358590][ T24] audit: type=1400 audit(2000000014.540:43549): avc: denied { connect } for pid=25102 comm="syz.5.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 862.379327][ T24] audit: type=1400 audit(2000000014.540:43550): avc: denied { write } for pid=25102 comm="syz.5.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 862.399482][T17291] usb usb2-port1: attempt power cycle [ 862.405023][ T24] audit: type=1400 audit(2000000014.540:43551): avc: denied { read } for pid=25102 comm="syz.5.6777" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 862.832487][T17291] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 862.952562][T17291] usb 2-1: Using ep0 maxpacket: 8 [ 863.205962][T17291] usb 2-1: unable to get BOS descriptor or descriptor too short [ 863.291455][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6788'. [ 863.302591][T17291] usb 2-1: config index 0 descriptor too short (expected 24859, got 27) [ 863.310957][T17291] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 863.348436][T17291] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 863.380339][T17291] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 863.572679][T17291] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 863.587132][T17291] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 863.605930][T17291] usb 2-1: Product: syz [ 863.615305][T17291] usb 2-1: Manufacturer: syz [ 863.625081][T17291] usb 2-1: SerialNumber: syz [ 863.657487][T25165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6792'. [ 864.068012][T25189] tipc: Enabling of bearer rejected, failed to enable media [ 864.129884][T25192] tipc: Enabling of bearer rejected, failed to enable media [ 864.295256][T25201] validate_nla: 55 callbacks suppressed [ 864.295268][T25201] netlink: 'syz.6.6805': attribute type 8 has an invalid length. [ 864.864978][T25227] xt_hashlimit: size too large, truncated to 1048576 [ 865.950027][T25253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6819'. [ 866.148783][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 866.423290][T17291] usb 2-1: USB disconnect, device number 55 [ 866.652013][T25261] syz.9.6823[25261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.652078][T25261] syz.9.6823[25261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.031900][ T24] kauditd_printk_skb: 390 callbacks suppressed [ 868.031912][ T24] audit: type=1400 audit(2000000019.460:43942): avc: denied { map_create } for pid=25285 comm="syz.5.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.114987][ T24] audit: type=1400 audit(2000000019.470:43943): avc: denied { bpf } for pid=25285 comm="syz.5.6830" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 868.149976][T25297] overlayfs: failed to clone upperpath [ 868.192663][ T24] audit: type=1400 audit(2000000019.470:43944): avc: denied { map_read map_write } for pid=25285 comm="syz.5.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.237517][ T24] audit: type=1400 audit(2000000019.480:43945): avc: denied { prog_load } for pid=25285 comm="syz.5.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.273581][ T24] audit: type=1400 audit(2000000019.480:43946): avc: denied { perfmon } for pid=25285 comm="syz.5.6830" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 868.294964][ T24] audit: type=1400 audit(2000000019.490:43947): avc: denied { prog_run } for pid=25285 comm="syz.5.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.314367][ T24] audit: type=1400 audit(2000000019.690:43948): avc: denied { create } for pid=25285 comm="syz.5.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 868.336642][ T24] audit: type=1400 audit(2000000019.710:43949): avc: denied { write } for pid=25285 comm="syz.5.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 868.357410][ T24] audit: type=1400 audit(2000000019.710:43950): avc: denied { read } for pid=25285 comm="syz.5.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 868.378439][ T24] audit: type=1400 audit(2000000020.480:43951): avc: denied { prog_load } for pid=25291 comm="syz.3.6831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.564043][T25317] kvm: pic: non byte write [ 868.652482][T17291] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 868.705789][T25332] tipc: Enabling of bearer rejected, failed to enable media [ 869.062475][T17291] usb 10-1: unable to get BOS descriptor or descriptor too short [ 869.142522][T17291] usb 10-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 869.159967][T17291] usb 10-1: config 1 interface 0 has no altsetting 0 [ 869.332679][T17291] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 869.341865][T17291] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.350364][T17291] usb 10-1: Product: syz [ 869.354693][T17291] usb 10-1: Manufacturer: syz [ 869.359436][T17291] usb 10-1: SerialNumber: syz [ 869.652626][T17291] usbhid 10-1:1.0: can't add hid device: -22 [ 869.659079][T17291] usbhid: probe of 10-1:1.0 failed with error -22 [ 869.666575][T17291] usb 10-1: USB disconnect, device number 15 [ 870.234213][T25383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6858'. [ 870.287464][T17291] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 870.300195][T17291] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 870.504185][T25400] netlink: 'syz.6.6861': attribute type 3 has an invalid length. [ 870.662458][ T426] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 870.804217][T25413] bridge0: port 3(gretap0) entered blocking state [ 870.810850][T25413] bridge0: port 3(gretap0) entered disabled state [ 870.818782][T25413] device gretap0 entered promiscuous mode [ 870.825258][T25413] bridge0: port 3(gretap0) entered blocking state [ 870.831698][T25413] bridge0: port 3(gretap0) entered listening state [ 870.844204][T25413] device gretap0 left promiscuous mode [ 870.861454][T25413] bridge0: port 3(gretap0) entered disabled state [ 871.032770][ T426] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 871.041186][ T426] usb 10-1: config 0 has no interface number 0 [ 871.047583][ T426] usb 10-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 871.057159][ T426] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.071945][ T426] usb 10-1: config 0 descriptor?? [ 871.126125][ T426] usb 10-1: bad CDC descriptors [ 871.202499][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 871.324254][ T426] usb 10-1: USB disconnect, device number 16 [ 871.959416][T25439] device macsec1 entered promiscuous mode [ 871.969277][T25439] device bridge0 entered promiscuous mode [ 871.975597][T25439] bridge0: port 3(macsec1) entered blocking state [ 871.982339][T25439] bridge0: port 3(macsec1) entered disabled state [ 871.994707][T25439] device bridge0 left promiscuous mode [ 872.181427][T25456] netlink: 'syz.9.6877': attribute type 3 has an invalid length. [ 873.190468][ T24] kauditd_printk_skb: 430 callbacks suppressed [ 873.190481][ T24] audit: type=1400 audit(2000000024.960:44382): avc: denied { map_create } for pid=25457 comm="syz.6.6880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 873.262944][T25471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6883'. [ 873.266638][T25477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6885'. [ 873.302369][ T24] audit: type=1400 audit(2000000024.970:44383): avc: denied { bpf } for pid=25457 comm="syz.6.6880" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 873.323690][ T24] audit: type=1400 audit(2000000024.970:44384): avc: denied { map_read map_write } for pid=25457 comm="syz.6.6880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 873.344038][ T24] audit: type=1400 audit(2000000025.040:44385): avc: denied { prog_load } for pid=25457 comm="syz.6.6880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 873.373415][T25493] audit: audit_backlog=65 > audit_backlog_limit=64 [ 873.374201][T25495] audit: audit_backlog=65 > audit_backlog_limit=64 [ 873.382034][T25496] audit: audit_backlog=65 > audit_backlog_limit=64 [ 873.386583][ T24] audit: type=1400 audit(2000000025.040:44386): avc: denied { bpf } for pid=25457 comm="syz.6.6880" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 873.414217][T25495] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 873.421940][T25495] audit: backlog limit exceeded [ 873.428536][T25500] input: syz1 as /devices/virtual/input/input43 [ 873.435072][T25500] input: failed to attach handler leds to device input43, error: -6 [ 873.516837][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6895'. [ 873.537512][T25522] incfs: Can't find or create .index dir in ./file0 [ 873.540247][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 873.544403][T25522] incfs: mount failed -14 [ 873.557013][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6895'. [ 873.560688][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 873.574526][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 873.582868][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 873.591311][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 873.599536][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 873.607853][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 873.616452][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 873.625374][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 873.633113][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 873.741410][T25542] incfs: Error accessing: ./file0. [ 873.746659][T25542] incfs: mount failed -20 [ 874.112417][ T3759] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 874.352454][ T3759] usb 2-1: Using ep0 maxpacket: 16 [ 874.447905][T25578] tmpfs: Unknown parameter 'nolazytime' [ 874.501370][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6915'. [ 874.510723][T25590] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6915'. [ 874.520353][ T3759] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 874.651882][ T3759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.822868][ T3759] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.844999][ T3759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.857078][ T3759] usb 2-1: Product: syz [ 874.861502][ T3759] usb 2-1: Manufacturer: syz [ 874.866544][ T3759] usb 2-1: SerialNumber: syz [ 875.312586][ T3759] usb 2-1: 0:2 : does not exist [ 875.412970][ T3759] usb 2-1: USB disconnect, device number 56 [ 875.462804][T25612] No source specified [ 875.501846][T25618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25618 comm=syz.6.6922 [ 876.232463][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 876.541469][T25644] syz.6.6928[25644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 876.541539][T25644] syz.6.6928[25644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 876.993910][T25650] tipc: Enabled bearer , priority 0 [ 877.076737][T25654] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6931'. [ 877.087093][T25655] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6931'. [ 877.294539][T25668] tipc: Enabling of bearer rejected, failed to enable media [ 877.305184][T25668] incfs: Backing dir is not set, filesystem can't be mounted. [ 877.312820][T25668] incfs: mount failed -2 [ 877.347611][T25673] tipc: Failed to remove local publication {66,1,1}/2215213451 [ 877.355321][T25673] tipc: Failed to remove local publication {66,1,1}/2215213451 [ 877.510190][T25647] tipc: Resetting bearer [ 877.524164][T25647] tipc: Disabling bearer [ 877.887279][T25695] syz.1.6945[25695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.887334][T25695] syz.1.6945[25695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.909806][T25695] netlink: 'syz.1.6945': attribute type 3 has an invalid length. [ 877.929098][T25695] netlink: 'syz.1.6945': attribute type 3 has an invalid length. [ 878.019923][T25701] overlayfs: conflicting lowerdir path [ 878.215887][ T24] kauditd_printk_skb: 649 callbacks suppressed [ 878.215900][ T24] audit: type=1400 audit(2000000030.550:44987): avc: denied { create } for pid=25710 comm="syz.6.6949" dev="anon_inodefs" ino=106036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 878.248755][ T24] audit: type=1400 audit(2000000030.550:44988): avc: denied { read write } for pid=25704 comm="syz.1.6947" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 878.281889][ T24] audit: type=1400 audit(2000000030.550:44989): avc: denied { read write open } for pid=25704 comm="syz.1.6947" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 878.316882][ T24] audit: type=1400 audit(2000000030.550:44990): avc: denied { ioctl } for pid=25704 comm="syz.1.6947" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 878.343260][ T24] audit: type=1400 audit(2000000030.550:44991): avc: denied { read write } for pid=24218 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 878.367753][ T24] audit: type=1400 audit(2000000030.550:44992): avc: denied { read write open } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 878.394918][ T24] audit: type=1400 audit(2000000030.550:44993): avc: denied { ioctl } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 878.421274][ T24] audit: type=1400 audit(2000000030.580:44994): avc: denied { ioctl } for pid=25710 comm="syz.6.6949" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=106036 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 878.448833][ T24] audit: type=1400 audit(2000000030.580:44995): avc: denied { name_bind } for pid=25710 comm="syz.6.6949" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 878.471145][ T24] audit: type=1400 audit(2000000030.580:44996): avc: denied { map_create } for pid=25710 comm="syz.6.6949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 878.512411][T17317] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 878.762403][T17317] usb 2-1: Using ep0 maxpacket: 16 [ 878.882843][T17317] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 878.891686][T17317] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 878.901914][T17317] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 878.911140][T17317] usb 2-1: New USB device found, idVendor=1770, idProduct=fef2, bcdDevice= 0.00 [ 878.920758][T17317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.932088][T17317] usb 2-1: config 0 descriptor?? [ 879.446223][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6967'. [ 879.455361][T25764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6967'. [ 879.468565][T25764] overlayfs: missing 'lowerdir' [ 880.236957][T25785] 9pnet: Insufficient options for proto=fd [ 880.378140][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6973'. [ 880.390348][T25790] device vlan2 entered promiscuous mode [ 880.401205][T25790] device syz_tun entered promiscuous mode [ 880.430214][T25797] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6974'. [ 880.746536][T25826] Module has invalid ELF structures [ 880.799252][T25825] overlayfs: failed to clone upperpath [ 881.212175][T17317] usb 2-1: USB disconnect, device number 57 [ 881.272427][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 881.332541][ T3769] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 881.712839][ T3769] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 881.724228][ T3769] usb 10-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 881.745328][ T3769] usb 10-1: config 0 has no interface number 0 [ 881.913492][ T3769] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 881.926887][ T3769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.944249][ T3769] usb 10-1: Product: syz [ 881.953727][ T3769] usb 10-1: Manufacturer: syz [ 881.962514][ T3769] usb 10-1: SerialNumber: syz [ 881.968412][ T3769] usb 10-1: config 0 descriptor?? [ 882.532754][ T3769] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 882.539532][ T3769] uvcvideo: No valid video chain found. [ 882.551155][ T3769] usb 10-1: USB disconnect, device number 17 [ 884.792671][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 886.312456][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 891.352493][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 896.392450][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 901.432478][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 906.472452][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 909.753198][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 911.512537][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 916.552634][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 916.661819][ T24] kauditd_printk_skb: 372 callbacks suppressed [ 916.661830][ T24] audit: type=1400 audit(2000000068.992:45369): avc: denied { prog_load } for pid=25885 comm="syz.9.7001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 916.698846][ T24] audit: type=1400 audit(2000000068.992:45370): avc: denied { map_create } for pid=25886 comm="syz.3.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 916.718409][ T24] audit: type=1400 audit(2000000068.992:45371): avc: denied { map_read map_write } for pid=25886 comm="syz.3.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 916.738586][ T24] audit: type=1400 audit(2000000068.992:45372): avc: denied { prog_load } for pid=25887 comm="syz.6.7002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 916.763236][T25894] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.770476][T25894] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.779894][ T24] audit: type=1400 audit(2000000068.992:45373): avc: denied { bpf } for pid=25887 comm="syz.6.7002" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 916.801300][ T24] audit: type=1400 audit(2000000068.992:45374): avc: denied { perfmon } for pid=25887 comm="syz.6.7002" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 916.824401][T25896] device bridge_slave_1 left promiscuous mode [ 916.832049][T25896] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.840994][T25896] device bridge_slave_0 left promiscuous mode [ 916.846105][ T24] audit: type=1400 audit(2000000069.022:45375): avc: denied { read write } for pid=25884 comm="syz.5.7000" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 916.847506][T25896] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.871619][ T24] audit: type=1400 audit(2000000069.022:45376): avc: denied { open } for pid=25884 comm="syz.5.7000" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 916.903442][ T24] audit: type=1400 audit(2000000069.022:45377): avc: denied { ioctl } for pid=25884 comm="syz.5.7000" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 916.929643][ T24] audit: type=1400 audit(2000000069.022:45378): avc: denied { prog_load } for pid=25886 comm="syz.3.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 916.962425][T17317] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 917.260304][T25926] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 917.402786][T17317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.414337][T17317] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 917.425018][T17317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.459009][T17317] usb 2-1: config 0 descriptor?? [ 918.689004][T17317] zeroplus 0003:0C12:0005.0048: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0 [ 918.700393][T17317] zeroplus 0003:0C12:0005.0048: no inputs found [ 918.702894][T25932] 9pnet: Insufficient options for proto=fd [ 918.715537][ T297] hid-generic 0003:0000:0020.0049: unknown main item tag 0x0 [ 918.723020][ T297] hid-generic 0003:0000:0020.0049: unknown main item tag 0x0 [ 918.730473][ T297] hid-generic 0003:0000:0020.0049: unknown main item tag 0x0 [ 918.738735][ T297] hid-generic 0003:0000:0020.0049: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 918.824610][T25895] udc-core: couldn't find an available UDC or it's busy [ 918.831609][T25895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 918.839847][ T903] usb 2-1: USB disconnect, device number 58 [ 919.547547][T25937] SELinux: policydb version -404807509 does not match my version range 15-33 [ 919.556489][T25937] SELinux: failed to load policy [ 919.600137][T25941] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7013'. [ 919.713292][T25945] syz.5.7015[25945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 919.713356][T25945] syz.5.7015[25945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 919.943832][T25953] netlink: 324 bytes leftover after parsing attributes in process `syz.9.7017'. [ 920.124324][T25960] syz.6.7019[25960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.124404][T25960] syz.6.7019[25960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.140328][T25960] syz.6.7019[25960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.151857][T25960] syz.6.7019[25960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.242218][T25965] netlink: 'syz.6.7021': attribute type 1 has an invalid length. [ 920.261857][T25965] netlink: 'syz.6.7021': attribute type 1 has an invalid length. [ 920.270333][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7021'. [ 920.486219][T25982] tipc: Started in network mode [ 920.491122][T25982] tipc: Own node identity ac14140f, cluster identity 4711 [ 920.498340][T25982] tipc: New replicast peer: 255.255.255.83 [ 920.504231][T25982] tipc: Enabled bearer , priority 10 [ 921.592477][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 921.632413][ T3769] tipc: 32-bit node address hash set to f1414ac [ 921.663651][ T24] kauditd_printk_skb: 322 callbacks suppressed [ 921.663662][ T24] audit: type=1400 audit(2000000074.002:45701): avc: denied { create } for pid=25989 comm="syz.9.7027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 921.703852][T26016] syz.1.7035[26016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 921.703907][T26016] syz.1.7035[26016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 921.716711][ T24] audit: type=1400 audit(2000000074.032:45702): avc: denied { prog_load } for pid=26014 comm="syz.1.7035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 921.792520][ T24] audit: type=1400 audit(2000000074.032:45703): avc: denied { bpf } for pid=26014 comm="syz.1.7035" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 921.813871][ T24] audit: type=1400 audit(2000000074.032:45704): avc: denied { perfmon } for pid=26014 comm="syz.1.7035" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 921.839801][ T24] audit: type=1400 audit(2000000074.032:45705): avc: denied { create } for pid=26014 comm="syz.1.7035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 921.882186][ T24] audit: type=1400 audit(2000000074.032:45706): avc: denied { setopt } for pid=26014 comm="syz.1.7035" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 921.922526][ T24] audit: type=1400 audit(2000000074.032:45707): avc: denied { write } for pid=26014 comm="syz.1.7035" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 921.948945][ T24] audit: type=1400 audit(2000000074.042:45708): avc: denied { prog_load } for pid=26014 comm="syz.1.7035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 922.174768][T26039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7040'. [ 922.183817][ T24] audit: type=1400 audit(2000000074.042:45709): avc: denied { bpf } for pid=26014 comm="syz.1.7035" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 922.207234][ T24] audit: type=1400 audit(2000000074.042:45710): avc: denied { perfmon } for pid=26014 comm="syz.1.7035" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 922.253098][T26044] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7042'. [ 922.272500][T26044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7042'. [ 922.453796][T26046] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 922.465342][T26046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 922.593616][T26052] netlink: 'syz.3.7044': attribute type 15 has an invalid length. [ 922.822570][T26074] syz.1.7051[26074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 922.822668][T26074] syz.1.7051[26074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 922.862423][ T910] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 923.084891][T26071] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 923.792771][ T910] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 923.802242][ T910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.825541][ T910] usb 10-1: Product: syz [ 923.831180][ T910] usb 10-1: Manufacturer: syz [ 923.856600][ T910] usb 10-1: SerialNumber: syz [ 923.983026][T26113] tmpfs: Unknown parameter '8' [ 927.302470][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 927.338342][ T903] usb 10-1: USB disconnect, device number 18 [ 927.347175][ T24] kauditd_printk_skb: 404 callbacks suppressed [ 927.347188][ T24] audit: type=1400 audit(2000000079.682:46115): avc: denied { read write } for pid=24218 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 927.543275][ T24] audit: type=1400 audit(2000000079.682:46116): avc: denied { open } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 927.731801][ T24] audit: type=1400 audit(2000000079.682:46117): avc: denied { ioctl } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 927.788971][ T24] audit: type=1400 audit(2000000079.722:46118): avc: denied { prog_load } for pid=26177 comm="syz.5.7080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 927.812534][ T24] audit: type=1400 audit(2000000079.722:46119): avc: denied { name_bind } for pid=26177 comm="syz.5.7080" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 927.834016][ T24] audit: type=1400 audit(2000000079.722:46120): avc: denied { node_bind } for pid=26177 comm="syz.5.7080" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 927.878154][ T24] audit: type=1400 audit(2000000079.722:46121): avc: denied { read } for pid=26177 comm="syz.5.7080" dev="nsfs" ino=4026533366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 927.901487][T26200] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7080'. [ 927.912045][ T24] audit: type=1400 audit(2000000079.722:46122): avc: denied { open } for pid=26177 comm="syz.5.7080" path="net:[4026533366]" dev="nsfs" ino=4026533366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 927.935688][ T24] audit: type=1400 audit(2000000079.722:46123): avc: denied { create } for pid=26177 comm="syz.5.7080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 927.955897][ T24] audit: type=1400 audit(2000000079.722:46124): avc: denied { execmem } for pid=26178 comm="syz.1.7079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 928.142417][ T3759] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 928.263597][T26205] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7086'. [ 928.712462][ T3759] usb 2-1: not running at top speed; connect to a high speed hub [ 928.802810][ T3759] usb 2-1: config 22 has an invalid interface number: 116 but max is 0 [ 928.820283][ T3759] usb 2-1: config 22 has no interface number 0 [ 928.857653][ T3759] usb 2-1: config 22 interface 116 altsetting 10 has an invalid endpoint with address 0xC3, skipping [ 928.877822][ T3759] usb 2-1: config 22 interface 116 has no altsetting 0 [ 929.107763][T26221] overlayfs: failed to clone upperpath [ 929.262758][ T3759] usb 2-1: string descriptor 0 read error: -22 [ 929.270076][ T3759] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=43.46 [ 929.359218][ T3759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.533311][ T3759] usb 2-1: bad CDC descriptors [ 929.636746][T26229] netlink: 116 bytes leftover after parsing attributes in process `syz.9.7094'. [ 929.660640][ T3759] usb 2-1: USB disconnect, device number 59 [ 930.004466][T26253] xt_bpf: check failed: parse error [ 930.266991][T26266] netem: change failed [ 930.293693][T26270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=26270 comm=syz.1.7106 [ 930.379279][T26281] bridge0: port 3(macsec1) entered blocking state [ 930.403241][T26281] bridge0: port 3(macsec1) entered disabled state [ 930.753063][T26318] overlayfs: unrecognized mount option "euid=00000000000000000000" or missing value [ 930.959891][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7123'. [ 931.259809][T26349] overlayfs: failed to resolve './file1': -2 [ 932.312568][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 932.360833][ T24] kauditd_printk_skb: 531 callbacks suppressed [ 932.360844][ T24] audit: type=1400 audit(2000000084.692:46656): avc: denied { map_create } for pid=26377 comm="syz.1.7139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 932.386464][ T24] audit: type=1400 audit(2000000084.722:46657): avc: denied { map_read map_write } for pid=26377 comm="syz.1.7139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 932.406876][ T24] audit: type=1400 audit(2000000084.722:46658): avc: denied { prog_load } for pid=26377 comm="syz.1.7139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 932.426218][ T24] audit: type=1400 audit(2000000084.722:46659): avc: denied { bpf } for pid=26377 comm="syz.1.7139" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 932.457115][ T24] audit: type=1400 audit(2000000084.722:46660): avc: denied { perfmon } for pid=26377 comm="syz.1.7139" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 932.508908][ T24] audit: type=1326 audit(2000000084.782:46661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26377 comm="syz.1.7139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4350dbe9 code=0x7ffc0000 [ 932.605457][T26381] overlayfs: failed to clone upperpath [ 932.622429][ T24] audit: type=1326 audit(2000000084.782:46662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26377 comm="syz.1.7139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4350dbe9 code=0x7ffc0000 [ 932.780122][ T24] audit: type=1326 audit(2000000084.782:46663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26377 comm="syz.1.7139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f3f4350dbe9 code=0x7ffc0000 [ 933.005716][T26393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7144'. [ 933.072407][ T24] audit: type=1326 audit(2000000084.782:46664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26377 comm="syz.1.7139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4350dbe9 code=0x7ffc0000 [ 933.126947][T26399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.613619][T26420] fuse: Bad value for 'fd' [ 933.750439][T26439] device wg2 entered promiscuous mode [ 933.833289][T26442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26442 comm=syz.5.7159 [ 933.847715][T26442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=26442 comm=syz.5.7159 [ 933.852411][ T3759] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 934.252763][ T3759] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.263897][ T3759] usb 2-1: config 0 interface 0 has no altsetting 0 [ 934.270636][ T3759] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 934.281857][ T3759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.296199][ T3759] usb 2-1: config 0 descriptor?? [ 934.562485][T17315] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 934.594399][T26461] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 934.602692][T26461] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 934.611828][T26461] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 934.754948][T26460] netem: change failed [ 934.766489][ T3759] hid-led 0003:04D8:F372.004A: hidraw0: USB HID v80.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 934.785839][ T3759] hid-led 0003:04D8:F372.004A: Greynut Luxafor initialized [ 934.812700][T17315] usb 10-1: Using ep0 maxpacket: 16 [ 934.872694][T26452] udc-core: couldn't find an available UDC or it's busy [ 934.872698][T26453] udc-core: couldn't find an available UDC or it's busy [ 934.872717][T26453] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 934.879700][T26452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 934.942546][T17315] usb 10-1: unable to get BOS descriptor or descriptor too short [ 934.971101][ T3759] usb 2-1: USB disconnect, device number 60 [ 934.979169][ T297] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 934.988571][ T297] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 934.997551][ T297] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 935.006475][ T297] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 935.012419][T17315] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 935.014913][ T297] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 935.022100][T17315] usb 10-1: can't read configurations, error -71 [ 935.037397][ T297] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 935.045866][ T297] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 935.054183][ T297] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 935.062648][ T297] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 935.070819][ T297] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 935.079061][ T297] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 935.087366][ T297] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 935.095505][ T297] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 935.103714][ T297] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 935.111938][ T297] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 935.120162][ T297] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 935.128382][ T297] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 935.136699][ T297] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 935.421399][T26481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7171'. [ 935.430411][T26481] IPv6: NLM_F_CREATE should be specified when creating new route [ 935.438233][T26481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 935.445444][T26481] IPv6: NLM_F_CREATE should be set when creating new route [ 935.452664][T26481] IPv6: NLM_F_CREATE should be set when creating new route [ 935.573372][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 935.882453][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 935.978826][T26509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=26509 comm=syz.6.7178 [ 937.352484][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 937.407872][ T24] kauditd_printk_skb: 514 callbacks suppressed [ 937.407886][ T24] audit: type=1326 audit(2000000089.742:47177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26548 comm="syz.1.7189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4350dbe9 code=0x7ffc0000 [ 937.472648][ T24] audit: type=1326 audit(2000000089.742:47178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26548 comm="syz.1.7189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4350dbe9 code=0x7ffc0000 [ 937.521975][T26494] audit: audit_backlog=65 > audit_backlog_limit=64 [ 937.530482][T26494] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 937.538501][T26494] audit: backlog limit exceeded [ 937.545887][T26553] audit: audit_backlog=65 > audit_backlog_limit=64 [ 937.546006][T26494] audit: audit_backlog=65 > audit_backlog_limit=64 [ 937.559472][T26494] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 937.567538][T26494] audit: backlog limit exceeded [ 937.567627][ T24] audit: type=1326 audit(2000000089.782:47179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26548 comm="syz.1.7189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f4350dbe9 code=0x7ffc0000 [ 937.853525][T26556] incfs: Backing dir is not set, filesystem can't be mounted. [ 937.879517][T26556] incfs: mount failed -2 [ 938.284536][T26563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7192'. [ 939.127616][T26605] user requested TSC rate below hardware speed [ 939.684972][T26645] binder: BINDER_SET_CONTEXT_MGR already set [ 939.691031][T26645] binder: 26644:26645 ioctl 4018620d 200000000100 returned -16 [ 939.705317][T26645] binder: BINDER_SET_CONTEXT_MGR already set [ 939.711381][T26645] binder: 26644:26645 ioctl 4018620d 200000004a80 returned -16 [ 940.238915][T26680] overlayfs: failed to clone upperpath [ 940.312455][ T297] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 940.482491][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 940.492412][ T3759] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 940.552409][ T297] usb 10-1: Using ep0 maxpacket: 8 [ 940.672447][ T297] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 940.682481][ T297] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 940.692323][ T297] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 940.708177][ T297] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 940.719081][ T297] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.732746][ T297] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 940.741938][ T297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.821928][T26710] ================================================================== [ 940.830037][T26710] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 940.839229][T26710] Read of size 1 at addr ffff8881258c73d8 by task syz.6.7252/26710 [ 940.847090][T26710] [ 940.849401][T26710] CPU: 0 PID: 26710 Comm: syz.6.7252 Tainted: G W syzkaller #0 [ 940.852456][ T3759] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 940.858225][T26710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 940.858230][T26710] Call Trace: [ 940.858248][T26710] __dump_stack+0x21/0x24 [ 940.858266][T26710] dump_stack_lvl+0x169/0x1d8 [ 940.866562][ T3759] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 940.876453][T26710] ? show_regs_print_info+0x18/0x18 [ 940.876467][T26710] ? thaw_kernel_threads+0x220/0x220 [ 940.876492][T26710] ? unwind_get_return_address+0x4d/0x90 [ 940.880865][ T3759] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 940.884081][T26710] print_address_description+0x7f/0x2c0 [ 940.884096][T26710] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 940.884116][T26710] kasan_report+0xe2/0x130 [ 940.889049][ T3759] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 940.899261][T26710] ? xfrm_policy_addr_delta+0x55/0x310 [ 940.899275][T26710] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 940.899291][T26710] __asan_report_load1_noabort+0x14/0x20 [ 940.899310][T26710] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 940.904900][ T3759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.909803][T26710] xfrm_policy_inexact_insert_node+0x5a7/0xb50 [ 940.909823][T26710] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 940.993795][ T3759] usb 2-1: config 0 descriptor?? [ 940.997731][T26710] xfrm_policy_inexact_insert+0x70/0x1130 [ 940.997749][T26710] ? __get_hash_thresh+0x10c/0x420 [ 941.013460][T26710] ? policy_hash_bysel+0x110/0x4f0 [ 941.018554][T26710] xfrm_policy_insert+0x126/0x9a0 [ 941.023144][T26678] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 941.023603][T26710] ? xfrm_policy_construct+0x54f/0x1f00 [ 941.036039][T26710] xfrm_add_policy+0x4d1/0x830 [ 941.040788][T26710] ? xfrm_dump_sa_done+0xc0/0xc0 [ 941.043128][ T3759] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 941.045716][T26710] xfrm_user_rcv_msg+0x450/0x6d0 [ 941.045735][T26710] ? xfrm_netlink_rcv+0x90/0x90 [ 941.062747][T26710] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 941.068111][T26710] netlink_rcv_skb+0x1e0/0x430 [ 941.072956][T26710] ? xfrm_netlink_rcv+0x90/0x90 [ 941.077809][T26710] ? netlink_ack+0xb80/0xb80 [ 941.082411][T26710] ? mutex_trylock+0xa0/0xa0 [ 941.086987][T26710] ? __netlink_lookup+0x387/0x3b0 [ 941.091989][T26710] xfrm_netlink_rcv+0x72/0x90 [ 941.096646][T26710] netlink_unicast+0x876/0xa40 [ 941.101395][T26710] netlink_sendmsg+0x88d/0xb30 [ 941.106136][T26710] ? schedule_preempt_disabled+0x20/0x20 [ 941.111746][T26710] ? netlink_getsockopt+0x530/0x530 [ 941.116927][T26710] ? security_socket_sendmsg+0x82/0xa0 [ 941.122386][T26710] ? netlink_getsockopt+0x530/0x530 [ 941.127567][T26710] ____sys_sendmsg+0x5a2/0x8c0 [ 941.132309][T26710] ? __sys_sendmsg_sock+0x40/0x40 [ 941.137319][T26710] ? import_iovec+0x7c/0xb0 [ 941.141814][T26710] ___sys_sendmsg+0x1f0/0x260 [ 941.146471][T26710] ? __sys_sendmsg+0x250/0x250 [ 941.151223][T26710] ? __fdget+0x1a1/0x230 [ 941.155460][T26710] __x64_sys_sendmsg+0x1e2/0x2a0 [ 941.160380][T26710] ? ___sys_sendmsg+0x260/0x260 [ 941.165236][T26710] ? switch_fpu_return+0x197/0x340 [ 941.170329][T26710] do_syscall_64+0x31/0x40 [ 941.174730][T26710] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 941.180597][T26710] RIP: 0033:0x7f864d72fbe9 [ 941.184998][T26710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.204587][T26710] RSP: 002b:00007f864c198038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.212987][T26710] RAX: ffffffffffffffda RBX: 00007f864d966fa0 RCX: 00007f864d72fbe9 [ 941.220945][T26710] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 941.228898][T26710] RBP: 00007f864d7b2e19 R08: 0000000000000000 R09: 0000000000000000 [ 941.236851][T26710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.245067][T26710] R13: 00007f864d967038 R14: 00007f864d966fa0 R15: 00007ffd95962598 [ 941.253029][T26710] [ 941.255348][T26710] Allocated by task 26710: [ 941.259766][T26710] __kasan_kmalloc+0xda/0x110 [ 941.264452][T26710] __kmalloc+0x1a7/0x330 [ 941.268674][T26710] sk_prot_alloc+0xb2/0x340 [ 941.273157][T26710] sk_alloc+0x38/0x4e0 [ 941.277207][T26710] pfkey_create+0x12a/0x660 [ 941.281687][T26710] __sock_create+0x38d/0x770 [ 941.286264][T26710] __sys_socket+0xec/0x190 [ 941.290665][T26710] __x64_sys_socket+0x7a/0x90 [ 941.295331][T26710] do_syscall_64+0x31/0x40 [ 941.299728][T26710] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 941.305604][T26710] [ 941.307919][T26710] The buggy address belongs to the object at ffff8881258c7000 [ 941.307919][T26710] which belongs to the cache kmalloc-1k of size 1024 [ 941.321952][T26710] The buggy address is located 984 bytes inside of [ 941.321952][T26710] 1024-byte region [ffff8881258c7000, ffff8881258c7400) [ 941.335299][T26710] The buggy address belongs to the page: [ 941.340916][T26710] page:ffffea0004963000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1258c0 [ 941.351122][T26710] head:ffffea0004963000 order:3 compound_mapcount:0 compound_pincount:0 [ 941.359424][T26710] flags: 0x4000000000010200(slab|head) [ 941.364866][T26710] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 941.373449][T26710] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 941.382025][T26710] page dumped because: kasan: bad access detected [ 941.388420][T26710] page_owner tracks the page as allocated [ 941.394121][T26710] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1843, ts 71744013495, free_ts 71574986978 [ 941.413995][T26710] prep_new_page+0x179/0x180 [ 941.418570][T26710] get_page_from_freelist+0x2235/0x23d0 [ 941.424194][T26710] __alloc_pages_nodemask+0x268/0x5f0 [ 941.429551][T26710] new_slab+0x84/0x3f0 [ 941.433617][T26710] ___slab_alloc+0x2a6/0x450 [ 941.438208][T26710] __slab_alloc+0x63/0xa0 [ 941.442537][T26710] __kmalloc_track_caller+0x1ef/0x320 [ 941.447903][T26710] __alloc_skb+0xdc/0x520 [ 941.452226][T26710] inet6_rt_notify+0x287/0x470 [ 941.456990][T26710] fib6_add+0x214b/0x3bf0 [ 941.461303][T26710] ip6_route_add+0x89/0x130 [ 941.465787][T26710] addrconf_add_linklocal+0x3cf/0x620 [ 941.471137][T26710] addrconf_addr_gen+0x48b/0x5b0 [ 941.476052][T26710] addrconf_dev_config+0x293/0x510 [ 941.481140][T26710] addrconf_notify+0x9d8/0xe90 [ 941.485898][T26710] raw_notifier_call_chain+0x90/0x100 [ 941.491245][T26710] page last free stack trace: [ 941.495902][T26710] free_unref_page_prepare+0x2b7/0x2d0 [ 941.501342][T26710] __free_pages+0x14b/0x380 [ 941.505825][T26710] __vunmap+0x84d/0x9d0 [ 941.509966][T26710] vfree+0x61/0x90 [ 941.513670][T26710] kcov_close+0x2b/0x50 [ 941.517803][T26710] __fput+0x2fb/0x770 [ 941.521767][T26710] ____fput+0x15/0x20 [ 941.525724][T26710] task_work_run+0x127/0x190 [ 941.530294][T26710] do_exit+0xa4f/0x2480 [ 941.534426][T26710] do_group_exit+0x141/0x310 [ 941.538993][T26710] __x64_sys_exit_group+0x3f/0x40 [ 941.543993][T26710] do_syscall_64+0x31/0x40 [ 941.548388][T26710] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 941.554255][T26710] [ 941.556559][T26710] Memory state around the buggy address: [ 941.562169][T26710] ffff8881258c7280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.570219][T26710] ffff8881258c7300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.578295][T26710] >ffff8881258c7380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 941.586331][T26710] ^ [ 941.593246][T26710] ffff8881258c7400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 941.601291][T26710] ffff8881258c7480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 941.609326][T26710] ================================================================== [ 941.617366][T26710] Disabling lock debugging due to kernel taint [ 942.392507][ T4045] Trying to write to read-only block-device loop3 (partno 0) [ 943.059956][ T3759] usb 10-1: USB disconnect, device number 21 [ 943.068134][ T24] kauditd_printk_skb: 353 callbacks suppressed [ 943.068145][ T24] audit: type=1400 audit(2000000095.402:47522): avc: denied { read write } for pid=24218 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 943.098655][ T24] audit: type=1400 audit(2000000095.402:47523): avc: denied { read write open } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 943.124823][ T24] audit: type=1400 audit(2000000095.402:47524): avc: denied { ioctl } for pid=24218 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 943.228868][ T297] usb 2-1: USB disconnect, device number 61 [ 947.432462][ T4045] Trying to write to read-only block-device loop3 (partno 0)