f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$incfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018ca19002020702500000000002020207b1af8ff00000000bfa100000000000007010000b440ffffb782000008000000b703000000000083850000006dbcc40095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1910.867866][T10308] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 1910.888261][T10308] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 03:38:26 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) listen(0xffffffffffffffff, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) fsopen(&(0x7f0000000080)='configfs\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) [ 1911.019005][T10312] syz-executor.4[10312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 03:38:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) [ 1911.019186][T10312] syz-executor.4[10312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1911.081993][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.119490][ T5324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1911.210758][ T5324] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1911.224450][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.301554][ T5324] usb 4-1: config 0 descriptor?? [ 1911.902191][ T5324] usbhid 4-1:0.0: can't add hid device: -71 [ 1911.908254][ T5324] usbhid: probe of 4-1:0.0 failed with error -71 [ 1911.951636][ T5324] usb 4-1: USB disconnect, device number 35 03:38:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:28 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000001d00fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa1e5000020000007020000f8ffffffb7030000080001000000950000ec00"/67], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001ac0)='sys_enter\x00', r3}, 0x10) io_destroy(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000001d00fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa1e5000020000007020000f8ffffffb7030000080001000000950000ec00"/67], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001ac0)='sys_enter\x00', r3}, 0x10) (async) io_destroy(0x0) (async) 03:38:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='ext4_mark_inode_dirty\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x18000000) 03:38:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1912.550740][T10325] loop3: detected capacity change from 0 to 2048 03:38:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000800), &(0x7f0000000840)='%pS \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='ext4_fc_track_inode\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000050b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='ext4_fc_track_inode\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='ext4_fc_track_inode\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r10) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r11, @ANYBLOB="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", @ANYRES32=r1], 0x20}}, 0x0) [ 1912.634705][T10325] Alternate GPT is invalid, using primary GPT. [ 1912.643891][T10325] loop3: p1 p2 p3 03:38:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x4330e000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) syz_clone3(&(0x7f0000000280)={0x44224000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0282, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xcc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000540)="0293907fc109c84d27b0dcd5bfff6c96d8c43df6a782cad705ed20f11cfad2e9118a7c80c14b119a021959f49eedbc34e4c51c8c9b97031d9429c7d9464bd18616372d41e3", 0x45}, {&(0x7f0000000640)="412d8a1f17f4d4d780b194ac18cf5b47c6ffd641778aa4926a1e10ca0a4be3879501a06f88fbf3e8da32c85ae4b3f89262ef8c36009e050eb00150ecc2e21cf2fe95a5ce233cfaf64ad64214c67fe4b60e68859989bd3f257559d4a1f0748dd39967c1a0505e481848a1f2a6ac4937be7d1e258fe00e5bdbe090890902930f3775fa1603f9b67b7ef96de24d3012f566c31e83dc61aa46c917b839cf791c475a7995cc4c24a32264b84a449a6fff668433c5c84c", 0xb4}], 0x2, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0x6, "62e7be54"}, {0x1, 0x12, "bd028d4471867f549ca93fbb167dd761"}, {0x6, 0x6, "1bba031f"}, {0x2, 0x7, "18d7694f13"}]}, @lsrr={0x83, 0xb, 0xa7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @cipso={0x86, 0x18, 0x3, [{0x6, 0x8, "1bd2a1345af3"}, {0x1, 0xa, "c088741edf540602"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xe6, 0x0, 0x1, [0x2, 0xffff2fb4, 0xcca5, 0xfff, 0x4, 0x40]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x7e, 0x1, 0x1, [{@local, 0x3}, {@private=0xa010102, 0x4}, {@remote, 0x2}]}, @timestamp={0x44, 0x14, 0x59, 0x0, 0xa, [0x3, 0x1000, 0x7, 0x8]}, @timestamp={0x44, 0x10, 0xa9, 0x0, 0x0, [0x6, 0x1, 0x5]}, @rr={0x7, 0x13, 0xc6, [@empty, @private=0xa010102, @empty, @private=0xa010100]}, @ssrr={0x89, 0x2b, 0xf5, [@local, @remote, @multicast2, @multicast1, @multicast1, @private=0xa010101, @broadcast, @multicast1, @multicast2, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x44, 0x5, 0x3, 0xf, [{@private=0xa010101, 0x7}, {@multicast2, 0x8}, {@multicast2, 0x4}, {@multicast2, 0xfffffffc}, {@broadcast, 0x3ff}, {@local, 0x3ff}, {@loopback, 0xfffffff8}, {@remote, 0x1}]}, @end, @timestamp={0x44, 0xc, 0xdf, 0x0, 0xb, [0x1, 0x6]}, @cipso={0x86, 0x2c, 0x3, [{0x5, 0xc, "d180b7f87806a9f0f061"}, {0x0, 0x10, "d10451233a08f3d311b136eac0fb"}, {0x6, 0xa, "9b7bca4f287078c2"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0xb, 0x8000000000000002, [{0x2, 0x5, "2386aa"}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x2, 0x11, "c4a670b225bd65741f52d1331bc9b0"}, {0x1, 0xe, "27131c10801ead5c245e9ad3"}]}, @noop, @cipso={0x86, 0x11, 0xfffffffffffffffe, [{0x2, 0xb, "8dabfe17a1549b5b32"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@rr={0x7, 0x17, 0x7, [@remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @remote]}, @end, @noop, @end, @timestamp_addr={0x44, 0x34, 0x52, 0x1, 0x0, [{@private=0xa010102}, {@empty, 0x8}, {@multicast1, 0x4}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@private=0xa010100, 0x8}]}, @end, @cipso={0x86, 0x55, 0x3, [{0x2, 0x3, 't'}, {0x6, 0x2}, {0x1, 0xa, "0c595016d8ed02c3"}, {0x0, 0xd, "2a59574fa70546d4ac1c3a"}, {0x2, 0x10, "e80d2ae3534af09497c12687e23a"}, {0x6, 0x3, 's'}, {0x2, 0x11, "28415478b4df3cb16cf4a17ce96414"}, {0x1, 0x6, "d6b9e255"}, {0x0, 0x9, "d453266781005c"}]}, @timestamp={0x44, 0xc, 0xba, 0x0, 0x6, [0x3f48, 0xffff]}, @rr={0x7, 0x1b, 0xda, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @remote]}]}}}], 0x360}}, {{&(0x7f0000000740)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000780)="931c924e2c74e2b83db8ae3486c3268cb955461325b5ca5d39e8354922a56e4ef7a13b1f8ddc10e74f6a32e2fcce76763f29ddffcfe25f33b07421b599bc584afd35275777e462f9bb7c29f7bb248b4f70625afcc7d742fe8bc23668afc5e86f78beccb1bccd54a083ea3170520f714a0728fbfe95538584ab", 0x79}, {&(0x7f0000000800)="00ccfac22fd96e3b8ca6c1059fb8922ad9067457fa0b5cbcbb4f330a0e7516dd7951", 0x22}, {&(0x7f0000000840)="430308ad2a2e8bb96cd7406aae225f9a18642da63a332488cdf82579f984e25dee9fe8efebc1056534e392216e3892daf67784f25d92970540687af6d899eeeb927ca4e6efc3566b4de429a0200fedc938c409a5d71fdf10053d6cd103a9651cc1050bed655ef1e3ff048aa6fef99e4af91b285925e6633acb64ac4c2817c2e7ec8e092f14a6645351d23bf9bfa9f8299cb810fd75f8df6545070eecc5ccf2134ee7adf96edea0e4622422b3f26c9179c4faf50dd076c276da5a95f2ee0269c40a7eee8f15b7951ceb2b7d17584f30", 0xcf}, {&(0x7f0000000dc0)="ff78a57cbe9f9bd819e804a0a1c8d1cb478981537e8eea33cc5dd60589e03ea9245137c478990590ed0060a3e867db9340aadc9f0863e09ff2014e5dbe2de61bf10b70d6bb3aed85f0e294087aaf421daa0252566e98f3d54d1891386def88d1f333df7f58c68cbcc5cc6f7571dde57adcf8017fd00e6baebea2372d12a3cbce2e10da903f40d061023dc56813a9490f7eecfb7b15a1655df166a557d0cd2f38624952a80c2ab3", 0xa7}, {&(0x7f0000000940)="01e9fbccf89b47bfcf66805a019b80e0c6f4576c58b7b41c149e611787917089394f1be2515c8af80a60d60ab5068b9aa48569998468d3087bb4858be25218d6f76c00ad0c12266af088b37b240ee158187bbcbf0a1da4a45972f07d51344e2285a647d1126734dc888ccc", 0x6b}], 0x5, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa2e20f5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1360}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@generic={0x94, 0x7, "a4e8625c03"}, @lsrr={0x83, 0x7, 0x85, [@loopback]}, @noop, @rr={0x7, 0x7, 0xd2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x17, 0xe7, [@broadcast, @broadcast, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x24, 0xc9, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@loopback, 0x3}, {@broadcast, 0x20}, {@remote}]}, @timestamp_addr={0x44, 0x54, 0x27, 0x1, 0xc, [{@private=0xa010102, 0x6}, {@loopback, 0x800000}, {@multicast2}, {@private=0xa010102, 0x5}, {@private=0xa010102, 0xa35}, {@empty, 0x8000}, {@multicast2, 0xcab8}, {@multicast2, 0x200}, {@rand_addr=0x64010101, 0x80000001}, {@multicast2, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0x1, [{@empty, 0x5}]}]}}}], 0x198}}], 0x3, 0x4000000) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0) 03:38:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000100)={[{@nombcache}, {@resgid={'resgid', 0x41}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c1vFVUbAPBnpp+07/u2kDcqLqSJMZAoLS1giDER9oTgx85VpYUghRJao0USS4IbE+PGhYkrF+J/oSRuXbh14caVISHGsBBD5Jq5nSnT23tLv+69pff3S4aeM8Odc6b04Zl7es7cADrWSPZHGrE/Iq4mEUOlY92RHxxZ+nv3/7xxLtuSqFTe/iOJG58ki+VzJfnXwfzF/wxF8nMasa9rdbtzC9cvTc7MTF/L62Pzl6+OzS1cP3zx8uSF6QvTVyZenThx/NjxE+NHtnR9aal8+tb7Hw59dubdb79+mIx/9+uZJE7Go7xv2XXVvrZvSy1n37ORqCx5UN6ffV9PbPHcO8VfQ8XPyWNJ7Q52rPP5z2NPRDwbQ9FV+tccik/fbGvngKaqJFHkKKDjJJuK//7t7wjQYsV9QPHevt774NXSJt+VAK1w79TSAMBS7PdERBH/3Utjg9FfHRsYuJ+sGOdJImJrI3NLsjZ++vHMrWyLBuNwQHMs3ixGuWvzf1KNzeHor9YG7qcr4j8tbdn+tzbZ/khNXfxD6yzejIjn8vzfGxuK/5FS/L+3yfbFPwAAAAAAAGyfO6ci4pV68//S5fk/vXXm/wxGxMltaP/Jv/9L7+aFZBuaA0runYp4ve783+U5vsNdee2/1fkAPcn5izPTRyLifxFxKHr6svp4zXnLM4QPf77vq0btl+f/ZVvWfjEXMD/T3e6ahbhTk/OTW71uIOLezYjnq/N/D+R7Vs7/yfJ/Uif/Z/F9dZ1t7Hvp9tlGx54c/0CzVL6JOFg3/z++3U7Wfj7HWPV+YKy4K1jthY+/+L5R++If2ifL/wNrx39fUn5ez9zGzt8bEUcXuiuNjm/2/r83eaerOH/mo8n5+WvjEb3J6dX7JzbWZ9itingo4iWL/0Mvrj3+t3z/X4rDPRGxuM42n3k0+FujY/I/tE8W/1Nr5//hlfl/44WJ28M/NGr/7Lry/7FqTj+U7zH+B2Wrn8ex3gBtS3cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CmXRsR/IklHl8tpOjoaMRgR/4+BdGZ2bv7l87MfXJnKjlU//z8tPul3aKmeFJ//P1yqT9TUj0bE3oj4smtPtT56bnZmqt0XDwAAAAAAAAAAAAAAAAAAADvEYHXNf6Wvdv1/5veudvcOaLru/Kt4h87TvelXVvq2tSNAy20+/oGn3frjv6ep/QBar3H8P3hYqWppd4AWcv8PnWuT8e/XBbALyP/QqdY5ptff7H4A7SD/AwAAAADArrL3wJ1fkohYfG1Pdcv05sdM9ofdLW13B4C2MYcXOlf3bLt7ALSL9/hAslz6u+5i/8az/5PmdAgAAAAAAAAAAAAAWOXgfuv/oVOtvf7f3H7YzdZY/18v+D0uAHaRxh/9IffDbuc9PvCkbG/9PwAAAAAAAAAAAADsAP3XL03OzExfm1t4+gpv7IxubKywOLkjurGthUfNOXNPROyMC2x1oXgERxu70eb/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGX/BgAA//+hgid9") [ 1912.855388][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:38:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) listen(0xffffffffffffffff, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) fsopen(&(0x7f0000000080)='configfs\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) [ 1912.976066][T10351] syz-executor.1[10351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1912.976265][T10351] syz-executor.1[10351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1912.984241][T10348] loop3: detected capacity change from 0 to 1024 03:38:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) [ 1913.156009][T10348] EXT4-fs (loop3): Unrecognized mount option "resgidA0x0000000000000000" or missing value 03:38:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204802, 0x0) stat(0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:30 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) r1 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r3, 0x81, 0xfffffffffffffffd, 0x1}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) r8 = dup3(r7, r6, 0x0) sendmsg$key(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x38}}, 0x0) (async) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r3, 0x81, 0xfffffffffffffffd, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = dup3(r7, r6, 0x0) sendmsg$key(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x38}}, 0x0) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:30 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000440)=[@clear_death], 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0003020000000203684e43891cf24a1ed54195fa31c9d1d3fb8f6700c5d212e6a2611d3c1ed7097016c9d56aec1368e7577194d149e4963395f5224b4e105fc0bc9bca4aaf22257547fcce8a8dfd29c66d52339d84d9cd9c8380cfc14eb338acd0402305233f6b1c2c5715d9a02856cdacc5c24a"], 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) mremap(&(0x7f0000b73000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000058a000/0x1000)=nil) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x24, 0xdf, {0xdf, 0xf, "58e85552e4c6d15bb3780f94e70b11e1728f9c6edda3fc6f3a0f5db64c41489df1dc571c454ff181170d0957d6b6e62ec91e079c668835487ea9110f566ca9c2c15f073681ac7db3a97624e0606100520414fff21c6aad00609188cd313993b71f3d431fe5008354fcdd25d38a02b3326e9ac4ea0e6a8306429ac7e18b2734b96a514aafee18702fc0c6855ffdd32edbf70aede44a220d79283b28f1f5e1b3fb3e673bae8c5e0a3ee9b0dd94eface542ae8325ba1375c149174dcc69dcf5ac92fac6cfacce895943b7640a8acdeac32806fb9ec76869521cc45fa72945"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000040)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3a, 0x8, 0x3f, 0x3, "fc636610", "b9874287"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x5, 0x2, 0xfb, 0xc6, 0xff, 0x800}}}, &(0x7f0000000980)={0x84, &(0x7f0000000600)={0x0, 0x3, 0xb3, "f68560c704bf2c265c229bc40232af2fded2d0117d3e6d8df11d54604acf375b27fb70e21a6245fda6d8611c08774c81e1af97b5d48fe65519d212fb12733da235d8546009ff56c68d1303a4dbb2b0469000e29bdd1736c4c7f3aa35a9c366b91acd5a8164e2f1af22e416ab7caaa9f9954a5bd51b4ef401543c22465792f51b4475f1517d50e83e2239bc1e6fb8f81cf6fa5580bd1d20aa8bf1abde990b7a37c8a93cb16be6438592d5f972c44f10a6dd38d0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3c}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x1, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "26f4"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "ea79"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x40}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xfd}}) 03:38:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0xde34) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000ecff000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000001000b702000000080000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x5, &(0x7f0000000440)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x2, 0x9, 0x5, 0x30}], &(0x7f00000004c0)='GPL\x00', 0x4, 0xb7, &(0x7f0000000640)=""/183, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x3, 0x101}, 0x10, 0x0, r7, 0x2, &(0x7f0000000780)=[r4, r3, r4], &(0x7f0000000800)=[{0x3, 0x1, 0x0, 0x6}, {0x3, 0x5, 0xf, 0x4}], 0x10, 0x10001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) ftruncate(r9, 0x8001) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r10, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x2, 0x1, &(0x7f0000000580)=""/153, &(0x7f0000000380)=""/101, &(0x7f0000000400)=""/47, 0xf000}) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r3, 0x7fef, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x4004af07, &(0x7f0000000900)) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x8, 0x9, 0x1, 0xfffff10c}) 03:38:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000140)=0x49e6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) lchown(&(0x7f0000000280)='./file0/bus\x00', r4, 0x0) rename(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='./file0/file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfd95, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044080000400dc6c7a5c84d326b36b270121b08e5681353048b9d0cd644dfda39fd6d58f14740e46e5ea00000003c85c4926fb188832d1396227ecf1706c588b1654f4f8b111a64137239aa64101"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a6273000000000000000080"], &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1914.602137][ T5324] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1914.636672][T10393] binder: 10392:10393 unknown command 1551527132 03:38:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000017c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB='iocharset=cp857,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c6e616d65636173653d312c646973636172642c666d61736b3d30303030303030303030303030303030303030303030342c757466382c696f636861727365743d63703737352c6e616d65636173653d312c696f636861727365743d69736f383835392d372c696f636861727365743d63703836392c00057f176dfea6f567fb2cd50c072d3e1328f3f5f3ebef1473155480f8a10dfd03b9c7ace76b9cbd3df4541cf369f1e44ff87f6eda91c680cb3b968f2f81cb585e"], 0x1, 0x1509, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="84"], 0x104) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f0000000100)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x59}, 0x22) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xfffe}, {0x5, 0x3}, {0x7, 0xb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r8 = dup2(r0, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2000e2, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000480), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x960}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000340)='GPL\x00', 0x20, 0xf6, &(0x7f00000004c0)=""/246, 0x83c00, 0x22, '\x00', r7, 0x8, r8, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xd, 0x8}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000880)=[{0x3, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x2, 0x5, 0x4, 0xc}, {0x4, 0x4, 0x8, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r10 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@fat=@usefree}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}, {@fat=@gid}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@errors_remount}, {@nodots}, {@fat=@sys_immutable}, {@fat=@discard}, {@nodots}, {@fat=@flush}, {@nodots}, {}, {@fat=@gid}, {@fat=@nfs_nostale_ro}, {@fat=@nocase}, {@fat=@tz_utc}]}, 0xff, 0x19a, &(0x7f0000000b00)="$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") setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x60, &(0x7f0000000200)={0x0, 'veth1_virt_wifi\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x28, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh={0x3b, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local]}], {0x0, 0x0, 0x8}}}}}}, 0x0) [ 1914.652216][T10393] binder: 10392:10393 ioctl c0306201 200003c0 returned -22 03:38:30 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0x0, 0x4) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) 03:38:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0xb56c3e12e729e952, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x1, 0x0, 0x1, 0x20, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x99ab, 0x7, &(0x7f00000003c0)=""/7, 0x41000, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xd, 0x4d8, 0x6e}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r0], &(0x7f0000000ac0)=[{0x5, 0x3, 0x5, 0x7}], 0x10, 0x1}, 0x90) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x700, 0x104, 0x91, 0xf0}) (async) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x700, 0x104, 0x91, 0xf0}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f00000002c0)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch_time=0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6a71666d743d7666736f6c642c695f76657273696f6e2c7265736769643da0e13c7400d2f7c6b14a75b054ed40ba7100c3b430660f38400be0f226b78ccf98189e654b16a08655caf73ddb21510feac39f80bd3ca285d481cbe521bd7841fbca3deff24689dc23d264dd7df0199b8a74c3350418693f3b66888fde4428f4a12ef81562", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x4de, &(0x7f0000000540)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f00000002c0)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch_time=0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6a71666d743d7666736f6c642c695f76657273696f6e2c7265736769643da0e13c7400d2f7c6b14a75b054ed40ba7100c3b430660f38400be0f226b78ccf98189e654b16a08655caf73ddb21510feac39f80bd3ca285d481cbe521bd7841fbca3deff24689dc23d264dd7df0199b8a74c3350418693f3b66888fde4428f4a12ef81562", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x4de, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) (async) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 03:38:30 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x50080003) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x47}], 0x1, 0x0, 0x0) 03:38:30 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000007001811", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x3, 0x9) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="757365722e12"], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = io_uring_setup(0x8e2, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x5, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_discard_preallocations\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000002c0), &(0x7f0000000d80)=r7}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="38a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r11, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/109, 0x6d}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[r4], 0x1) 03:38:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0xde34) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000ecff000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000001000b702000000080000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x5, &(0x7f0000000440)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x2, 0x9, 0x5, 0x30}], &(0x7f00000004c0)='GPL\x00', 0x4, 0xb7, &(0x7f0000000640)=""/183, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x3, 0x101}, 0x10, 0x0, r7, 0x2, &(0x7f0000000780)=[r4, r3, r4], &(0x7f0000000800)=[{0x3, 0x1, 0x0, 0x6}, {0x3, 0x5, 0xf, 0x4}], 0x10, 0x10001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) ftruncate(r9, 0x8001) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r10, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x2, 0x1, &(0x7f0000000580)=""/153, &(0x7f0000000380)=""/101, &(0x7f0000000400)=""/47, 0xf000}) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r3, 0x7fef, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x4004af07, &(0x7f0000000900)) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x8, 0x9, 0x1, 0xfffff10c}) [ 1914.962423][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.991730][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1915.028405][T10405] loop2: detected capacity change from 0 to 512 [ 1915.035969][ T5324] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1915.071184][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.097069][T10405] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1915.104910][ T5324] usb 5-1: config 0 descriptor?? [ 1915.160483][T10405] EXT4-fs (loop2): unable to read superblock 03:38:31 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) [ 1915.612932][ T5324] hid (null): bogus close delimiter [ 1915.681850][T25845] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1915.822044][ T5324] usb 5-1: language id specifier not provided by device, defaulting to English 03:38:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000140)=0x49e6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) lchown(&(0x7f0000000280)='./file0/bus\x00', r4, 0x0) rename(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='./file0/file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfd95, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044080000400dc6c7a5c84d326b36b270121b08e5681353048b9d0cd644dfda39fd6d58f14740e46e5ea00000003c85c4926fb188832d1396227ecf1706c588b1654f4f8b111a64137239aa64101"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a6273000000000000000080"], &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1916.052546][T25845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.073725][T25845] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1916.115128][T25845] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1916.142450][T25845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.164664][T25845] usb 1-1: config 0 descriptor?? 03:38:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000140)=0x49e6) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) gettid() (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) (async) stat(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) (async) lchown(&(0x7f0000000280)='./file0/bus\x00', r4, 0x0) rename(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='./file0/file0\x00') (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r5 = dup3(r1, r0, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfd95, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044080000400dc6c7a5c84d326b36b270121b08e5681353048b9d0cd644dfda39fd6d58f14740e46e5ea00000003c85c4926fb188832d1396227ecf1706c588b1654f4f8b111a64137239aa64101"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a6273000000000000000080"], &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1916.302195][ T5324] uclogic 0003:256C:006D.0130: interface is invalid, ignoring [ 1916.400822][T10418] binder: 10417:10418 unknown command 1551527132 [ 1916.412175][T10418] binder: 10417:10418 ioctl c0306201 200003c0 returned -22 03:38:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000007001811", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x3, 0x9) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="757365722e12"], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = io_uring_setup(0x8e2, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x5, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_discard_preallocations\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000002c0), &(0x7f0000000d80)=r7}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="38a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r11, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/109, 0x6d}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[r4], 0x1) 03:38:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x4330e000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) syz_clone3(&(0x7f0000000280)={0x44224000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0282, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xcc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0) [ 1916.505574][ T5320] usb 5-1: USB disconnect, device number 35 [ 1916.722170][T25845] usbhid 1-1:0.0: can't add hid device: -71 [ 1916.729382][T25845] usbhid: probe of 1-1:0.0 failed with error -71 [ 1916.750513][T25845] usb 1-1: USB disconnect, device number 80 03:38:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000017c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB='iocharset=cp857,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c6e616d65636173653d312c646973636172642c666d61736b3d30303030303030303030303030303030303030303030342c757466382c696f636861727365743d63703737352c6e616d65636173653d312c696f636861727365743d69736f383835392d372c696f636861727365743d63703836392c00057f176dfea6f567fb2cd50c072d3e1328f3f5f3ebef1473155480f8a10dfd03b9c7ace76b9cbd3df4541cf369f1e44ff87f6eda91c680cb3b968f2f81cb585e"], 0x1, 0x1509, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="84"], 0x104) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f0000000100)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x59}, 0x22) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xfffe}, {0x5, 0x3}, {0x7, 0xb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r8 = dup2(r0, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2000e2, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000480), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x960}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000340)='GPL\x00', 0x20, 0xf6, &(0x7f00000004c0)=""/246, 0x83c00, 0x22, '\x00', r7, 0x8, r8, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xd, 0x8}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000880)=[{0x3, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x2, 0x5, 0x4, 0xc}, {0x4, 0x4, 0x8, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r10 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@fat=@usefree}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}, {@fat=@gid}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@errors_remount}, {@nodots}, {@fat=@sys_immutable}, {@fat=@discard}, {@nodots}, {@fat=@flush}, {@nodots}, {}, {@fat=@gid}, {@fat=@nfs_nostale_ro}, {@fat=@nocase}, {@fat=@tz_utc}]}, 0xff, 0x19a, &(0x7f0000000b00)="$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") setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x60, &(0x7f0000000200)={0x0, 'veth1_virt_wifi\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x28, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh={0x3b, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 03:38:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xb, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='ext4_fc_track_inode\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c93a65e6bcfb5c752bfcf921de012293e2e79a83ab4f813cd72dde256c99bfe262556a4dd197ce03ca845cc4f0fb583eac7b3174f741e66ec22c21ed6f4a24ac62e420fa", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='ext4_fc_track_inode\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x5d5, &(0x7f0000000500)="$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") r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r8, 0x0) dup3(r8, r7, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x408002, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) readv(r9, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/215, 0xd7}], 0x1) statfs(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)=""/88) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) openat$cgroup_type(r10, &(0x7f0000001d80), 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000001dc0)={0x0, 0x0, 0x5, 0x8000, 0xd, "35a7395ddbfde89e"}) open(&(0x7f0000001e00)='./file0\x00', 0x40000, 0x40) stat(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)=@ipv6_newrule={0xc0, 0x20, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x14, 0xa1, 0x5, 0x0, 0x0, 0x2, 0x2}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x2}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3}, @FRA_DST={0x14, 0x1, @private0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) [ 1917.389671][T10434] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' 03:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='ext4_mark_inode_dirty\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x1c000000) 03:38:33 executing program 3: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$incfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000140)=0x49e6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) lchown(&(0x7f0000000280)='./file0/bus\x00', r4, 0x0) rename(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='./file0/file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfd95, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044080000400dc6c7a5c84d326b36b270121b08e5681353048b9d0cd644dfda39fd6d58f14740e46e5ea00000003c85c4926fb188832d1396227ecf1706c588b1654f4f8b111a64137239aa64101"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a6273000000000000000080"], &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1917.633602][T10441] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 03:38:33 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000440)=[@clear_death], 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0003020000000203684e43891cf24a1ed54195fa31c9d1d3fb8f6700c5d212e6a2611d3c1ed7097016c9d56aec1368e7577194d149e4963395f5224b4e105fc0bc9bca4aaf22257547fcce8a8dfd29c66d52339d84d9cd9c8380cfc14eb338acd0402305233f6b1c2c5715d9a02856cdacc5c24a"], 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000b73000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000058a000/0x1000)=nil) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x24, 0xdf, {0xdf, 0xf, "58e85552e4c6d15bb3780f94e70b11e1728f9c6edda3fc6f3a0f5db64c41489df1dc571c454ff181170d0957d6b6e62ec91e079c668835487ea9110f566ca9c2c15f073681ac7db3a97624e0606100520414fff21c6aad00609188cd313993b71f3d431fe5008354fcdd25d38a02b3326e9ac4ea0e6a8306429ac7e18b2734b96a514aafee18702fc0c6855ffdd32edbf70aede44a220d79283b28f1f5e1b3fb3e673bae8c5e0a3ee9b0dd94eface542ae8325ba1375c149174dcc69dcf5ac92fac6cfacce895943b7640a8acdeac32806fb9ec76869521cc45fa72945"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000040)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3a, 0x8, 0x3f, 0x3, "fc636610", "b9874287"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x5, 0x2, 0xfb, 0xc6, 0xff, 0x800}}}, &(0x7f0000000980)={0x84, &(0x7f0000000600)={0x0, 0x3, 0xb3, "f68560c704bf2c265c229bc40232af2fded2d0117d3e6d8df11d54604acf375b27fb70e21a6245fda6d8611c08774c81e1af97b5d48fe65519d212fb12733da235d8546009ff56c68d1303a4dbb2b0469000e29bdd1736c4c7f3aa35a9c366b91acd5a8164e2f1af22e416ab7caaa9f9954a5bd51b4ef401543c22465792f51b4475f1517d50e83e2239bc1e6fb8f81cf6fa5580bd1d20aa8bf1abde990b7a37c8a93cb16be6438592d5f972c44f10a6dd38d0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3c}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x1, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "26f4"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "ea79"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x40}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xfd}}) [ 1917.703810][T10441] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 03:38:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70700000000000000040000000000008500000001000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) 03:38:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x4330e000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) syz_clone3(&(0x7f0000000280)={0x44224000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0282, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xcc}}, 0x0) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0) 03:38:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204802, 0x0) stat(0x0, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000017c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB='iocharset=cp857,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c6e616d65636173653d312c646973636172642c666d61736b3d30303030303030303030303030303030303030303030342c757466382c696f636861727365743d63703737352c6e616d65636173653d312c696f636861727365743d69736f383835392d372c696f636861727365743d63703836392c00057f176dfea6f567fb2cd50c072d3e1328f3f5f3ebef1473155480f8a10dfd03b9c7ace76b9cbd3df4541cf369f1e44ff87f6eda91c680cb3b968f2f81cb585e"], 0x1, 0x1509, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="84"], 0x104) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f0000000100)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x59}, 0x22) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xfffe}, {0x5, 0x3}, {0x7, 0xb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r8 = dup2(r0, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2000e2, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000480), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x960}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000340)='GPL\x00', 0x20, 0xf6, &(0x7f00000004c0)=""/246, 0x83c00, 0x22, '\x00', r7, 0x8, r8, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xd, 0x8}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000880)=[{0x3, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x2, 0x5, 0x4, 0xc}, {0x4, 0x4, 0x8, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r10 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@fat=@usefree}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}, {@fat=@gid}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@errors_remount}, {@nodots}, {@fat=@sys_immutable}, {@fat=@discard}, {@nodots}, {@fat=@flush}, {@nodots}, {}, {@fat=@gid}, {@fat=@nfs_nostale_ro}, {@fat=@nocase}, {@fat=@tz_utc}]}, 0xff, 0x19a, &(0x7f0000000b00)="$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") setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x60, &(0x7f0000000200)={0x0, 'veth1_virt_wifi\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x28, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh={0x3b, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 03:38:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xb, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='ext4_fc_track_inode\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c93a65e6bcfb5c752bfcf921de012293e2e79a83ab4f813cd72dde256c99bfe262556a4dd197ce03ca845cc4f0fb583eac7b3174f741e66ec22c21ed6f4a24ac62e420fa", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='ext4_fc_track_inode\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x5d5, &(0x7f0000000500)="$eJzs2z9o02kYB/An1VxFBxcnJ3VwOORAcTTDKUlUFEq0i9ygoIiY4YggRC4g6KCBszRD6dilFLL0z9Q0Q6eWFjqX0qFHoUOXO9ql0KU5en0PelP/XO+g8PnAj4eX9/u+Tx7I+ganWlf80el0MhHR6T766d5mvvDgSs+PpacRmd3L4udfKz/s7mRS4u9br6X1SloPD51vf928n20uP9m6/nym3pX2P6bvwkird3+n4/w6/nujudmLnz5Xit+quTdLxdral8WFx2Mb+VLrUb0x/jB772XKzaV6NtV3UY0P8TZeRDnK8SoqJ9R/sLl6c+dysTn5+s52od03fWsvlu35t4Mesv/7q/3PGrW7NyYuDdyuTs2X1s/s5cr+vwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8Jobvbip8+V4rdq7s1Ssbb2ZXHh8dhGvtR6VG+MP8zee5lyc6meTfVdVONDvI0XUY5yvIrKvju7jtn/u2JtbbC5enPncrE5+frOdqHdN30r5XpOYNaD+u/O//5q/7NG7e6NiUsDt6tT86X1M3u5cvc/zx1lRgAAAAAAAAAAAAAAAAAAADhIvvDgyrkoPY3IxE8R8f3vv/z1tL2T3rtnUu5aqivdEZ1OxPDQ+fbXzfvZ5vKTrevPZ+q/pfzH9F0YafXua3Pu/5yJw/szAAD//7uAltQ=") r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r8, 0x0) dup3(r8, r7, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x408002, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) readv(r9, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/215, 0xd7}], 0x1) statfs(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)=""/88) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) openat$cgroup_type(r10, &(0x7f0000001d80), 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000001dc0)={0x0, 0x0, 0x5, 0x8000, 0xd, "35a7395ddbfde89e"}) open(&(0x7f0000001e00)='./file0\x00', 0x40000, 0x40) stat(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)=@ipv6_newrule={0xc0, 0x20, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x14, 0xa1, 0x5, 0x0, 0x0, 0x2, 0x2}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x2}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3}, @FRA_DST={0x14, 0x1, @private0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) [ 1918.208310][T10459] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' 03:38:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000140)=0x49e6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) lchown(&(0x7f0000000280)='./file0/bus\x00', r4, 0x0) rename(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='./file0/file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfd95, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044080000400dc6c7a5c84d326b36b270121b08e5681353048b9d0cd644dfda39fd6d58f14740e46e5ea00000003c85c4926fb188832d1396227ecf1706c588b1654f4f8b111a64137239aa64101"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a6273000000000000000080"], &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 03:38:34 executing program 1: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$incfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]}) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1918.616092][T10468] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 03:38:34 executing program 4: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x4004550d, 0x0) r2 = epoll_create1(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) epoll_pwait2(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0x20000011}) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000200)=0x9, 0x4) finit_module(r3, &(0x7f0000000300)='#\x00', 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000100000000001d00fe0018110000", @ANYBLOB="ab9ae4d70007d3cde38490cb2ed7d714f7868a7bda495dcd16a955d40a2833ea2c116f22bc36c9e7c1619bb947bf35511f1e006f78ee7509af28b2b2e13335d3e7c790c73815d818d0c98da150d5bb9b67f40325c71cd8a0c7b4708e055d1db37ff5fe6355ec", @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001ac0)='sys_enter\x00', r7}, 0x10) fstat(r7, &(0x7f0000000000)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0xaea3, 0x0) io_destroy(0x0) [ 1918.674911][T10468] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 03:38:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095ebde5d83e898c64028c3b548197246e6bdb6548b5fc1e396571ca544437035020001040f0e47a89c198bd196269bf84ace551d8b0361d5896213f0566f6ae833282093e3be86c709b16f72f99c5a97339c3e120061e82dc727a0dedee70f3b8c0000000000000000080000000000f1ddf97a19f000000045776af2ba78aa3c7e8b28adde7a7df906d8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x6, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x4, 0xfffffffeffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r5}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 03:38:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) io_setup(0x3f, &(0x7f0000000780)=0x0) io_cancel(r1, &(0x7f0000001a80)={0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 03:38:34 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000065001811000013b2d7830ef6ebc4b224dc6ba2e8aa6392aa9569c9be13be0b215e48ba1a3d6f1754e67d538d33069abac2f54b729240b19e3105877a", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r5 = dup2(r1, r2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f0000000000)=0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x4fc}}, 0x0) io_submit(r7, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000180), 0xd}]) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) getresuid(&(0x7f0000002080), 0x0, 0x0) fcntl$setown(r2, 0x8, r0) fcntl$getownex(r3, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000004c0)={0x400, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000180), {0x8}, &(0x7f0000000300)=""/199, 0xc7, &(0x7f0000000400)=""/173, &(0x7f0000000240)=[r0, r9, r0, r0, r0, r0, r0], 0x7, {r5}}, 0x58) tkill(r10, 0x400014) 03:38:35 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000007001811", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x3, 0x9) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="757365722e12"], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = io_uring_setup(0x8e2, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x5, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_discard_preallocations\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000002c0), &(0x7f0000000d80)=r7}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="38a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r11, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/109, 0x6d}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[r4], 0x1) 03:38:35 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x50080003) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x64}], 0x1, 0x0, 0x0) 03:38:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) dup2(r2, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000008500000023000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x10000, 0x108, 0x8}, 0x18) fchmodat(r1, &(0x7f0000000a00)='./file0\x00', 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa2000000a49fcc00000007020000f8ffffffb703000008000000b7040000000000008500000001000000954a411e91e76b03243e1183ed5deb0fe7500cc2915067488151c09fd1b75ec4028382a525d4dd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$setlease(r5, 0x400, 0x1) ftruncate(r5, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2, 0x100, &(0x7f00000004c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) dup3(r6, r7, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x0) listxattr(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)=""/208, 0xd0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r10, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x0, 0x1000, 0x4e, @mcast1, @remote, 0x7, 0x8000, 0x9, 0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r4}, 0x20) 03:38:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/838], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 1919.554432][T10492] syz-executor.1[10492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 03:38:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xb, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='ext4_fc_track_inode\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c93a65e6bcfb5c752bfcf921de012293e2e79a83ab4f813cd72dde256c99bfe262556a4dd197ce03ca845cc4f0fb583eac7b3174f741e66ec22c21ed6f4a24ac62e420fa", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='ext4_fc_track_inode\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x5d5, &(0x7f0000000500)="$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") r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r8, 0x0) dup3(r8, r7, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x408002, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) readv(r9, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/215, 0xd7}], 0x1) statfs(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)=""/88) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) openat$cgroup_type(r10, &(0x7f0000001d80), 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000001dc0)={0x0, 0x0, 0x5, 0x8000, 0xd, "35a7395ddbfde89e"}) open(&(0x7f0000001e00)='./file0\x00', 0x40000, 0x40) stat(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)=@ipv6_newrule={0xc0, 0x20, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x14, 0xa1, 0x5, 0x0, 0x0, 0x2, 0x2}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x2}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3}, @FRA_DST={0x14, 0x1, @private0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) [ 1919.554632][T10492] syz-executor.1[10492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1919.628764][ T30] audit: type=1326 audit(2000000315.600:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe96da99e69 code=0x0 [ 1919.800503][T10497] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' 03:38:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000008500000023000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x10000, 0x108, 0x8}, 0x18) fchmodat(r1, &(0x7f0000000a00)='./file0\x00', 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa2000000a49fcc00000007020000f8ffffffb703000008000000b7040000000000008500000001000000954a411e91e76b03243e1183ed5deb0fe7500cc2915067488151c09fd1b75ec4028382a525d4dd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$setlease(r5, 0x400, 0x1) ftruncate(r5, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2, 0x100, &(0x7f00000004c0)="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"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) dup3(r6, r7, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x0) listxattr(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)=""/208, 0xd0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r10, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x0, 0x1000, 0x4e, @mcast1, @remote, 0x7, 0x8000, 0x9, 0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r4}, 0x20) 03:38:36 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000440)=[@clear_death], 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0003020000000203684e43891cf24a1ed54195fa31c9d1d3fb8f6700c5d212e6a2611d3c1ed7097016c9d56aec1368e7577194d149e4963395f5224b4e105fc0bc9bca4aaf22257547fcce8a8dfd29c66d52339d84d9cd9c8380cfc14eb338acd0402305233f6b1c2c5715d9a02856cdacc5c24a"], 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000b73000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000058a000/0x1000)=nil) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x24, 0xdf, {0xdf, 0xf, "58e85552e4c6d15bb3780f94e70b11e1728f9c6edda3fc6f3a0f5db64c41489df1dc571c454ff181170d0957d6b6e62ec91e079c668835487ea9110f566ca9c2c15f073681ac7db3a97624e0606100520414fff21c6aad00609188cd313993b71f3d431fe5008354fcdd25d38a02b3326e9ac4ea0e6a8306429ac7e18b2734b96a514aafee18702fc0c6855ffdd32edbf70aede44a220d79283b28f1f5e1b3fb3e673bae8c5e0a3ee9b0dd94eface542ae8325ba1375c149174dcc69dcf5ac92fac6cfacce895943b7640a8acdeac32806fb9ec76869521cc45fa72945"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000040)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3a, 0x8, 0x3f, 0x3, "fc636610", "b9874287"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x5, 0x2, 0xfb, 0xc6, 0xff, 0x800}}}, &(0x7f0000000980)={0x84, &(0x7f0000000600)={0x0, 0x3, 0xb3, "f68560c704bf2c265c229bc40232af2fded2d0117d3e6d8df11d54604acf375b27fb70e21a6245fda6d8611c08774c81e1af97b5d48fe65519d212fb12733da235d8546009ff56c68d1303a4dbb2b0469000e29bdd1736c4c7f3aa35a9c366b91acd5a8164e2f1af22e416ab7caaa9f9954a5bd51b4ef401543c22465792f51b4475f1517d50e83e2239bc1e6fb8f81cf6fa5580bd1d20aa8bf1abde990b7a37c8a93cb16be6438592d5f972c44f10a6dd38d0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3c}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x1, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "26f4"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "ea79"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x40}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xfd}}) [ 1920.207363][T10499] syz-executor.1[10499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 03:38:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x0) r3 = dup3(r2, r1, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x66) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000002c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) vmsplice(r6, 0x0, 0x0, 0x0) 03:38:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0x3, 0x9, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x85, &(0x7f0000000280)=""/133, 0x41100, 0x71, '\x00', 0x0, 0x36, r1, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0x800, 0xe66f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r0, r0, r0, r0], 0x0, 0x10, 0x454b}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000aa000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8, 0x18, 0x1, 0x5da, {{0x6, 0x4, 0x0, 0x22, 0x18, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@end]}}}}}) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x6, &(0x7f00000004c0)=@raw=[@call={0x85, 0x0, 0x0, 0x5b}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x400}, @call={0x85, 0x0, 0x0, 0xd1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000500)='GPL\x00', 0xba1e, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, r1, 0x8, &(0x7f00000005c0)={0xfffffff7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5, r0], 0x0, 0x10, 0x1000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) pause() 03:38:36 executing program 1: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000006800200027bd7000fcdbdf250200020033000000060007000700000014000c8006000100ff070000080003000500000054fc32be95a00dc67d569f50791cd41dac3f47473dd0ae4b371b1cfe46113d31e5d8039bbd4ebe5a776034a8438534d6b529"], 0x34}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000015) 03:38:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) alarm(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r5}, &(0x7f0000000940), &(0x7f0000000980)=r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_fc_track_range\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x1, 0x0) fcntl$setpipe(r10, 0x407, 0xa00287bc) close_range(r10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) 03:38:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000008500000023000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x10000, 0x108, 0x8}, 0x18) fchmodat(r1, &(0x7f0000000a00)='./file0\x00', 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa2000000a49fcc00000007020000f8ffffffb703000008000000b7040000000000008500000001000000954a411e91e76b03243e1183ed5deb0fe7500cc2915067488151c09fd1b75ec4028382a525d4dd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$setlease(r5, 0x400, 0x1) ftruncate(r5, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2, 0x100, &(0x7f00000004c0)="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"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) dup3(r6, r7, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x0) listxattr(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)=""/208, 0xd0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r10, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x0, 0x1000, 0x4e, @mcast1, @remote, 0x7, 0x8000, 0x9, 0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r4}, 0x20) [ 1920.207586][T10499] syz-executor.1[10499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1920.970132][T10517] syz-executor.1[10517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 03:38:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000008500000023000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x10000, 0x108, 0x8}, 0x18) fchmodat(r1, &(0x7f0000000a00)='./file0\x00', 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa2000000a49fcc00000007020000f8ffffffb703000008000000b7040000000000008500000001000000954a411e91e76b03243e1183ed5deb0fe7500cc2915067488151c09fd1b75ec4028382a525d4dd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$setlease(r5, 0x400, 0x1) ftruncate(r5, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2, 0x100, &(0x7f00000004c0)="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"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) dup3(r6, r7, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x0) listxattr(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)=""/208, 0xd0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r10, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x0, 0x1000, 0x4e, @mcast1, @remote, 0x7, 0x8000, 0x9, 0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r4}, 0x20) 03:38:37 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/838], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 1921.004134][T10517] syz-executor.1[10517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1921.203580][ T30] audit: type=1326 audit(2000000317.180:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10519 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c8282ce69 code=0x0 [ 1921.267918][T10523] syz-executor.1[10523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 03:38:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x0) r3 = dup3(r2, r1, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x66) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000002c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) vmsplice(r6, 0x0, 0x0, 0x0) 03:38:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100003720702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x74, 0x7, 0x24, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x91, 0x0, 0x4}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1d, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x1, 0x0, 0x8, 0x7, 0xffffffffffffff41, 0xfffffffffffffffc}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x2, 0x0, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x5, 0x2, 0x10, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x24, &(0x7f00000000c0)=""/36, 0x41100, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x8, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000004c0)=[{0x2, 0x2, 0x5, 0x3}, {0x2, 0x2, 0xb, 0x9}, {0x1, 0x4, 0xd}], 0x10, 0xec}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x120, 0x0, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x5, 0x5, 0x9fd, 0x13c}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x5, 0x3, 0x701, 0x2000, r4, 0xffff8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1814000046000000000000000000000000000000223fda7f", @ANYRES32=r4, @ANYBLOB="000000000000000085100000ffffffff85200000030000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x1a, &(0x7f00000005c0)=""/26, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xd, 0xed5, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000700)=[r4, r5], &(0x7f0000000740)=[{0x5, 0x2, 0x4, 0x9}, {0x3, 0x2, 0x5, 0x4}, {0x5, 0x3, 0x6, 0xa}, {0x4, 0x3, 0x10, 0xc}, {0x0, 0x0, 0xc, 0x8}, {0x5, 0x3, 0x0, 0x5}, {0x0, 0x3, 0x8, 0x1}, {0x3, 0x4, 0x10, 0x7}], 0x10, 0x1}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000001f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='ext4_ext_remove_space\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000000c0)='ext4_ext_remove_space\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$igmp(0x2, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000007000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x2000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000180)={r10, 0x58, &(0x7f0000000080)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='ext4_mballoc_alloc\x00', r0}, 0x10) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@local, @global=@item_4={0x3, 0x1, 0x0, "ba53c0c3"}, @local]}}, 0x0}, 0x0) unlink(&(0x7f00000000c0)='./cgroup\x00') mkdir(&(0x7f0000000080)='./cgroup\x00', 0x0) 03:38:37 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000140)={r2, 0x4ee1, 0x3}) 03:38:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x5b) sendfile(r2, r3, &(0x7f0000000000)=0xc3ffffff, 0x6) 03:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000006800200027bd7000fcdbdf250200020033000000060007000700000014000c8006000100ff070000080003000500000054fc32be95a00dc67d569f50791cd41dac3f47473dd0ae4b371b1cfe46113d31e5d8039bbd4ebe5a776034a8438534d6b529"], 0x34}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000015) 03:38:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000002540)=ANY=[@ANYBLOB="180000000000000000271c1f4e29044559285d8e55730000000000007da1ba62f7bd21d845d16876009500950000000000180000000000000015207729a3725b54673f551f4601613052b5fd3bd349ae41249f4599ea589098a141a42e9b0c288eb062e5a22be377bbed62a068a29f5f4905b6ebb0681b9138245ba358ccc7c46d0f816f73e97bbdddc5d72fdcdfd1b2fa35a4e7a6690c3b9f5dd8c3ddee3ed3092aa7f6cc2d54be21bdb98944c80e9b28df23f952c24290b5520f3c2e0256ea04f983456683ab96e52f677cb40076bbeccd63928626b492"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000d00000000000000080009000d000000", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) statx(r1, &(0x7f0000001480)='./file0\x00', 0x4000, 0x8, &(0x7f00000014c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r6, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x4002410) keyctl$chown(0x4, r6, r4, r5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002940)) stat(&(0x7f0000007ec0)='./file0\x00', &(0x7f0000007f00)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000002980)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r0, @ANYBLOB="8ba8c245f370ff67577e0962d0e7922c30e1d31203bf5a2b5ad31969b17e3cf5dba19388c8ccb4e9f5d0d3cc00223f68e21e9a1277c7cf8b424d2ec7132e6490f0e5754621974034029283711f128c6593cea69436514f183c8cdfce1f06f9745cbde564c0d0217bd3f14342"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014010000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) mlockall(0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00), 0x100) renameat(r0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0/file0/file0\x00') statx(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x6000, 0x10, &(0x7f0000002e00)) 03:38:37 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0xa0c2c0, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="2ae48c93f6df94765f57b9563f9daa", @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="75688790f32d0618c2c7eb3a59c562e426492a305f615d7b59e63093345ffa1c14e2e4885d6d7da3a70e66c08720291b980352218500c8fd37e219a3a772283c35f53c17dee1ee598484e46423a43692446b635b64414b3b", @ANYRESHEX], 0x5, 0x358, &(0x7f0000000440)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f00000001c0), 0xd, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffef8}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x20, &(0x7f0000000800)={&(0x7f0000000400), 0x0, 0x0, &(0x7f00000007c0)=""/29, 0x1d}}, 0x10) prctl$PR_CAPBSET_READ(0x17, 0x19) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00'}, 0x45) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000280)="17f3af4213e783e2d1677efd782beee5b69ba538bd3cada70d793bc3e3e96e6eeeff20370ab459395e2b59a6eb644e7c53324a5c29bcf009b79b63c640e45316a68a83636e614eaaff0036a2a72156", 0x4f, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) close_range(r3, r2, 0x0) [ 1921.269074][T10523] syz-executor.1[10523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1921.716971][T10534] UDC core: couldn't find an available UDC or it's busy: -16 [ 1921.757002][T10534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:38:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204802, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:38 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x50080003) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x20000087}], 0x1, 0x0, 0x0) 03:38:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095ebde5d83e898c64028c3b548197246e6bdb6548b5fc1e396571ca544437035020001040f0e47a89c198bd196269bf84ace551d8b0361d5896213f0566f6ae833282093e3be86c709b16f72f99c5a97339c3e120061e82dc727a0dedee70f3b8c0000000000000000080000000000f1ddf97a19f000000045776af2ba78aa3c7e8b28adde7a7df906d8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x6, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) (async) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x4, 0xfffffffeffe) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r5}, 0x10) (async, rerun: 64) unlink(&(0x7f0000000140)='./cgroup\x00') (rerun: 64) 03:38:38 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) setuid(0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1048}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@jmp={0x5, 0x1, 0x5, 0xa, 0x5, 0x4, 0xfffffffffffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x4, 0x0, 0x3, 0x2, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x6a, &(0x7f0000000540)=""/106, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1], 0x0, 0x10, 0x8}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000051070001c78f67506660be677b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100010000000007020000f8ffffffbfa400000000000007040000000000000016b71900"/92, @ANYRES32=r0, @ANYRES16=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r8 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r7], 0xd, 0x2a0, &(0x7f0000000840)="$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") ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYBLOB="01000080000000005f0f00000000000004000000000000000500000000000000eaffffffffffffff1f2a0007000000ff010000090000000001000005000000000000000900000000000000321b0000000000000000000000000000080000000000000000000053ed00000000000000007b73c17d7d56bcc790f98af3c0616c0806a179475a560b60f56d7f735392542aa1e4d4b765c420bb038fdadd1e3f71fd6d7de6bdd7d7951b5c8aad78879d"]) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81, 0x440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) r10 = dup(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x2, 0x0, 0x46, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x3, 0x4}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001880)={0x1000, 0x0}, 0x8) r13 = openat$null(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xd, 0x4, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x93f5}, [@generic={0x81, 0x5, 0x5, 0x8001, 0x1}]}, &(0x7f00000016c0)='GPL\x00', 0x8, 0x2c, &(0x7f0000001700)=""/44, 0x60600, 0x2, '\x00', r11, 0x18, r10, 0x8, &(0x7f0000001800)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001840)={0x0, 0x9, 0x8, 0x8}, 0x10, r12, r13, 0x2, &(0x7f0000001900)=[r0], &(0x7f0000001940)=[{0x4, 0x1, 0xa, 0x9}, {0x4, 0x1, 0x7f, 0x3}]}, 0x90) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000008ec0)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000008fc0)=0xe8) getgroups(0x6, &(0x7f0000009000)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee00]) sendmmsg$unix(r10, &(0x7f0000009240)=[{{&(0x7f0000001040)=@abs={0xafb3db218bbad308, 0x0, 0x4e23}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000800)="0fa61392384badd01f29142eb4e9903620e1a80e6ac1d54f27bdbdac0d2d565aeaed0d637f7d29389579fa19", 0x2c}, {&(0x7f00000010c0)="d983061b443ea105a0857b3b232151f64d3917338680c9e8e8f418bd9da188a8b756bfbf84a751e1d509d14a19f7c3efa9655e1f840498f106f8f3c51554e00ca39e79f7a514bf7792c2da6035da5e72c4fe234b26cb8f66447aa78db786ebd9034fb694c7a73ba0173fefc8bb6e521cf4e00c15f8983f5417d0bea8ace11da75a5fd12b2b8e430345c5c65238af6f134e53f6c966680f95d8bf5ee0fdfd7082268551befd6beda9f14079f2b6acd364cba8366f1c37361b018dc27e5c", 0xbd}, {&(0x7f0000001180)="8a783f9945d7463f82c95f190a1577af6da5a2ecd51abe48e13d06d6644ed21b3b4bb736f0e0673cf38a464173df323c314149c2b8562ab9dc23279ce614e95cc6c07dc2c43b8a3ef0f4e9f748276a314f8acc4cd1e34e4c8f9d30ddc15e4b474294c428f722781be266e57cbffad24a27b6d511d46b6ac02cc275966d38cfa550c870197866d55628a6bb0da5c55e19f7795d633b2ae8d72d790a2207dd7bf28812ea62e5", 0xa5}, {&(0x7f0000001240)="ccbd6a9d2ac76894df9b18d0f8b7b0e36a183e7c7af5a664df42624596bf88db00373e23bfde16192eabb81fe6381504b7e8e884a2e96a50257b7108528a25cc521bc54a5ee3c536a8abd79d39bf602098be32aa2dbfe1426d3e4b2d88729420339372debf547496393240c9d390ba4e5e1fe07eafde21975928a0a6342f37e842e657da92547d6eee68ebe7f91bf8a781a9f6de3f83fbe68af5eea4217305c52facdb24efd162b2e3e3b4a7bf7476ceca77c559c2d7e2", 0xb7}, {&(0x7f0000000bc0)="76ed1e64a88b231220cbe018767756e8a8576142d0483a0c7a1430a98a096a085ee37c9540bae8e97f22a49a8e29903ed5d399f5900eeba2", 0x38}, {&(0x7f0000001300)="c583389cfe95a1a2dd30885ca9b42e4358d3c82ba04670e2aea2faace57b083fb27020ea9f5a9d78499986ec3c6258733de44fca3e61e74a2eb18fd3f3fc5378a0eab9b7a8a35d34a5afa8c691481d5e015b2f4e48c698d3e2f16947f9a87dd14abdc9865e3f9e447560785f8886ed1980dcd6227a5343c5c8c7abf0f13b1fc0dcfccff50b5d6b571793ff142471182d1ef26feb50f2060e44c410a8a1c654d703d7a4f34026e852e6c4eae7fa9cac8a12e8c68ec1650bdc578f0752f12a38b56b76ec", 0xc3}, {&(0x7f0000001400)="fa7e05b4f9982a91cf6f3a864f3230254c08dcad8ac82ae88419b234b1c20e1f9938c97ec4d3814deef463e6bc4bb4cb173aa64e1ddd0f8666378df755ea0d019a0e23348102d599e9fb2df6d2c2684b6685f12ac0268d87768c8fa0165df0c93d935bca856192613b0212fc97d6c0b12f08e20ac54962d3d09042e235", 0x7d}, {&(0x7f0000001480)="da4d2085d9358e01a119d7b9e233140cdf881c7ddd21d1b450fbdaf3e44139aaab52e59abe26b197d2453ade9d649f2f3856f558cb909d0401e3c0e5bb1885bfea034ea3c8e22f15fbfdd7f62b7aae2a43a36d1b4be8fda9", 0x58}, {&(0x7f0000001500)="6f17eb5d5844913410162b6eeb25389d3a7f4fcbdd60a7b2065da819a5c96c6c545505d9eeee7e7077c29ac5d0ea8c2a01b01e6bec518b3954131878a841ae91d1e078d2d7597b40c5ef701f057bd897202219adf519b43071ff6dc95f8d71f04970b23958ec8a3f6b7ec9b83375379940da399fb5c00f85f2fff9c72f5cc0debb840b39566acb2e7c4dd24658678e0206f7ff05482b7f", 0x97}, {&(0x7f0000000c80)="91dba792e5", 0x5}], 0xa, &(0x7f0000003840)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r10, r8, r8, 0xffffffffffffffff, r7, r10]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xa0, 0x4000804}}, {{&(0x7f0000003900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006c40)=[{&(0x7f0000003980)="5ce4f25f69f29768d4e4f5eb33d202d68541b22e1ce653b3e8f75a3d0022461681adf10193", 0x25}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f00000049c0)="15cc0b3f3b6ed1c726340d56a3df2b0dc36cd06366bffb85a9f368d78921ed90bbbb7871c5c69f2b34c0498623418de9584114d3608b66fd48134041d472b3b29f4291dcf510352c56a1be6491837171f300422cfe2da75649b17d7ad79cda56689086db8c381ad113ee68cfbbd97019fabe2855ef48b41911acb38cd10df14629311d040d89a7f30301cfeebc0489e49e5b179c4a2819674e182bd630a0521053e70ab7f1cd116f3a5480dbe936b9f760e1098ad78544c753efc17f1b975848341eb4db509115a5e8b32508a9b84caeb86fcb00c5b0ff3e614095a89d1854a8d4a6e28c8e9c3fe3bc92f66401e274290ae4d897d1f4fabd4c9af2fed5da5bd1640464c4b5c9c9aa58c8b3e762521c2cfb44dc5c1c27205d5397be474569ffca4b2ef688ba8c02a38225e58314138f438791d47058247780b9f65d11b4ddeda0e9fc219db015395b96d8efdd5c5a7f6d1c663bc2efdefea43d86c6f229ef5e8d1b3d13189a72985f7e7ed477fcda4aa17b6b4f9a6c9bbc3d0609a04806eb9ac161506c5b02e768bcf8198422336c52ddeace3ed8ad01e443e8bca4199e0d01c19f742744d7a037995c89daa60942e7fef5bc642fcdb63175c3018c566b9225fc7cb5a7614e99a5c223eea63e9f45d594ca5125cdf7def91678b663fb5cc765ec29354887d72090be0f1e39df51ce911faed3cd5302940b48bf79c03e8c3669bd8587c3d92d25883f57efe0679346abb4ea822345c15a9cd6f74bc35df9bef439721c4da6a718562fdbd486f29d70df3cc12ae58ca1e1b956830d416f572ffdb048ae59508867204f467aa95da85207ad061b24b89ecc84873cdd2b575968ad953927a67730c1a524d94bdd6ad254fd21f9eba079d796f74253e7555d98ea6b055df4dc14610bc7f0fe508fc48993d4f2027624cce669e5b0cf395a5894e61ff1207baa34e8e32d3be5a621359d0f7ff4c1e2a125717ef7814bd904b143e4994f8f7c98f068e88845632bd04830dbab20bba40b97a903b3b76fd67b774b908cffc5e75532579fd1fc1848a420ffe6ab034841d293aff187dfd63af56a80a4dee506b88abe211403459d4055aa75462dc99e8e129a5f71ecdb2e186efcfeeb8fdfd29f5e73d6d600858a1c536c16456caca83d1d1357a757b76f707c230af218b3e3a4b77429e0c475e979714352cc59089420462b4582256de939787e3703236cb16bdfda826876dc50efc48ea97595a9d91584c29e511ef9bc989222d3d21f4950f0745a06da3a7a68386a6a71272df39731653539d88c81e75c6144a27633beee2413d4e21fc47c88bf16b7b314533c585b3d9a12e6876bc2ab994a25fb9d9a31d5fb3b980ade76ff1f50018c8d8515bade16048c24258f4e0474d634ca9c0d7027ff0d7e12c0acd0f3f9aee49d6e76cd04bf03343ce2bab9bc61432d00a74b786f86a934e78ae468b0e0ffac67a2d4a16be858755289c7472a96c03c9b43a97f45ef6034053410cad4560e41d4805930f76c5651d0ed783ced18b0347b3296e2f1c4f533e86566d6a94fcef19b11c786b0f7b908342984efa9b8fe79bb89df9057fa7351cdc27c5ccaa00bc5e3b80eeed4b0a0341e3e6e28144dbe4c9eae07c627bc2cdbf580f9cd428a3092b20ee173357d163cbf30bd88a9a8c29a6ed875a2f182ed9c5928d2fb90ba0a97a9243ad913ddb1a167a70059b4166f1f60aa8d63fed26e5bb80b60b79f156c9f231d9786d24fd3d28f4d315d547ce9ebf892e30a97f3780f531424dfdec9fe6a09bc9e8394f4e57663c28fe52b4c8e94038f8ef27839a8e66277c861daf1ff53acf5682d1994f8282b69d5bd6d6224e346b732503a5c5040fd98edf31873c79be8bbfe4e8add9964e8bca3e6454ca29fcdd44640862ac4f523cc05c1e10d1796df7f7ad8b48574e6bac73ba1cb13d072d0801780116f19cd0c7ac7c544532e44a784276da2f25ae53ea9f194cbc69ff754c28aad4d48877734a4c98b7c806303b84a5744e43a14d333acf06a4a669422ab66f1852aaaa6f700341936faecfa8ef3766c96e81cc870c2c6120b730ff20eba16d5a6b9ed5f1a1843f8ef1e42bfe5b50a84a3e8c071bf7ab2c7f84ac2e93ebe6c6d87fa2d56ad0c0ab56ac8bfee1119eb2a146fcc2c509bd4fc8041236b759ec7abc29669d7053bdf4b4ffce2ffa2e83fe7ea2f134c8e6dce3a74fb2517faf147263e28552c0306a168f50e6fefb1695b7211673ee874658ce7f167eea79138f52c264e975bab24948d96dff4303f0d44a14b00895f00d8de86c223253b183d2bf7e95e5db95c709f30ec82cbc03815a42283696ae46c56d3c1f25c0490c98851036d5d03275f1a4e73c5ebda087377aef2811aa3995865ade1b6a32cb5de354f2d4809d96efd389a8399ba1858303373eda27de4b2db208523c3eff866b618d207c4915c6d96323e23ddab7ed5d5c6c805aa565a217e58866c0c3cdc8f5d94bcd0ab60149c6640748009827a559c4c9fdfa305106915ddc9935e128a595ce98f8e1b975c6986796ecf8d3a4bba1599d8a1be9f480a3ead3b3800656c02604c76a3e5bc9e6f0499ce85d98a67c43a1888cdf98dfb27bc5038ffbd72f85be7444c650904df4e3c898a6bc5ba6559b04dd678c11b340ebe6eb47ab9e26e8934ce9c361a84a870c177a03f60b42279e70da658117e5786e5c5465c9e4fa6ae06ef48f55cdfb9aae20444c6d96523a07885869f8e4af6670f1cbd34b9128e79d647beef79acde98bd246a6ec2c4bbc3955eb027e2cd7dbf29c4743b4fad8a8b28b14bf3ff1196b1be55e84b68171d3d0d3a3f40a9b7eb41ab3f23d3efa34a762a97507652f2ded156222211e98d9fdf48a8eb01b5e674e7cf1330deca70179c00023e250a4dab076a4af7008d4b0d194cd35626763760cc2b4d8b79439c2d59752b6e7e5aabff622282a52b56432451b76ad0198ca62d5de9b761c7cf9c73a683a78610c827e3a934c706a2c77c600974d36e61d5d63130ea11860aade926daf778f8990f2af23a499eba03769ce2107174b686662dd037de8fb1153b85cb1d6a2f34e48166aa5a8c862e3b6b0d3e57186262595c9bc72e106eeb352ec80db4d86db2adee25a6a28ca4aa5414ad43cd861ae909ef030bde719baa2d91e8ffd400c05699864087da2fc8f560bd1a6dc3a1cdd3ce5c69f602089217daa76ca7e7c55e3ead9dacdf4a5bfab2e9bfc9acbeeed88ad290f58c36360403d8b516427e1597d6340a8e55711f6996ca99e3c847d073f0e0a2ee008728f06ebaef85b1c3311fda1ab7d2a5f6ff6a706825c27202203d3019d5b5cd7dbba9eeb16832d282e6743b7c7aa043949d5e376b494af110f323872915d990f986fd5a64b551d5bdf3036189f93240b7a958e11345f8a43c74d019b739583430e785d7ba68e29e425de7189c43049cd5d1ac158b9fa34a0635f3fd2d727d8e67abc486ebad6369269b65c86b5d3be904b89adab1f09321bd02afe673c922346510401e63378236779c2351048d9873cc5611db0be1b461e7e1a6186718ddc66c9f762593af63c974b2e9c230ad1614d8064c59f140ca0c206d4cfdccf89413ee67192f6cfb4d428306acc7037e6f8e495ba173c69d71d9d7dcc5beb802884d7e3694a5e677246ef0f81c67eff238a0bfdc113bd6d20dc2befe715f84d2a3145135223e600c6f389c9970b4830bb486249fddbad83e08121a2bd175f063ee8712a7ce3c01db60e7f21231489176c1e0fb437efee7b0c26a2290492ad8c159ff6c0435d124b072521967e24f746238bb57b28cb12dfe8d3456ac2e01a4427161868c3273e5271349ceadbc04c5545626c22eb1674d680d6dddf90ac69d428e6bd3153ea5879a176e1935fb48f69dbb5c7d03cb4395ff1993a8ec53a9b7315ed0515c08261691acd1cc17168b9acdc33852f3ceb190a1eebbe1d614421fcb75452446f18287ba4d7fe58e1ffaebf29e36a093116e43193e1bc99df0b5b706894dffe406ce05ae9d45da97325f44f889627d462bf46300e5e710becceac459e83ba951f4ebe34379f4881c3c1efd30b1ee704be80bfd2ab92e26742443447997eabd28a3b670ee818728b10106807eb860a77c3e98d6e5a3a8b7660312eb80764909ebb238ee6d61859c416b63e1aa664ffed7759ef6e62274725798fc252930b57700a13d1960d0101acae7ab7b448505ffe4c39ebd2f19233cf235e51a9ee54fadc089161c9f3ecb60e15b93c0d08345152bf652eb803f53e2e94fb2824fd2ec4303da86ac789e5cf18f04efedbbce33a1fe7293c6badcb307bf1444fd175c2ae31779ba5ff40a1457469e809f5ab579fdbf21a2731bdc0b81947592c30e260347e0b274a6c650b6b8eceff443507a56a411bf11afb910842781b09a7821bef602f46bbfa4c7ca599af980fc98da6dc041f6aae62bae509a62d41a09169144a0558a7a54074a6c3c35d23c28c1b407e0465e9c6a54e1c85863ee6fba0808cc36973b222410fa5494a0d3cdf204232135251a27890bfb301f830da1ef3685bfb7852115d5aa661ebe0ee30b1c07d9b0545554bb797c2273eb3bec40d80e6acc98adcd21c57a1e160c356e3bc65cdc7fe0932bbe71c6de0a605ca90b335519cff04a4afd1a025dd258bbc538c415bb0b299ed0b408843aacf4092091a8325f1d54bfd47257bbd903aa61c3c4da99533d1e59957fc6226d62e80e610d3cc32ec6888f3c64a83d8a89f5417cdd6c2f7e6ba40613244774c05af8a20b96a626a120ccb3ac38d6a35c8adc9b3d0c4a683b5a11e9d1a6fc619282ab30af3b9fc80e1f9107337832a0792d352881ce06fbb4c8e43366f8bd6e456636da2588f42f4b0207c54c2da118f126a2f0964eb4b2926b4a7dc3308525f6e164526cbe914ced5eca871a060bcc85f0b83cc02b9f20e7742f026e2c12ff64954433332650959fc36d7df80b2b68fda99b9c3df2c056c7cb7315eb65f7ab1dc6ce7239802647d22589cc4563acde2864a6a2c70deddebb69cec7bfe9f40124d245b054c15ded4570822a400dce69554ac7bff1cb0dedb7651c3883722f87d5fc409d96a8de797ea3eadfe2ab9b666038c2ca69f5ce0c4774dcb4858e4f287cdd6cdf902e5fbb016bafa7e199d0bf131c4c88a7fb8462f5d4c1ca2540fe907f10919cb0810a62c4653e29628b05f16ca6d9f2ce30dbfa7e881d5028d6eb4d7c84afca9d13911422b80fc5e6db9f84befc1e22c91acc44a9a2a618845edd5a28764d23a030c6d671886e3ee982d44cef4f7b5dd369576cb9aea0c0310032b91d1f528c56ca42316487c9ba7cc2345d6ca0ca176f5be8059c7f09cc1a625f0d30550d890cf7fbc923fe62af370f76f1ffb267a2402b854a69084ba4f4ce6fa80e48e8b444b743739d73efefdc94935b1fe2e128bc70c9369e9ac5d6e6b98af0dc4085b3ffc9da77b95012e95948ec4e9ee132aed85d04baf85f36169e53727a70c1946cd59d4ae8dc37be27b2a090adfbd599321755441ac62b097f5cea1d0b6c08256c19502de3804994953c7dfcd8932a7154608a1a5ea0e3bed3a829ae735454b43a000bf309c1071759b5d11476d772c52ba70a43107fc7bf23e92d505fdfb79f2ab970406e64755652505b0139e405128a30eb99013083713fe4e6e466ce9a802b987332668b4bb5d33964a0abe75348d35b5cc6f6f949bb30b23a317ac4a27aefa0638a3307a34556f9bb7b5033d346a3d7c1a98d356d7b26dfbd346cd36405d461d27873a9348f65aaff9bf498c684a9dfe3d82b", 0x1000}, {&(0x7f00000059c0)="5d1cef94f8f06415154f0d0568fa0b18bee21122879977ddc3a5c020a2432d66fe4f51f30a156d536b2efea4d7df822c7c7a4a329adf17635c7ac37b0551aafe7d10a6a1b5804086edf475438a8b48564a8c2a53735533c71638273ee5499d8217086c05d1d5d3c707fd3f0399028bc2a17f448f0fab", 0x76}, {&(0x7f0000005a40)="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", 0x1000}, {&(0x7f0000006a40)="6161e6431024dc27ae20424bfe8c3e7e3bac505a822ffd30dbf5f003c298a2685e08308257e1d82858ef194a9983630cb2ff382fc62c5139c34ddc1e5b519bdb21ee0a957b2da76f9de18413ba1b54104198f4701973c3c65a5b217b5dd1a6bfc9e89e3c82a2b2176b70876e884a2d2cc79021f268abbb299c64348a87069c6f448b3c85c218f488bf74be8a3d5085b0e51906d1569a7da356d437269387a57e04b636318a45800ee58d32c8f38056dd87aef30751f7d76e0c3e70f9c86e18dc9059592a24d9bc4ff63ab26453ef837b38", 0xd1}, {&(0x7f0000006b40)="91fe3aa194830d1b268f56b2149a4bbfe48cdfb58737f2fb0ed0f9b1391311aa9cf412d46c98d7f569851090c9acf051e033062189ab7f0dfb792c87776780aba0f9831a78b75a3f511a56e0562805e6b0abe394991fe14d41266dce11229ce5930cf1f62003e94b01a61ca826434071ea5657c322ef160da54ab14285e8f64b199290dec6073a898f02581e145359f756d2cec313d96116cb90ab47719b6d7b49dc4a8308c1417dce5c8e92ed241cff0d74a9def92c17657dc77e53", 0xbc}, {&(0x7f0000006c00)="b07e5360f32eea8c8ea3dcdabc5839a9bdce44f8af563e7038370253e2d19d16f6e5337b088046c1b9783c76a6931dba21888eb03a1dd5d3abec512d15", 0x3d}], 0x8, &(0x7f0000009040)=[@rights={{0x30, 0x1, 0x1, [r10, 0xffffffffffffffff, r10, r7, r10, r7, r10, r9]}}, @rights={{0x24, 0x1, 0x1, [r9, r8, r10, r8, r8]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}], 0x98, 0x42}}, {{&(0x7f0000009100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009200)=[{&(0x7f0000009180)="97332fe7f9fa5499631e220af9831db04ec2a228b8f23a8b845fccc8094364129dc91ad9aa35b09c9fc422e7908a43fe3182278c86bef7c83e0deb42f8de", 0x3e}, {&(0x7f00000091c0)}], 0x2, 0x0, 0x0, 0x40008d0}}], 0x3, 0x4000011) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000801, r14, &(0x7f0000001240)={0x1f, 0x5, 0x0, 0x6, 0x100000001, 0xffffffffffffffae, 0x30, 0x3ff, 0x40}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 03:38:38 executing program 2: r0 = getpid() setpriority(0x1, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000002f33000020786c2500000000002020207b1af8ff00000000bfa9000000000000a87b7be8e007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a0000009528eba132e703ee2ed8b90610161a4f80b14c3de4490efb1fea6e8ad951a9bf2f0413152bcede788f9caf11797b05272d6525abbaa3f8d12ae663bab198a2f10fdee76f9288dd4cbd2045"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='ext4_sync_file_enter\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) socket$inet(0x2, 0x5, 0x6) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) [ 1922.214555][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1922.268449][T10557] ------------[ cut here ]------------ [ 1922.273787][T10557] Please remove unsupported %[ 1922.278442][T10557] WARNING: CPU: 1 PID: 10557 at lib/vsprintf.c:2667 format_decode+0x12d2/0x1f10 [ 1922.287388][T10557] Modules linked in: [ 1922.291130][T10557] CPU: 1 PID: 10557 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1922.301294][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1922.311523][T10557] RIP: 0010:format_decode+0x12d2/0x1f10 [ 1922.317343][T10557] Code: 7b 04 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 c0 6d 84 85 e8 de 74 b9 fe <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 1922.337845][T10557] RSP: 0018:ffffc90001027640 EFLAGS: 00010046 [ 1922.343737][T10557] RAX: 2c57dc66da26c500 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 1922.351553][T10557] RDX: ffffc90014559000 RSI: 00000000000005cd RDI: 00000000000005ce [ 1922.359369][T10557] RBP: ffffc90001027730 R08: ffffffff81575f25 R09: ffffed103ee24e93 [ 1922.367176][T10557] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 1922.375004][T10557] R13: ffff0000ffffff00 R14: ffffc9000102794c R15: 1ffff92000204f29 [ 1922.382795][T10557] FS: 00007f3c815a06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1922.391565][T10557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1922.397987][T10557] CR2: 0000000000000100 CR3: 00000001390bf000 CR4: 00000000003506a0 [ 1922.406109][T10557] Call Trace: [ 1922.409204][T10557] [ 1922.411978][T10557] ? show_regs+0x58/0x60 [ 1922.416086][T10557] ? __warn+0x160/0x2f0 [ 1922.420488][T10557] ? format_decode+0x12d2/0x1f10 [ 1922.425475][T10557] ? report_bug+0x3d9/0x5b0 [ 1922.429811][T10557] ? format_decode+0x12d2/0x1f10 [ 1922.434698][T10557] ? handle_bug+0x41/0x70 [ 1922.438851][T10557] ? exc_invalid_op+0x1b/0x50 [ 1922.443359][T10557] ? asm_exc_invalid_op+0x1b/0x20 [ 1922.448398][T10557] ? __wake_up_klogd+0xd5/0x110 [ 1922.453185][T10557] ? format_decode+0x12d2/0x1f10 [ 1922.457967][T10557] ? unwind_get_return_address+0x4d/0x90 [ 1922.463446][T10557] ? vsnprintf+0x1c70/0x1c70 [ 1922.467852][T10557] ? bstr_printf+0x1b6/0x10c0 [ 1922.472368][T10557] ? memcpy+0x56/0x70 [ 1922.476186][T10557] bstr_printf+0x130/0x10c0 [ 1922.480884][T10557] ? __kasan_check_write+0x14/0x20 [ 1922.485825][T10557] ? _raw_spin_lock+0x1b0/0x1b0 [ 1922.490516][T10557] ? vbin_printf+0x1bc0/0x1bc0 [ 1922.495121][T10557] bpf_trace_printk+0x1a0/0x300 [ 1922.500581][T10557] ? bpf_prog_test_run+0x3b0/0x630 [ 1922.505531][T10557] ? bpf_probe_write_user+0xf0/0xf0 [ 1922.510662][T10557] bpf_prog_12183cdb1cd51dab+0x2e/0x3b8 [ 1922.516028][T10557] bpf_test_run+0x678/0xa10 [ 1922.520546][T10557] ? convert___skb_to_skb+0x570/0x570 [ 1922.525735][T10557] ? __build_skb+0x2a/0x300 [ 1922.530076][T10557] ? eth_type_trans+0x2c6/0x600 [ 1922.534767][T10557] ? eth_get_headlen+0x240/0x240 [ 1922.539541][T10557] ? convert___skb_to_skb+0x44/0x570 [ 1922.545014][T10557] bpf_prog_test_run_skb+0xb41/0x1420 [ 1922.550501][T10557] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1922.556464][T10557] ? __kasan_check_write+0x14/0x20 [ 1922.561414][T10557] ? fput_many+0x160/0x1b0 [ 1922.566045][T10557] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1922.572037][T10557] bpf_prog_test_run+0x3b0/0x630 [ 1922.576900][T10557] ? bpf_prog_query+0x220/0x220 [ 1922.582015][T10557] ? selinux_bpf+0xd2/0x100 [ 1922.586514][T10557] ? security_bpf+0x82/0xb0 [ 1922.590964][T10557] __sys_bpf+0x525/0x760 [ 1922.595042][T10557] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1922.600261][T10557] ? __bpf_trace_sys_enter+0x62/0x70 [ 1922.605483][T10557] __x64_sys_bpf+0x7c/0x90 [ 1922.609712][T10557] do_syscall_64+0x3d/0xb0 [ 1922.613970][T10557] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1922.619867][T10557] RIP: 0033:0x7f3c8282ce69 [ 1922.624149][T10557] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1922.643840][T10557] RSP: 002b:00007f3c815a00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1922.652294][T10557] RAX: ffffffffffffffda RBX: 00007f3c8295af80 RCX: 00007f3c8282ce69 [ 1922.660285][T10557] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a 03:38:38 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1922.668098][T10557] RBP: 00007f3c8287947a R08: 0000000000000000 R09: 0000000000000000 [ 1922.675902][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1922.683887][T10557] R13: 000000000000000b R14: 00007f3c8295af80 R15: 00007ffdfa620b68 [ 1922.691825][T10557] [ 1922.694662][T10557] ---[ end trace a2b72e6c1be63629 ]--- 03:38:38 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000740)="f1f85d7055a2eb88ce0520e4087bac7b42339d8cf485a5c2a0409ac505823921433838e827c4e0ec649f59cf5fbbbc6cd20e76d3926d2a5d97e92b1e83818166dd881bcaa468139373b595e39c286319b170a8043c1281ae645671d045bed0255633cf9d4eb88fdb8b93277d565b3da392df277b5eb9ceb2", 0x78}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000000680)='}', 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1, 0x0, 0x1000000}}], 0x1, 0x2, 0x0) 03:38:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/838], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 1922.993012][ T30] audit: type=1326 audit(2000000318.970:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce5df23e69 code=0x0 03:38:40 executing program 3: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:40 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000a80)=ANY=[@ANYBLOB="bc0800600c90297f0000000000000000ac080080a508000038a9d0720cc84514dccdfb1fd2efd73cdcda4463c756f9a639539313b2a2567370b4516a4ae84340116ab0964ca1fad1866f5a0dc87b47f9fb0802c74f68f804fb7670225dc1d6f5ee38f4fc8455668647558e8e6789622a6510c6fcc33c480b8453e6dda9a288d486a66f0494a24352be9c703050188ff8488c5212178aea5f5bb413ce42928cd3f1369243dd93cdbd811493eb646df8799855577411b6d91dc1c67d41a00ee5c9cda43c0bc5b5ee6c8d8cc000b073bc2fb1e27661678696573d23758e21a861dfe1c261b9ab378eca2d43331ccc5fdc5cadc974cb9ef6215faf9d71047cf558eefff1ece60e4b044e40923df6f3c15ed64b84ce8b1e9cf07e5d58031a9827f0589181e9027ee1d11d9a3d62d879e4358ad0b52d8899a34db7bf4d0429498c3a86faead2ee642ff59ac436737bc4185bc1b230c22c8e2be516e5bb2075810415f6d57ad9d419e7da1ccf9663564ed97655b06fcef467eb23593b8041553837253e7bd5f28ece82cf202f90d6d3e2fbd6eec550fd18ce0317f65af14ff56955e436aaa75e938b2e968bc1638bedfd352a3f0dd0c2a9d6d96e6f546993190334e145d2420f23b40dd79a80531364157648fb77a03ccb032a919e6d26318e00fffd1f87dbfee5121846508e86881d75fc2f5607379b3918cbeb15ec4e7f217ac85a140b0d607f1483ef959c2b28ff446ff1fcb810b47aaac1e4cc6b9215fbceabd517efc1a776dac240f1b97d2bdaf3b1e22481aa757fc2d7afd62ad539586fc92990261af89c5e01506ae8775622f3d8ae9537f107fb1b4cbc48108f800a8cba72d2576c8830152ea95cf0238146e8a030832d40603fc1489913c6a009701f93ee5222ac8ea0e43e28ff3380e309ab31de5f910fe9a53124f640d480fa21bc263be75875e64abac9d49d65b4ff1871b14ee03ead6faefb833392023286e9aed32a197801cc46fe3d5fb6c4e2f7faa2655f4655983fd25ffd185ced6631bc079e4bcea2e6a4d16d467c4f3bdd5782a690f745acd9ed156ffd77a105a254cab001cf218d9a7b78cde5896c2a803ae48e7241f36962817136eea0b15c196cc80d2a38bfa1f41c792f982d72592b92c66e8bdb86fa66220ffc71197e152e0b4c825491c3e7e26321b651a2dd195df105b74c25d6599ae597927f600008597bd3174cc6ad8724d715471f9afddb4e8574cceb90bd5625f8a7cd05ac07b4f33e1a6ed9f8c1051643df219365345029798355541ebf085035284331f6e74c37aa2d95e6b8d84a64fe4ed527beba7648fcbe3a17e7ee181aa174769fe0ba588529801d86a8235a18818996d5a003286588d4c32429db8846f6333222969b3606372f32c8a4db1c48270d552f1d47ecc43a13b8dd8c101e9ffe73d4843cd7418bd3c0d78bc6a1ed0b6c794405893804918f5200da41dcf14f4452523b54ddd5bd993d1870b713367985367e0d882104707e813f5625af5fddc01fa4c0379a988bb993c56cab6261f84b352742c2a7049e4c8048b2ab98fb821c7ceca1668f2b997f6cce126031e4b919fa1a8215fc2b3059bf4209487ebe3b9e82d62bec068ff019781fa102807ffe9bd2690ef76584e0ce32cc51fd7a6b7a9606b6d069900a8a81e84d7ee444d901ed9329949cde5fa3599d06447befca5160199a916fcf49f6528978ace93e5aa04bb6a21ffcd0dddacc12214d09d564ba5843d12fe867a332d6a867b2774b8716e7da725a21c91c1a0fe361102736ea06ee59324b6ff1c8e6e6f73af4c5e48605eab83ca822a18b40a44471266b044e5cb967fd77978b6a8b7b3d262af3badebd96428fb2f219bfccb83ba378b60dac754be533976a7688352d86208b24c79604ae2d6620107378ef0d6023bdb2573c4f0eba329ee4c84a5969fc8218d4393377fbe961750e910f657d0edf0f06ca93662b50e8ba33721698f867ea7ac8e973dbb5cd1b049d453122b7b9e0fb27fde6a20d050000000000000051865d14e45ccf9c4d5759ad83eefc8f393472553edebf987f128a95a438da7770e9ccf20213a266a738358f4b1ecf6a1e74086a4064524719bc4f26b1c41cf53beb1a0e0feca79979d6376339901db52bfc86717f9cbc3f2b0c68426e01c647a5c919e9719ae854c380f106e53ac4a4200e21e2ddff287a60b4c1c1ca194ac61dd0e54f3d9e7bc0f1f35f3e624f067b00d5f1c965254e2820f7fcea034753d356d383a11550df563bc249e664ac9b4367947782b2a3f852fe4cb0e5ecea5f9f62a9c952c0bbd7e959d9ac69d6c3f4c58977c94e25b652e44fa8a3967e96233c43199daa5d71db38e2951a37bd0f2a27c733fb598d529e36d1ebb67d258b5e89f631d734da072a91abe011750332f61067784b88efbee8d81c6d685e4c95a33af8f8b9b3022887c1d4929ab97a314bb03eb2243dd3243b1f3c68238ac07788e93eff25b028b4b4ab91924ec18ce9947a8a82ae504940c86dc4110603aae1ca4a81895069c0a846a2125b634de94409b3c2fb02ef55f0c050dc8c4e1dccf7603c7e4bdf1c8054ed4056f4c6e30ed4efaf817513b77f26051ff3c79bc7f0da9b8d92e8af632486ef6a422fda5dfb2b7d3ed9442cb6ed8442a83d21ba84da29912248524db42bd5458393a290220c57eeaefb1c11c6ca58464274d417ac462ffe19c0d294ca7dd3831fba590117d012b107e4460e35a4d0b28ffed042c7e7636e101c3ac3e2d7c02c7561617a9ec51726de4cda3ad7e29ad904ec0ad3becf74eb15dc938dd76c29876362acfdfe50f73e9a7b476d526037a12448a26d359a9e59cdf98434421bbf8cf37f3f42706a6d41f3210485e7746f8b4b976a33b5c1483bbee3d51ea1cef04926d005aaf6c3b669544b3a75ff20a90a190963f3564d7f7d89cc4c1adb471d5629a23b25e43bdf1f46abc2263637c48fc5649c6ca705b25c4b2fb2fd1de3db561beeeaeee260953ca9f3984d625a374ad214bbcb67f5f0308ad4a477e49c18272e08ada7f36a7c6de241c8a5bc07914ac2b3a6d18e516c3854635b3b561e0c7ee16c4f6446193836d3137a219a467ea874e91f7e4f40f00aadf1e88e6208faa436301421221e2326b7f680e65f263e55a4f8140572f0c463000000859bc155eddb3d8fad8c6d091527a2c2ca21a5e53f9d1b48e56599262c75da201821a0999947afdbaaa04307e32f567ac4f31883188c0fb5f27c7995646263fb3d738a72b74ed8e92f3261dc344d23054562337d908cc94f7629832c9c875565fe5724f28f102fff374972bf81cdd0ddcacf36238b6184"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) 03:38:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a0043c, &(0x7f0000004c80)=ANY=[], 0xfe, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lx}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r8}, 0x10) write$cgroup_int(r6, &(0x7f0000000000), 0x12) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) vmsplice(r2, 0x0, 0x0, 0x0) 03:38:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x4330e000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) syz_clone3(&(0x7f0000000280)={0x44224000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0282, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0) 03:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 03:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x5b) sendfile(r2, r3, &(0x7f0000000000)=0xfeffffff, 0x6) [ 1924.442292][ T5318] usb 5-1: new high-speed USB device number 36 using dummy_hcd 03:38:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x540b, 0x7) 03:38:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:40 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mm_vmscan_kswapd_wake\x00', r0}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) listxattr(&(0x7f0000003980)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x48, 0x14, 0xbe98a31878a1f9d3, 0x0, 0x0, {}, [@IFA_CACHEINFO={0xf}, @IFA_LABEL={0x14, 0x3, 'virt_wifi0\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}}, 0x0) [ 1924.702061][ T8053] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1924.812212][ T5318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.839193][ T5318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 03:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lx}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r8}, 0x10) write$cgroup_int(r6, &(0x7f0000000000), 0x12) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) vmsplice(r2, 0x0, 0x0, 0x0) [ 1924.913433][ T5318] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1925.028624][ T5318] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1925.070636][ T5318] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1925.080949][ T5318] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 03:38:41 executing program 1: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1925.112411][ T8053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.142096][ T8053] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1925.181352][ T8053] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1925.217469][ T8053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:38:41 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1925.243137][ T5318] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1925.246074][ T8053] usb 1-1: config 0 descriptor?? [ 1925.263727][ T5318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.284464][ T5318] usb 5-1: Product: syz 03:38:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) io_uring_setup(0x1aa5, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) [ 1925.294244][ T5318] usb 5-1: Manufacturer: syz [ 1925.306772][ T5318] usb 5-1: SerialNumber: syz 03:38:41 executing program 1: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="76c6fda71c3d4a7f5d86a6d4695e0998a4e7ce98c5135245f161aacb63d122c056b65849350720b2bf3280022ed35fc0f7c4d00402a919159738bc3965fa89528b92b5e0e7beef279e898ea127767137d7e303bd61309e03ef8a51143dedafe140fea2177f78e13334c38f695274071739b69a4cd5e833f4174b9cd0d1cf119fa2adc6091aa9b58f88f01dd71a4eb37b", @ANYRES64=0x0, @ANYRES64], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000400)={0x40, 0x22, 0xcc, {0xcc, 0x34, "042f2cff63b39a54b274a57d9405c77de7ec2354cdcee999071f09f0b073682e1efc24847467769796203c7cc242075be1441941010ab3404bd51c0b4e4dfb293c6bf69c16ef0d39eaf5f37037863ae2cf6913c95d92cf8274701011022672aa2de8e690f8cb975fc9ed304958a12de1458206cad5ffa4e75e71df0e4769d55cdd0dde8769a1f955f2841b341489feefcfafcedc9002c6afa2b3cbbadda0881c8488b9db95ac9db6b25833b99e3c46aded4b8aa584ef40d229bec47999041a91f2b1f8c4a63cf66d4766"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000080)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0x6, 0x6}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x80, 0x4c, "24212fce", "ff760d67"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x9, 0x71, 0xcd, 0x8, 0x8}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x20, 0x14, 0x5d, "8b366f4e7b1e2423f87e0bf1acedde9847ab382be20e273e25139ed3cb7d05f9b74eb03181871f583b261bddfeb2aa7af1241ac2e3693b3ee31cf5312aef7caa87c5efa235f6de61ab10ee46cb6efd2f9ea0712fce9a929a30d3592eb9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x180, 0x4, [0xf000]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x2345}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0xb, 0x2, "d909"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b08d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7df}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x74}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r3, &(0x7f00000002c0)="110000001200050f0c1000000049b23e9b", 0x11, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000c00)={0x0, 0x22, 0xe8, {0xe8, 0xf, "3946d6c7735b8d56e0a3f7abffc64346c673a1ca1d834a284bced9cebbf69f0c2377b49cfdae37f10fa178edf920dda97614eebb0dffc128984cee93be6dba2232fa87875a224061721921128845563ea6ab439ac4610f722cfa30ead29b0cad8343d98ae77be5e2e15e0a69899664a00621cc7dff3c6df716fa50fa44cf85c708361ee9773c66e6a445c9aaced31c02d187a7b202cbe28b804a41301eb6b4e11e43e52e9e61d474a4ec488ee45b6f3a6aaf49bcfcc2d42479aba1c6dacb8494e71326a70be9b1a54abb3e87fe4c64be7f1bdca5e6fc171262cba0be36dcd3c4501e44d0fe75"}}, &(0x7f0000000d00)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "652784ad8d1c50289e3fba07505ebc0d8e3b061ec2c63d7b1408248e804ecb3b59d2044ac311a28d10c04a1fb48b5375310e83ec55393667604298c2907365e36e05e018cfdb73e12f9c73bb9ee3a3b8d1e4e23e7d46410564dbd53ed8127062863519c655a346496e53a5a0baacf5ba35cf1270032aaca01cf401b4d59bdb85665a20172ad2a73b5796d927d3c07aa5b6a1b47873c74447df1bd308ebfc10b19eaa76500ce761"}}, &(0x7f0000000940)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0xb, "91b7863d"}, @local=@item_4={0x3, 0x2, 0x3, "458221a4"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0xb, "cc05df1c"}, @local=@item_4={0x3, 0x2, 0x5, "90d29540"}, @global=@item_4={0x3, 0x1, 0x5, "c12473b7"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x22, 0x1, {0x22, 0x779}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000dc0)={0x40, 0x8, 0x90, "ba2ddad3d8e87d3ba487a3b02b75f426471510916051c4dc0cd1d99d211f172f89d7e52959099a3e9e2e28fb15776093405a3b067f78432bf08925a0796b45021ee6b9ca869be024c4ea9d43521a355480f8a846aca06d23c5fa516036bbb5672496f6ff9b7a0dbdc9e1fb815da4a1bafc13583777cb77bea03e2a00a475aa415df92d3ba286443905cdcb377539679e"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000ec0)={0x20, 0x1, 0x48, "9983076fe8cd6745b6ad32b331bf331bd05d3280aa2f25b7a622cb3815a4a12c6e6fed980ad67102c80ea17c3d138064b4302b9983de5983229236f5ebc0cfc058dacb5e11d5b78c"}, &(0x7f0000000f40)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "ca06"}]}}, 0x0}, 0x0) [ 1925.506957][T10607] UDC core: couldn't find an available UDC or it's busy: -16 [ 1925.537270][T10607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:38:41 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfd", 0xc4}], 0x1, 0x0, 0x6b}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000100000000009d00fe0018110000830b9f1c5a2e06cde0bf9aff50fcffe636322e9e8cf0166f7d8bc9dc35c276c11e123381f4898d0e3e8ceac158388d9bd841b95220d058e247109a09506d2240adb4587ed2d95540d17dd1e2c4bca79fe2c9253e8bcd288eef69d9624d8e549133759f894b4f92ccbf4c4e179df0eed7fdb88bd6fec2d98caddfa0f1b8db2f6fb9ddc899b2794206", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@union={0x10, 0x8, 0x0, 0x5, 0x1, 0x6, [{0x3, 0x3, 0x4}, {0xa, 0x2, 0xbc}, {0x7, 0x5}, {0x8, 0x1, 0x1}, {0xf, 0x5, 0x3}, {0xd, 0x3, 0x3}, {0xb, 0x5, 0xf29}, {0xc, 0x1, 0x79800}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000380)=""/209, 0x88, 0xd1, 0x0, 0x1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', 0x0, r4, 0x3, 0x0, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_insert_range\x00', r3}, 0x0) io_destroy(0x0) 03:38:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100003720702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x74, 0x7, 0x24, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x91, 0x0, 0x4}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1d, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x1, 0x0, 0x8, 0x7, 0xffffffffffffff41, 0xfffffffffffffffc}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x2, 0x0, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x5, 0x2, 0x10, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x24, &(0x7f00000000c0)=""/36, 0x41100, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x8, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000004c0)=[{0x2, 0x2, 0x5, 0x3}, {0x2, 0x2, 0xb, 0x9}, {0x1, 0x4, 0xd}], 0x10, 0xec}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x120, 0x0, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x5, 0x5, 0x9fd, 0x13c}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x5, 0x3, 0x701, 0x2000, r4, 0xffff8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1814000046000000000000000000000000000000223fda7f", @ANYRES32=r4, @ANYBLOB="000000000000000085100000ffffffff85200000030000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x1a, &(0x7f00000005c0)=""/26, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xd, 0xed5, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000700)=[r4, r5], &(0x7f0000000740)=[{0x5, 0x2, 0x4, 0x9}, {0x3, 0x2, 0x5, 0x4}, {0x5, 0x3, 0x6, 0xa}, {0x4, 0x3, 0x10, 0xc}, {0x0, 0x0, 0xc, 0x8}, {0x5, 0x3, 0x0, 0x5}, {0x0, 0x3, 0x8, 0x1}, {0x3, 0x4, 0x10, 0x7}], 0x10, 0x1}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000001f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='ext4_ext_remove_space\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000000c0)='ext4_ext_remove_space\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$igmp(0x2, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000007000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x2000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000180)={r10, 0x58, &(0x7f0000000080)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='ext4_mballoc_alloc\x00', r0}, 0x10) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@local, @global=@item_4={0x3, 0x1, 0x0, "ba53c0c3"}, @local]}}, 0x0}, 0x0) unlink(&(0x7f00000000c0)='./cgroup\x00') mkdir(&(0x7f0000000080)='./cgroup\x00', 0x0) [ 1925.822382][ T8053] usbhid 1-1:0.0: can't add hid device: -71 [ 1925.828412][ T8053] usbhid: probe of 1-1:0.0 failed with error -71 [ 1925.848849][ T8053] usb 1-1: USB disconnect, device number 81 03:38:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x4330e000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) syz_clone3(&(0x7f0000000280)={0x44224000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0282, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0) [ 1926.242138][ T5318] cdc_ncm 5-1:1.0: bind() failure [ 1926.252381][T25843] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1926.253573][ T5318] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1926.277775][ T5318] cdc_ncm 5-1:1.1: bind() failure 03:38:42 executing program 0: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1926.296075][ T5318] usb 5-1: USB disconnect, device number 36 03:38:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140)=0x3, 0x21) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6025843500540600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000080)=0x5f, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e61, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x7}, 0x1c) syz_usb_connect(0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100008369c22011044b00847a0102030509022f00014002000709040000000202ff"], 0x0) [ 1926.492183][T25843] usb 4-1: Using ep0 maxpacket: 8 03:38:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x540d, 0x7) [ 1926.632522][T25843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.649666][T25843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.660539][T25843] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 1926.672013][T25843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:38:42 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) geteuid() (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000840)={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "696df3ac7cad48ab2867d8f5d5430319eb4da9be48d467c9f5bd630dd4955859e3a2d57b95ec2a61dadc24bb6151e95cbc3c32856686a62ab90452cf2bead3cc"}, 0x48, 0xfffffffffffffffd) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x80, 0x8000, 0x5, 0x7, {{0xc, 0x4, 0x2, 0x31, 0x30, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x70, [@empty, @private=0xa010102, @rand_addr=0x64010101, @empty]}, @lsrr={0x83, 0x7, 0xb9, [@private=0xa010100]}]}}}}}) (rerun: 32) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/misc', 0x180, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = fcntl$dupfd(r8, 0x0, r8) preadv2(r0, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/236, 0xec}, {&(0x7f0000000a00)=""/30, 0x1e}, {&(0x7f0000000a40)=""/231, 0xe7}], 0x6, 0x20, 0x6c, 0x3) (async) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x5, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xa7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x2, r6, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x2, 0x10001}, 0x10, 0xffffffffffffffff, r2, 0x7, &(0x7f00000004c0)=[r3, 0xffffffffffffffff, r2, r2, r7, r2, r2, r9, r3], &(0x7f0000000500)=[{0x1, 0x3, 0xa, 0x7}, {0x0, 0x4, 0x4, 0x3}, {0x2, 0x1, 0x4, 0x5}, {0x3, 0x5, 0x2, 0x3}, {0x4, 0x2, 0x1}, {0x2, 0x4, 0x1, 0x6}, {0x5, 0x4, 0xf, 0x5}], 0x10, 0xff}, 0x90) keyctl$search(0xa, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0) [ 1926.683206][T25843] usb 4-1: config 0 descriptor?? 03:38:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/838], &(0x7f0000000080)='GPL\x00', 0x0, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 1926.721882][T10520] usb 1-1: new high-speed USB device number 82 using dummy_hcd 03:38:42 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) [ 1926.787537][ T30] audit: type=1326 audit(2000000322.760:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10637 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe96da99e69 code=0x0 [ 1926.961936][T10520] usb 1-1: Using ep0 maxpacket: 32 03:38:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x5b) sendfile(r2, r3, &(0x7f0000000000)=0xfffffdef, 0x6) 03:38:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x6, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r4}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000740)=ANY=[@ANYBLOB=' '], 0x120) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_getnexthop={0x24, 0x6a, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x24}}, 0x80) unlink(&(0x7f0000000140)='./cgroup\x00') 03:38:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f0000000200)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch_time=0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',jqfmt=vfsold,i_version,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x4de, &(0x7f0000000540)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) [ 1927.082815][T10520] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.152257][T25845] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1927.172276][T10520] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.176957][T25843] wacom 0003:056A:0027.0131: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 1927.203589][T25843] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0131/input/input147 [ 1927.262332][T10520] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.352389][T10520] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.354860][T25843] wacom 0003:056A:0027.0131: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 1927.401365][T25841] usb 4-1: USB disconnect, device number 36 [ 1927.442452][T10520] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.532247][T25845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.543635][T25845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1927.557284][T25845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1927.566633][T25845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.577069][T25845] usb 5-1: config 0 descriptor?? 03:38:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) [ 1927.612122][T10520] usb 1-1: New USB device found, idVendor=0411, idProduct=004b, bcdDevice=7a.84 [ 1927.621061][T10520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.645832][T10520] usb 1-1: Product: syz [ 1927.649910][T10520] usb 1-1: Manufacturer: syz [ 1927.655043][T10520] usb 1-1: SerialNumber: syz 03:38:43 executing program 3: add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004ac000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000100)="460f01c2c74424007c000000c74424021fb6987cff2c242e0f01cf0fc71829320f01c50f013d6d220000650f38cd21430f0f72e0a466baa000ed", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000ff7fffff00000000000010000200000000000000"], 0x38}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1927.943205][T10520] usb 1-1: bad CDC descriptors [ 1927.951190][T10520] usb 1-1: USB disconnect, device number 82 03:38:43 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) [ 1928.043207][T10656] UDC core: couldn't find an available UDC or it's busy: -16 [ 1928.050912][T10656] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:38:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x4330e000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) syz_clone3(&(0x7f0000000280)={0x44224000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0282, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0) 03:38:44 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000740)="f1f85d7055a2eb88ce0520e4087bac7b42339d8cf485a5c2a0409ac505823921433838e827c4e0ec649f59cf5fbbbc6cd20e76d3926d2a5d97e92b1e83818166dd881bcaa468139373b595e39c286319b170a8043c1281ae645671d045bed0255633cf9d4eb88fdb8b93277d565b3da392df277b5eb9ceb2", 0x78}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000000680)='}', 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1, 0x0, 0x8000000}}], 0x1, 0x2, 0x0) [ 1928.146513][T25845] usbhid 5-1:0.0: can't add hid device: -71 [ 1928.154866][T25845] usbhid: probe of 5-1:0.0 failed with error -71 [ 1928.163118][T25845] usb 5-1: USB disconnect, device number 37 03:38:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x5b) sendfile(r2, r3, &(0x7f0000000000)=0xffffff7f, 0x6) 03:38:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24810, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x7d, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000980)) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) io_uring_setup(0x1aa5, &(0x7f00000002c0)) creat(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xf684}) 03:38:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x1010, r1, 0x0) r3 = syz_io_uring_complete(r2) openat(r3, &(0x7f0000000100)='./file1\x00', 0xc4201, 0x11) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x60) renameat2(r4, &(0x7f0000000340)='./file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x2) 03:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002a80)=@sg0, 0xee00, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x3ff, 0x4) close(0x3) 03:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, @desc2}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=.,upperdir=./file1,metacopy=on']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYBLOB="f4359db4925a0e29017a77155c32fdc388a3077730fa1550f1e9c015d11f2900b4334386dc88f1c6e21dad23caf05a085ce1ddda2afbb76cd5132213a3c914beaccd46b812b3a29231786ea32c59c888ae5d388f14ab9d9c1e2c63a0f991d214ef8edf1046842a726b11ab844f0929d8b4846fdb28284cdaf28c27078cf8a6ed044b903b0d6f6c348be72ebb1a7de8d04d0e2aee755c980d95532d119eddb741bb94d299715e078222394f00e330be28b6ff1c0ca7e86a25becd21fbb50fcd749cb9c4e098"], 0x20}}, 0x20040880) 03:38:44 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x140) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x7, 0x7f, 0x6, {{0x2f, 0x4, 0x3, 0x1, 0xbc, 0x68, 0x0, 0x1f, 0x29, 0x0, @multicast2, @private=0xa010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xeb, [@rand_addr=0x64010100, @multicast1, @multicast2, @private=0xa010101, @multicast1, @multicast2, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x4c, 0xb0, 0x1, 0x7, [{@local, 0x5}, {@rand_addr=0x64010101, 0x7d13}, {@loopback}, {@multicast2}, {@broadcast, 0x9}, {@multicast1, 0x5}, {@private=0xa010100, 0xfffffbff}, {@private=0xa010100, 0x2}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x8, 0x28, 0x0, 0x4, [0x72]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x24, 0xc5, 0x0, 0x9, [0x28000000, 0xa, 0x3, 0x6, 0x4, 0x81, 0x401, 0xe000]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x20, 0x7fff, 0x800, {{0xb, 0x4, 0x2, 0x2b, 0x2c, 0x65, 0x0, 0xfe, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x40}, {[@lsrr={0x83, 0x13, 0x8c, [@multicast1, @multicast2, @local, @multicast2]}, @noop, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @loopback}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000003b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000000480)=@deltfilter={0x36a4, 0x2d, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0x9}, {0xffff, 0x9}, {0x0, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x366c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x10001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x94eb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x1b18, 0x9, 0x0, 0x1, [@m_skbmod={0x4c, 0x1a, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x41f2}]}, {0x10, 0x6, "7250d97ed636a3b54a0f73ea"}, {0xc, 0x7, {0x0, 0x1d5b78deef5d614f}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xa8, 0x11, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x7ff, 0x80, 0x2, 0x1ff}]}]}, {0x5c, 0x6, "9397c9136737e119864d103cae05c574efa9c406b38ab031bc6a70874d035c2a49494865203b434143e67cfd4c98ea1b2fc43f569f008e0191e086bcde1b0671ad27c4dbb099d565429b9a3ed440a5870808838300b4ede9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4d13e69cc227dca5, 0x3}}}}, @m_simple={0x108, 0xe, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x81, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x7, 0x8, 0x9, 0xdd}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x4, 0xff, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x81, 0x3, 0xe9, 0x52}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x5, 0x3, 0x4}}]}, {0x64, 0x6, "d19ac748dab67e344987b30492669b487cc961e28a79a162f25c7d11c3273a904a8f63aad44a82bb3af3a2ac917f8201596b807c28496840a284bff020c7b2ce4767059348ac3e81a78efae98e8ff455f961174fb6229972a5cdbdca90f3fc28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x7fff, 0x20000000, 0x3, 0x81}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xacb9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xdb, 0x6, "002ad4b0d42818de95df7ab0eedbbf6dfb54ee2ed4f737277dc555c79ca7837cbdbe137037d13ab8f9c3ca278aa8e3fb2269686a207d52075ae86f0e9d93ac72c7feaa4ddfd402c9b58638189824aa0a3bbad8b1110284dd600e132206bbf8064c4bf7a2a7d176d6d918e989e5d1c26828a7b7d9e4f79771d3dd6bc31414f15dcf78849d463e300460d40cdcf43d0db3f10c57bfb654ff174158558b6199fe88baaee90f01b10cf148c02d3e0f612563e26fb8392d7db3988466ae27f8d7182e298a4442caa2c4a25a8724560de96ec9cdca43af9cc075"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x15bc, 0x1b, 0x0, 0x0, {{0xb}, {0x1510, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x612, 0x0, 0x6, {0x9d, 0x2, 0x6, 0x3, 0x7, 0x20000000}, {0xff, 0x1, 0x9, 0xfff9, 0x982, 0x8}, 0x4, 0x4c5, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x200, 0x40, 0x8, 0x100, 0xffffa2bf, 0x0, 0x0, 0x1f, 0x4, 0x0, 0xbf, 0x1, 0x6, 0x0, 0x7124, 0x80, 0x9, 0x7fe0, 0x1, 0x2, 0x2, 0x39, 0xe0000000, 0x6, 0xc09, 0x4, 0x4, 0x10000, 0x1f, 0x100, 0x401, 0x800, 0x8, 0x2, 0x4, 0x8, 0xe625, 0x6, 0xa7, 0x8, 0x0, 0xff, 0x401, 0x8, 0x4, 0x5, 0x20, 0x471, 0x6, 0xab, 0x5, 0x3, 0x77, 0x5, 0x6, 0x1000, 0x3, 0x7, 0x6, 0x8, 0x4, 0x80000000, 0x4, 0x9, 0x1, 0x1f, 0x40, 0x1, 0x8, 0x6, 0x44cc, 0x400, 0x0, 0x9, 0x4e7, 0x4, 0x9, 0xffff, 0x80000001, 0x4, 0x4, 0x5, 0x80000001, 0x4, 0x0, 0x131f, 0x7, 0x5, 0x2, 0x7, 0x401, 0x2, 0x55, 0x10001, 0x9fa5, 0x5, 0x1, 0xab9, 0x4, 0x9, 0x9, 0x6, 0x0, 0x80, 0xffff0000, 0xffffffff, 0x81, 0x20, 0x10000, 0xe52, 0x3, 0x4, 0x800, 0x1e, 0x8000, 0x6, 0x4, 0x6, 0x5, 0x6, 0x2, 0x6, 0x0, 0x3ff, 0x5, 0x0, 0x2, 0x5, 0x2, 0x10001, 0x4, 0xa2, 0x4, 0x5, 0x3, 0x0, 0x81, 0x1, 0x2, 0x6, 0x6, 0x400, 0x23d7, 0x7fff, 0xbc8, 0x8000, 0xfd6, 0x10000, 0x56, 0x48, 0x6, 0x600000, 0x5, 0x7, 0x8, 0x7ff, 0x1, 0x4, 0x800, 0x5, 0x46, 0x4, 0x9, 0xffffffff, 0x6, 0x2ff, 0x8000, 0x7f800, 0x100020, 0x1ff, 0x1, 0x3, 0x6, 0x80000000, 0x4, 0x3, 0x8, 0x7c, 0x1, 0x8, 0xfff, 0x7, 0x1, 0x1f, 0x2, 0x2, 0x1, 0x6, 0x4, 0x2, 0x7ff, 0x1000, 0x3, 0x1000, 0x1, 0x16, 0x6, 0x1000, 0x367, 0x7, 0x40, 0x3, 0x2d, 0x6, 0xfffffffe, 0x3, 0x400, 0x2, 0x3, 0x9, 0xfffffffc, 0x3ff, 0x20, 0x200, 0x7, 0x8, 0x8, 0x80, 0xff, 0x7, 0x4, 0x2, 0x3, 0xfffffffb, 0xdf, 0x4, 0x1, 0xfffffee6, 0x7fffffff, 0x8, 0x8, 0x7, 0x7fff, 0x2, 0xaa, 0x81, 0xffffffc0, 0x6, 0x1f, 0x9, 0xfffffffa, 0x3, 0x3, 0x9, 0xfb, 0x0, 0x200, 0x5, 0x9, 0x6, 0x90, 0x0, 0x2, 0x80000001, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x80000000, 0x1, 0x6, {0x0, 0x1, 0xb55, 0x4, 0x100, 0xffffffff}, {0x0, 0x1, 0x414f, 0x4, 0x3, 0x20}, 0x7, 0x0, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff0001, 0x2, 0x7, 0x1, 0x8, 0x1000, 0x401, 0x4, 0x81, 0x40, 0x5, 0xffff, 0x4, 0x20, 0x8d, 0x5, 0x7fff, 0x1, 0x1, 0x4, 0xad8, 0x8, 0x3ff, 0x400, 0x0, 0x7fffffff, 0x2a, 0x1, 0x4, 0x7, 0x101, 0x800, 0x4, 0x3ff, 0x7, 0x4, 0x6609, 0x50, 0x9, 0x4, 0x8, 0xe09, 0x7, 0xffff0000, 0xd4, 0x9, 0x10000, 0x8, 0x1aa00, 0x9, 0x5, 0x5917b19f, 0x4, 0xfffffffc, 0x9, 0x1, 0x0, 0x0, 0x51f38d9e, 0x5, 0x6, 0x1, 0x1, 0xa666, 0x1f, 0x4, 0x400, 0x10001, 0x0, 0x100, 0x7, 0x3ff, 0x3, 0x9, 0x0, 0x9, 0xf70, 0x20, 0x1, 0x2, 0x4, 0x8c4, 0x2, 0x2, 0x8001, 0xacdb, 0x8, 0x0, 0x3ff, 0xfbd, 0x3ff, 0x0, 0x3, 0x78b, 0x40, 0x24000000, 0xfffff719, 0x3, 0x4, 0xffff, 0x6, 0xffffff7f, 0x8001, 0x10000000, 0x3, 0x0, 0x7, 0xc80, 0x8000, 0xbed7, 0x3f, 0x5, 0x7, 0x8c, 0x7, 0x6, 0x5, 0x6, 0x9, 0x400, 0x7, 0x100, 0x1, 0x10001, 0x2, 0xe08, 0x8000, 0x3, 0x28, 0x400, 0x4, 0x40, 0x400, 0x5, 0x5, 0x1, 0x8, 0x81, 0x0, 0x1, 0x8000, 0x1, 0xfffffffb, 0x3, 0x401, 0x100, 0x5, 0x101, 0xffff, 0x100, 0x4, 0x0, 0x6, 0x76, 0x635, 0x4, 0x5, 0x7cf, 0x9, 0x1, 0x81, 0x80000000, 0xfff, 0xfffffff9, 0x5, 0x8b, 0x3, 0xfffffff7, 0x2, 0x7f, 0x9, 0x4, 0x4, 0x40, 0x0, 0x1f, 0x1, 0x4, 0xffffffff, 0xffffffff, 0x5, 0x101, 0x6, 0x3, 0x4, 0x7, 0xd7, 0xffff408a, 0x0, 0x200, 0x0, 0x8, 0x4, 0xffffffff, 0x1, 0x400, 0x81, 0xfffffffb, 0x2, 0x1, 0x51, 0x6, 0x9315, 0x8001, 0x0, 0x96bb, 0x7, 0x9, 0x0, 0x8, 0x8, 0x80, 0x5, 0x5, 0x1, 0x717, 0x7, 0x0, 0xffffffff, 0xa87, 0x275e, 0x1000, 0xab3, 0x3ff, 0x3, 0xe394, 0x6, 0x1, 0x3ff, 0x9, 0x10001, 0x6, 0xfffffff9, 0x1, 0x3, 0x0, 0x1, 0x6, 0x4, 0x40, 0xffffffe0, 0x4, 0x67, 0x71, 0x1, 0x4, 0x80000000, 0x1, 0x9, 0x8, 0x6, 0x5, 0x8, 0x6, 0x10000, 0x938]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x63b, 0x5, 0x17578511, 0x8, 0x7, 0x1, 0x8, 0x0, 0x88c7, 0x6, 0x4, 0xffff0000, 0x40, 0x7f, 0xf4, 0x1, 0x1, 0x6, 0xfffffff7, 0x81, 0x9, 0x7, 0x100, 0x2, 0x9, 0xd50, 0x5d, 0x5, 0x3, 0x6, 0x9, 0x9, 0x90, 0xfffffffb, 0x0, 0x9, 0x6, 0x5, 0x3, 0xfff, 0x5, 0xd4e, 0x0, 0x5, 0x5, 0x6, 0x80000000, 0x0, 0x13e, 0x6, 0x5, 0x80000000, 0x81, 0x100, 0x1, 0x10, 0x8, 0x2, 0x6, 0x9, 0x7, 0x7, 0xff, 0x8, 0x1, 0x6, 0x1, 0x1, 0x8b, 0x738f, 0xfffffffe, 0x3f, 0x81, 0x400, 0x6, 0x9, 0xecf, 0x6, 0x1f, 0x20, 0x6, 0x8, 0x5, 0x6, 0x2, 0x2, 0x7, 0x5, 0xf9, 0x8, 0x1f, 0x8001, 0x5, 0xc33, 0x2, 0x7, 0x1, 0x4, 0x8001, 0x0, 0x1, 0x0, 0x5, 0x7, 0x5, 0x2, 0x7, 0x10001, 0x69f, 0x87a9, 0x8, 0x1, 0x3, 0x737, 0x0, 0x1ff, 0xffff, 0x3, 0x40, 0x1000, 0x3ff, 0x9, 0x7, 0x1f, 0xffffffff, 0x3, 0x800, 0x9, 0x3ff, 0x5, 0xa1, 0x32, 0x400, 0x4cb, 0x8, 0x3, 0x3, 0x200, 0x3, 0x0, 0x50d, 0x6, 0x4, 0x1, 0x1, 0x7fff, 0xa2, 0x5, 0x9, 0x2, 0x8, 0x401, 0x38, 0x7, 0x9, 0x3, 0x9, 0x3, 0x1, 0x6aa, 0xd72, 0x80000000, 0x7, 0x607298dd, 0x8, 0x4, 0x6, 0x8, 0x8, 0x6, 0x92, 0x5, 0x4, 0x9, 0x8, 0xfffffbff, 0xbd3, 0xfffffbff, 0x7fffffff, 0xfffffff8, 0x9, 0x80, 0x1, 0xfffffffb, 0x10000, 0x4, 0x0, 0x200, 0x101, 0x5, 0x5, 0x6, 0x3, 0x4, 0x0, 0x4, 0x101, 0x7ff, 0xbd, 0x3, 0x80, 0x3, 0x3, 0x101, 0x2, 0x2c4, 0x0, 0x60c4, 0x0, 0x6, 0x6, 0x3, 0xffffffff, 0x18905583, 0x3, 0xffff0000, 0xffffff45, 0x800, 0x3f, 0x6, 0xfffffff7, 0x8000, 0x6, 0xff, 0x7, 0x2, 0x1, 0x30, 0x0, 0x5, 0x6, 0x1, 0xefce, 0x8, 0x964, 0x5, 0xb3, 0x401, 0x3ff, 0x3, 0xc3, 0x7fff, 0x3d4, 0x1, 0x1b800, 0x5, 0xcc8, 0x9, 0x1, 0x9, 0x7, 0x9, 0x7fffffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x9, 0xfffffffa, 0x8000, {0x80, 0x0, 0x6, 0x6, 0x1, 0x4}, {0x1, 0x2, 0x5, 0x7d1, 0x40, 0x32}, 0x4e97, 0xdba, 0xffffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x102000, 0x2, 0x2, 0x10000, 0x6, 0x287, 0x6, 0x800, 0x9, 0x7, 0x4, 0x7, 0xffffffff, 0x7fff, 0x10000, 0xc9bf, 0x2, 0x1, 0x1, 0x64, 0x253, 0x7fff, 0x1, 0x4, 0x1f, 0x7, 0x6, 0x8, 0x0, 0xffffffff, 0x4, 0xe3, 0x4, 0x1, 0x5, 0xa616, 0x2, 0x2, 0x100, 0x2, 0x5, 0x9, 0x4, 0x48, 0xe17b, 0x800, 0x410, 0x9, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x401, 0x5, 0x1ff, 0x3f, 0x3, 0x3, 0x0, 0x4, 0xfffffffb, 0x0, 0x400, 0xff, 0xe0002cd8, 0x6972, 0x6, 0xffffffff, 0x80000000, 0x81, 0x0, 0x1, 0x1000, 0x0, 0x9, 0x2, 0x8d2, 0x400, 0x0, 0x3000000, 0x4, 0x4, 0x6, 0x80, 0x3, 0x0, 0x7ff, 0x1bd, 0x80000000, 0x1, 0x1f, 0x401, 0x5, 0xd1, 0x0, 0x3f, 0x8, 0x3, 0x4, 0x9, 0x7fff, 0xf714, 0x3, 0x9, 0xffff, 0x5, 0x3ff, 0x1, 0x0, 0x4, 0x7, 0x75f, 0x9, 0xe, 0x401, 0x7, 0x8b14, 0x14, 0x30000000, 0xec, 0x7, 0xbc1, 0x5, 0xfffffffa, 0x82, 0xfffffffa, 0x101, 0x200, 0xfffffffa, 0x4, 0xffffffff, 0xfffeffff, 0x3, 0xe2, 0x4, 0x1ff, 0xfffffffd, 0x6, 0x3, 0x1, 0x5, 0x8, 0x13fda00, 0x10000, 0x2, 0x80, 0x7, 0x4e5, 0x81, 0x1e1, 0x8, 0x9, 0x4, 0x31d35052, 0x1, 0x8, 0x12f, 0x100, 0x1, 0x3, 0x5, 0x8000, 0x4, 0x2, 0x3, 0x2, 0x5, 0x8001, 0xffff, 0x1f, 0x0, 0x101, 0x0, 0xffffff4c, 0x1, 0x5, 0x8000, 0x5, 0x3ff, 0xc6, 0x1, 0x8, 0x8, 0x8, 0x80000001, 0x101, 0x8, 0x6, 0x3, 0x0, 0x2, 0x8001, 0x8, 0xff, 0x4, 0x4, 0x6, 0x20, 0xcf87, 0x6, 0x6, 0x6, 0x0, 0x4, 0x3, 0x2, 0xfffffffb, 0x1, 0x0, 0xff, 0x8, 0x1, 0x100, 0x7, 0x1, 0x5, 0x3, 0x1, 0xfc0, 0x1, 0x2, 0x1, 0x4, 0xfffffffd, 0x2, 0xffff, 0x1, 0xd6a, 0xffff, 0xff, 0x40000000, 0x80000001, 0x7fff, 0x9, 0x7fffffff, 0x2c, 0x2, 0x4, 0x2, 0x1f, 0x7, 0x20, 0x48000, 0x9, 0x101, 0x20da, 0x3, 0x975e, 0x6, 0x4, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x20, 0x9, 0xfffff1b9, 0x7fff, 0x810, 0x1030, 0x4, 0xfffffbff, 0x1, 0x2, 0x6, 0x80, 0x3f4, 0x800, 0x3, 0x9, 0x6, 0xc417, 0x9, 0x6c5, 0x0, 0x5, 0x3, 0x3ff, 0x8001, 0x8, 0x8, 0x8, 0x7, 0x0, 0x8, 0x1, 0x2, 0x1000, 0x8, 0x4, 0x71d5e013, 0xff, 0xfffffbff, 0x0, 0x7ff, 0x6, 0x1, 0x8e, 0x4, 0x7fff, 0x5, 0xfffffff7, 0xfff, 0x81, 0xff4, 0x1, 0x20000000, 0x1, 0x5, 0x5, 0x7, 0x5, 0x1b02, 0x2, 0x4da, 0x6, 0x7, 0x7, 0x1, 0x4, 0x7, 0x5, 0x10001, 0x101, 0xd0e, 0x7, 0x1, 0x400, 0x5, 0xf50, 0x7, 0x0, 0x8, 0x7f, 0x38f2, 0x7ff, 0x5, 0x1000, 0x5, 0xfffffff8, 0x3, 0x4, 0x81, 0x9, 0x3, 0x3, 0xd1, 0x0, 0x6, 0x9, 0x10000, 0xd38, 0x20, 0x4, 0x1, 0x1f, 0x80, 0x2, 0x7, 0x0, 0x401, 0x3, 0x3a8f917d, 0x1, 0x5, 0x1, 0x3, 0xe6, 0x81, 0x7, 0xfb8, 0xffff48d3, 0x3ff, 0x101, 0x6000, 0x2775, 0x7, 0x0, 0x1, 0x80000000, 0x80000001, 0x4, 0x3, 0xffffffc0, 0x800, 0x7f, 0x8001, 0x1f, 0x2, 0x6, 0x0, 0xd1, 0xbe3, 0x0, 0x0, 0x1, 0xbb4, 0x4, 0x6, 0x5, 0x5, 0x5, 0x2, 0x81, 0x5, 0x3, 0x81, 0x100, 0x100, 0x3, 0x6, 0x1000, 0x3, 0x4, 0x8, 0xb390, 0x3, 0x6, 0x5, 0x9, 0xff7d, 0x1000, 0x80, 0x5, 0x6, 0x3c883add, 0x1f, 0x8, 0x1, 0x8001, 0x2, 0xfff, 0x4, 0x81, 0x3f, 0x10, 0x8, 0xc2a, 0x40, 0x2, 0x0, 0x1, 0x3, 0x7fffffff, 0x5, 0x5, 0x106, 0x400, 0x400, 0xffff8000, 0x81, 0xfffffff8, 0xbd, 0xfffffcbe, 0x4, 0xb65, 0x401, 0xd7a, 0x3, 0x400000, 0x5, 0x0, 0x5, 0x800, 0x3, 0x3f, 0x80000000, 0x2, 0x10000, 0x800, 0xfffffacf, 0x1000, 0x8, 0x40, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x80, 0x8, 0x7f, 0x8000, 0x101, 0x7fff, 0x7, 0x98000000, 0x23, 0x4, 0x7, 0x9, 0x6, 0x1, 0x8000, 0x6, 0xfffffffd, 0x4, 0x80000001, 0xbf79, 0x6, 0x81, 0x3ff, 0x5, 0x2, 0x4, 0x7, 0x1, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f}]]}, {0x83, 0x6, "7568520c8f4563cc6ae72a1677cb2ceda3e0a46ae19e83322e7855bdd0f3466d123448ea2ca8bd384e6dc2b623a9f353a2b12e38f4fe998c9c048ac77620c57809b85c6e3cc1429d659d15a74ac230ac879a62fbcc9c3417a208db5e38014427d29b9132754cd0de4ad18bf93a453fca46c7b1f642ec30481ecae24297d3af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x124, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0xf5, 0x6, "41f77ad6e4defcad86c4a47b62d43a0d337e3f1cd2987ab34ddd3bdcda99ba17e5ea93398275cec2e3bd9dcd725fb881d0ce661dc83ea44774d9503142f803edf56f6c83f78162e64ca09ddbae39219ebad7a150f87736e5209cf698c04f793753f0b123fdf90376feec7667323b387de415ff0819ec8129509fa993c23e650197f5b26b1e657422d929f6b8267df928c042008b4f7812ce552e67653309acb34ca97640797cd405ab00a77701ed76e8a7db39f4f99f8d8ce1b13e2a16b50e1b65f21df1579636583b9fbd0da762f27bd9cc055398bb5703ee2780cec60cca68ac893764b6da88c54881270d85d1b034fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x108, 0xf, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x4, 0x7ff, 0x7}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x7a9f55d3, 0x20000000, 0x9, 0x401}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa3, 0xffffffff, 0x1, 0x5, 0x7}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xffd12}]}, {0x70, 0x6, "a4f6f74f0b9ee4d261e860a8ac5ecc1fde93850c1969776b8ea118654114947f199963812b0f13dfb67fd3850162d305523a42c2de1574ee2bcf5d869b6f2c6fb782d1af559c7ac384598d83ea2e2493efc125164907e6e6c5232d1b7265aad483533a0274a27a51236987f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOW_ACT={0x1b38, 0x9, 0x0, 0x1, [@m_connmark={0xbc, 0x1e, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x200, 0x20000000, 0x2, 0x20000000}, 0x8}}]}, {0x6e, 0x6, "3cc4c11328b148122d09d2a6c9d73ebf9c07ce87fd1c58d7d833aac297a04efb7f7166aa6d992dbe935a402a069f668cfc58a48b6aee682de4565a758e0e248941641c2cdd70a8947c93b16197fc9d0fef1cd896fb0a06dfdf9dc9d9954956139d98051a8dd1cbb9a7a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xe0, 0xa, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf79, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb1a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x0, 0x7, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7, 0x5, 0x1ab, 0x477}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x1, 0x4, 0x69, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x843, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2001, 0x5}}]}, {0x3b, 0x6, "cb9690c4a6543b54b4ef2ae59f603dfbea2db92e16b2dbd98098b4c0d7cd6845a3b5c35f2368a95811313515c72ae9b3995a2babff3ba2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x1c8, 0xc, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6, 0x2, 0x33a8}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x80, 0xffffffffffffffff, 0x4}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x0, 0x3, 0x3f}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3c78, 0x5, 0x2, 0x80000000}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x1, 0x8, 0xffff, 0x6}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x7, 0x1, 0xba55, 0x8}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x40000000, 0x10000000, 0xa2, 0xf0}, 0x28}}]}, {0xd6, 0x6, "65e9162aef3250ae8cd15b8f8d83b4741a5207d99760323df566bc52bf75d88f9ea88d0b107a70196dd54c9182b7611ee0a9a10669756f9c0066fb43c8be592c071258ff6e03f72279129c9ac458d0c684d03d546133a834df382090e8423752339a0f837a246507518dc2df2023cccbaca70c71faca736ce35b4122a60b71dea4cd55544c7a7a37290f386aba7ff34c65ef9fad5cf6e5d6b5063a7b3cab0a6049cc77f9af20fa99d3a9878cb3be03049f378a965be3dfe4104e6be449319d19bf6d7f87beb38a769dcc23e7d64768a8551d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1110, 0x1b, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x4, 0x0, 0x9}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x100, 0x1, 0x7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x5, 0x7, 0x80000001}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x4c9b, 0x3, 0xb5d, 0x80}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa1d9000, 0xffffffff, 0xe, 0x80000001, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x10000000, 0x7fff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x5, 0x4, 0x5}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x54c, 0x15, 0x0, 0x0, {{0xb}, {0x4b0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x7, 0x1, 0x2ca8, 0x0, 0x1efde231, 0x7, 0x5, 0x54b, 0x80000001, 0x8, 0x1, 0x5, 0x1, 0x9, 0x300, 0x494f, 0x0, 0x1, 0x8, 0x3ff, 0x101, 0x8, 0x1000, 0x20, 0x4, 0xfffffffc, 0x7, 0x9, 0x8000, 0x20, 0x0, 0x3f, 0x401, 0x200, 0x4, 0x1000, 0x7fff, 0xffff, 0x7ff, 0xdbae, 0x7da, 0xc86, 0x4, 0x4, 0x1f, 0x3, 0x9, 0x2, 0x80000000, 0x0, 0x6, 0x9, 0x8, 0x7fff, 0x0, 0x7, 0x2, 0x1, 0x4, 0x48, 0xffffffff, 0x78, 0x400, 0x9, 0x9, 0x7ff, 0x9, 0x80000001, 0x2, 0x4, 0x1d9c, 0x7fff, 0x7fff, 0x6, 0x3, 0x3, 0x7, 0x0, 0x9, 0x1, 0xe779, 0x9, 0x7ff, 0x401, 0xffff, 0x7, 0x401, 0x0, 0x5, 0x7fffffff, 0x9, 0x0, 0x0, 0x9, 0x2, 0x8, 0x9e1, 0x1, 0x5, 0x0, 0x1, 0xa3, 0xecc6, 0x3, 0x8, 0x6, 0x4, 0xffffff7f, 0x7, 0xfa, 0x1, 0x8, 0x6edc, 0xffff, 0x6, 0x7, 0x2, 0x7ff, 0x4, 0x6, 0x7, 0x8, 0x33b, 0xffff6b69, 0x40, 0x1, 0xa2, 0x100, 0x1, 0x4, 0x10000, 0x5, 0xd00b, 0x6400, 0x7, 0x5, 0x1, 0x8001, 0x7, 0x7f, 0x97b, 0xfffffffa, 0x7, 0x4, 0x6, 0x1, 0x1f, 0x6, 0x0, 0x7, 0x7, 0xff, 0x7fff, 0x878c, 0x7fffffff, 0x80, 0x4, 0x400, 0x7, 0x7ff, 0x4, 0x7, 0x2, 0x8000, 0x9, 0x80, 0x3, 0x7, 0x3ff, 0x101, 0x20, 0x4, 0x1, 0x1000, 0x20, 0x4, 0x8, 0x8, 0x4, 0x3f, 0x8, 0x1, 0x7331ab52, 0x1000, 0x3ff, 0xfff, 0x1af, 0x8, 0x6, 0x397, 0xcaf, 0xffffffff, 0x1000, 0x5, 0x8, 0x3, 0x3f, 0x7, 0x7, 0x78d5, 0x1, 0x800, 0x7f, 0x6, 0xffffffff, 0x0, 0x484c, 0x1f, 0x0, 0x4, 0x0, 0xc, 0x1782b5c3, 0x0, 0x9, 0xd03a, 0x0, 0x3, 0x18000000, 0x1f, 0x4, 0x9, 0x3e6a1a0c, 0x3, 0x5, 0x0, 0x8, 0x4, 0x6, 0x46f, 0x4, 0x4f9, 0x9, 0x64c, 0x8, 0x1ff, 0x2, 0xfffffffd, 0x11ae77c7, 0x3f, 0x3, 0x5, 0x5, 0xa96, 0x4, 0x3ff, 0x8001, 0x22, 0xffffffff, 0x0, 0x8, 0x2, 0xfffffffb, 0x7fff, 0x7fffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x43}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff0000, 0x1, 0xacec, 0x2, 0x20, {0x80, 0x2, 0xfffc, 0x4, 0x9, 0x6}, {0x80, 0x0, 0x0, 0x1, 0x3, 0x5}, 0x7f, 0x2, 0x200}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x3, 0x3f, 0x6, {0x9, 0x1, 0x6, 0xff, 0x1, 0x2}, {0x1f, 0x2, 0x906a, 0xffff, 0x8a, 0x3}, 0x100, 0x3ff, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc0000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x81}]]}, {0x73, 0x6, "584faf2c83595b44aa0426759fdfdacb7c5fb8d6d9efa2f81052e8776b5830ee7cdfb37c6b360bfa3de17073f88f0049e4b904b4a2da367be11847dc519a4fec577ada451e7d62555dfd0469c7a767d52bd666cac434306965b43119b31c9cf8b74e09a04ab51a2abd853db76e1317"}, {0xc, 0x7, {0x0, 0x3a9d1cf0d3ab93f8}}, {0xc}}}, @m_nat={0x174, 0x2, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2366ae79, 0x81, 0x0, 0x8, 0x2}, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x4, 0x7, 0x400}, @empty, @private=0xa010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff801, 0x5, 0x4, 0x80, 0x9}, @rand_addr=0x64010101, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x1, 0x7, 0x5, 0x3}, @broadcast, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x1, 0x3, 0x7fffffff, 0x9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0xffffff18, 0x1, 0x8, 0x420}, @multicast1, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x4, 0x6, 0xff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x101, 0x3, 0x37}, @private=0xa010102, @rand_addr=0x64010101, 0xffffffff}}]}, {0xc, 0x6, "d1124962b8bf96d6"}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x1}}]}, 0x36a4}, 0x1, 0x0, 0x0, 0x4008010}, 0x800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003c00), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000003cc0)={&(0x7f0000003bc0), 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x1c, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x4000880) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003d40), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x50, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x240240c0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003f00)={'ip6gre0\x00', &(0x7f0000003e80)={'syztnl1\x00', r2, 0x4, 0xc7, 0x0, 0x0, 0x15, @loopback, @empty, 0x8000, 0x20, 0x1, 0x6}}) sendmsg$nl_route(r1, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)=@ipv6_delroute={0x24, 0x19, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x10, 0x20, 0x8, 0xfe, 0x1, 0xc8, 0x0, 0x1800}, [@RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4010000) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x34, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8801) socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x3c, r9, 0x210, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004280)={r1}, 0x4) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000004300), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x34, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004804}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000044c0)={'gretap0\x00', &(0x7f0000004440)={'sit0\x00', r6, 0x80, 0x7, 0x1, 0xfff, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x65, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@noop, @noop, @end, @ssrr={0x89, 0xb, 0xd8, [@broadcast, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0xb, [0x7]}, @timestamp_prespec={0x44, 0x1c, 0xbd, 0x3, 0x2, [{@local, 0x100}, {@loopback, 0xcf}, {@private=0xa010101, 0x8000}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000004600)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x10030000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004500)=@ipv6_newaddrlabel={0x8c, 0x48, 0x8, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x8, 0x0, r11, 0xcae2}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x85}, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000004740)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x74, r9, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="fbbd4f06d04d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "294e7e3d88575b70b4ed1953a614c0fb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "76836cbc0dfdd8ceb42138ca18bbeb3d"}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="0b335a944aadb3308f5d3d88737fa9f46832335f68658f4c2ac9"}]}, 0x74}, 0x1, 0x0, 0x0, 0x9}, 0x4000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x74, r9, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008025}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004900), r1) sendmsg$IPVS_CMD_GET_SERVICE(r12, &(0x7f00000049c0)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004980)={&(0x7f0000004940)={0x20, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004004) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000004b00)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x50, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 03:38:44 executing program 4: add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004ac000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000100)="460f01c2c74424007c000000c74424021fb6987cff2c242e0f01cf0fc71829320f01c50f013d6d220000650f38cd21430f0f72e0a466baa000ed", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000ff7fffff00000000000010000200000000000000"], 0x38}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140)=0x3, 0x21) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6025843500540600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000080)=0x5f, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e61, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x7}, 0x1c) syz_usb_connect(0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100008369c22011044b00847a0102030509022f00014002000709040000000202ff"], 0x0) 03:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1928.668741][ T30] audit: type=1400 audit(2000000324.640:4323): avc: denied { nlmsg_read } for pid=10681 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 03:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000980), &(0x7f0000000a40)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {0x2}, [], {0x2}, {0x4}}, 0x24, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r3, &(0x7f0000000140)='./file0\x00') mount_setattr(r3, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000300)={0x0, 0x0, 0x40000}, 0x20) [ 1928.750845][T10686] UDC core: couldn't find an available UDC or it's busy: -16 [ 1928.770068][T10686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:38:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x1010, r1, 0x0) r3 = syz_io_uring_complete(r2) openat(r3, &(0x7f0000000100)='./file1\x00', 0xc4201, 0x11) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x60) renameat2(r4, &(0x7f0000000340)='./file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x2) 03:38:44 executing program 0: add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004ac000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000100)="460f01c2c74424007c000000c74424021fb6987cff2c242e0f01cf0fc71829320f01c50f013d6d220000650f38cd21430f0f72e0a466baa000ed", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000ff7fffff00000000000010000200000000000000"], 0x38}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:38:44 executing program 4: socket(0x840000000002, 0x3, 0xff) socket$inet6(0xa, 0x3, 0xff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7f}, 0xc) fsmount(0xffffffffffffffff, 0x0, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x1010, r1, 0x0) r3 = syz_io_uring_complete(r2) openat(r3, &(0x7f0000000100)='./file1\x00', 0xc4201, 0x11) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x60) renameat2(r4, &(0x7f0000000340)='./file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x2) 03:38:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x7, 0x3ff, {{0x1e, 0x4, 0x2, 0x18, 0x78, 0x68, 0x0, 0x1f, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4}, @rr={0x7, 0x27, 0xa7, [@local, @multicast1, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, @remote]}, @end, @generic={0x82, 0x3, 'W'}, @cipso={0x86, 0x32, 0x2, [{0x2, 0x11, "6532fc216aec3ec8dc892889b3afaf"}, {0x0, 0x9, "3327d05bc5adc2"}, {0x1, 0x12, "d237a87eccbb7ed564d4bfcb5e46a46a"}]}, @noop]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@ifindex=r1, r0, 0x4, 0x20, 0x0, @link_id=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f00000041c0)=ANY=[], 0x1, 0x523, &(0x7f0000000240)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, r7, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1a, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x80) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x20, 0x15, &(0x7f00000008c0)=@raw=[@ldst={0x0, 0x2, 0x3, 0x8, 0x8, 0xffffffffffffffc0, 0x4}, @alu={0x7, 0x1, 0x9, 0x9, 0xb, 0x2, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x4, 0x0, 0x4, 0x2, 0xb, 0x8, 0x1}, @exit], &(0x7f0000000980)='GPL\x00', 0x3, 0xd1, &(0x7f00000009c0)=""/209, 0x41100, 0x26, '\x00', r1, 0x7, r5, 0x8, &(0x7f0000000ac0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x9, 0x5, 0x9}, 0x10, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000b40)=[r9], &(0x7f0000000b80)=[{0x4, 0x5, 0xe, 0x265e5c36de9360e1}], 0x10, 0x5}, 0x90) 03:38:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002a80)=@sg0, 0xee00, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, @desc2}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=.,upperdir=./file1,metacopy=on']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYBLOB="f4359db4925a0e29017a77155c32fdc388a3077730fa1550f1e9c015d11f2900b4334386dc88f1c6e21dad23caf05a085ce1ddda2afbb76cd5132213a3c914beaccd46b812b3a29231786ea32c59c888ae5d388f14ab9d9c1e2c63a0f991d214ef8edf1046842a726b11ab844f0929d8b4846fdb28284cdaf28c27078cf8a6ed044b903b0d6f6c348be72ebb1a7de8d04d0e2aee755c980d95532d119eddb741bb94d299715e078222394f00e330be28b6ff1c0ca7e86a25becd21fbb50fcd749cb9c4e098"], 0x20}}, 0x20040880) 03:38:45 executing program 1: add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004ac000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000100)="460f01c2c74424007c000000c74424021fb6987cff2c242e0f01cf0fc71829320f01c50f013d6d220000650f38cd21430f0f72e0a466baa000ed", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000ff7fffff00000000000010000200000000000000"], 0x38}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:38:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f0000000a40)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch\x00time>0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',jqfmt=vfsold,i_version,resgid=', @ANYRESHEX=0x0, @ANYRES64], 0x1, 0x4de, &(0x7f0000000540)="$eJzs3U1rXHsZAPDnnGRq2qYmRRe1YC22khTtTNLYNrioCqKrglr3NSaTEDLJhMykbULRFD+AIKKCK1duBD+AIP0IIhR0LyqK3Nveu7iLezuXmTnTm6YzeeHOS0l+PziZ/3mZPM8zw/zP/M85zAngxLocETci4mWtVrsWEWPZ8jSbnp6NiJ3mdi+eP56vT0nUavfeSSLJltW3n9z1P7OnxEhE/PB7ET9J3oxb2dpemSuVihvZfKG6ul6obG1fX16dWyouFddmZqZvzd6evTk71ZU6RyPiznf+8+tf/OG7d/7ytYf/vP+/yZ8m2fLYVUe3NUvPNV6LluGI2OhFsAEYyurJDToRAAAOpfU9/8sRcS3GYqjxbQ4AAAA4TmrfHI0Pk4gaAAAAcGyljWtgkzSfXQcwGmmazzev4f18nElL5Ur1q4vlzbWF5rWy45FLF5dLxansWuHxyCX1+elG+5P5G6/mI2K5VJyJiPMR8aux0431+flyaWHQBz8AAADghDi7Z/z//lhz/H9ItaGeZgcAAAB0zfigEwAAAAB6zvgfAAAAjj/jfwAAADjWvn/3bn2qte5/vfBga3Ol/OD6QrGykl/dnM/PlzfW80vl8lLjN/tWD/p/pXJ5/euxtvmoUC1WqoXK1vb91fLmWvX+8mu3wAYAAAD66PyXnv4jiYidb5xuTHWnBp0U0BfDR9n4373LA+g/v98LJ9eR9v/AsZIbdALAwCUHrO948c5fu58LAADQGxNfaH/+Pznw2MBO2qcUgR5x/A9OLuf/4eRy/h9OrlwMRTaQT3YGnQwwEL0//1+rHSkhAACg60YbU5LmIxrHAUYjTfP5iHON2wLkksXlUnEqIj4bEX8fy32mPj/deGZy4JgBAAAAAAAAAAAAAAAAAAAAAAAAAGiq1ZKoAQAAAMdaRPrfJLv/18TY1dG9xwdOJR+MNR4j4uHv7v3m0Vy1ujFdX/7uq+XV32bLbwziCAYAAACwV2uc3hrHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA3vXj+eL419TPu/78dEePt4g/HSONxJHIRcea9JIZ3PS+JiKEuxN95EhEX2sVP6mnFeJZFu/inBxg/jYizXYgPJ9nTev/zrXafvzQuNx7bf/5uNXqoT69z/5e+6v+GOvQ/5w4Z4+KzPxU6xn8ScXG4ff/Tip90iH/lkPF//KPt7U7rar+PmGi7/0lei1Worq4XKlvb15dX55aKS8W1mZnpW7O3Z2/OThUWl0vF7G/bGL/84p9f7lf/mQ7xxw+o/+oh6//o2aPnn2s2c+3iT15p//5f6BA/zfZ9X8na9fUTrfZOs73bpT/+7dJ+9S90qP+g93/ykPVf+8HP/3XITQGAPqhsba/MlUrFjb2N1s6+zarj1zjw1divUX+l3ooqNI7a+NnbkcagGiP7fboH1ycBAAC98eYYGAAAAAAAAAAAAAAAAAAAAOi3fv66XsvOYEoFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXxwEAAP///EnRzA==") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc2, 0x64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000000)='4', 0x0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) writev(r5, &(0x7f0000000000)=[{0x0}], 0x1) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000eafa7240936901b02902f400100109021b000124a8"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000200)={0x0, 0x9, 0x48, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000013c0)={0x0, "9125587169283e8e19a9c00264ea2b63"}) 03:38:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_journal_start\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x200884, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) [ 1929.439637][T10707] loop2: detected capacity change from 0 to 512 03:38:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac85800000000000000024e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0fe8a7d06d7535f7866907dc6751dfb292f7d3acec77f5efad9c11650300000000000000649c1cfd138d5521f9451759c3421eed73d5661cfeecf9c66cf6dd6dcd54c3b3ff02000000d7c983c044c03bf3cc2367a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4a37c9af2551ce935b0f327cb3f011a7d069111d5a34ed09baafa9e87110bd5602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2fc7925bfacbb031e7743f541cd0aed4af7588c8e1b44ccb19e810879b70a70000000000000000000000d7900a820b63278f4e9a217b98000000002a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a1420cfd9e1f84d8271ff6606b2a44bc47b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b207000000000000001d24291c25449f106a99893ed20fa7a050fbbef90327e827e513e96068fd1e8a43e89f9c050022a961546ed5365470fa503c1fac35b903e10c62bebc943c17ff1432d0881406bc176e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb87ba55b2d72078e9f40e4ffff06aabca77e64c988dd413230d60a7f7681314df1c2a0f4249c7be5329ac62417ba83b498812a8f57b9b52ebc8b327a967e41f61fe4382601bff5f5dbcd3d50a065bcc67943ba05f3a5366ca6d291f931d9cde41bdabdae4717317621abaa7179e2d44f8ebca654f9e4571963a3f198769e309fc99f6320f47140bb9a5e359804c2653d19462139d5c505dc6e4f178c9a098b51333cccfe0d2eb41dd079de3cfa60365787ca4b8eb920a05f4b5c0f44d16a2d9f2bc894dfd78e819e54e79eb5ceb91451149e099e47b94fd53ed2dd33d43d8c681e027175e8d281ba4ac708543bc3f9e8e35532b7b90eee5df24d5ec9cd4e33a79f5b123cf15edeb8b0ee7cafbfebb907ccee427f3616d6fd9015432977a55aa000"/838], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 03:38:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) [ 1929.565669][T10707] EXT4-fs (loop2): 1 orphan inode deleted [ 1929.595591][T10707] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 03:38:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x5b) sendfile(r2, r3, &(0x7f0000000000)=0xffffff7f, 0x6) [ 1929.650078][T10707] ext4 filesystem being mounted at /root/syzkaller-testdir2782976038/syzkaller.YvodQT/618/file0 supports timestamps until 2038 (0x7fffffff) 03:38:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x541b, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x10, 0xfcffffff, &(0x7f0000000440)=[@clear_death], 0x0, 0x0, 0x0}) [ 1929.838650][ T30] audit: type=1326 audit(2000000325.810:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0851f64e69 code=0x0 03:38:45 executing program 2: add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004ac000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000100)="460f01c2c74424007c000000c74424021fb6987cff2c242e0f01cf0fc71829320f01c50f013d6d220000650f38cd21430f0f72e0a466baa000ed", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000ff7fffff00000000000010000200000000000000"], 0x38}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1929.882621][ T5324] usb 1-1: new high-speed USB device number 83 using dummy_hcd 03:38:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002a80)=@sg0, 0xee00, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:46 executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="76c6fda71c3d4a7f5d86a6d4695e0998a4e7ce98c5135245f161aacb63d122c056b65849350720b2bf3280022ed35fc0f7c4d00402a919159738bc3965fa89528b92b5e0e7beef279e898ea127767137d7e303bd61309e03ef8a51143dedafe140fea2177f78e13334c38f695274071739b69a4cd5e833f4174b9cd0d1cf119fa2adc6091aa9b58f88f01dd71a4eb37b", @ANYRES64=0x0, @ANYRES64], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000400)={0x40, 0x22, 0xcc, {0xcc, 0x34, "042f2cff63b39a54b274a57d9405c77de7ec2354cdcee999071f09f0b073682e1efc24847467769796203c7cc242075be1441941010ab3404bd51c0b4e4dfb293c6bf69c16ef0d39eaf5f37037863ae2cf6913c95d92cf8274701011022672aa2de8e690f8cb975fc9ed304958a12de1458206cad5ffa4e75e71df0e4769d55cdd0dde8769a1f955f2841b341489feefcfafcedc9002c6afa2b3cbbadda0881c8488b9db95ac9db6b25833b99e3c46aded4b8aa584ef40d229bec47999041a91f2b1f8c4a63cf66d4766"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000080)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0x6, 0x6}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x80, 0x4c, "24212fce", "ff760d67"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x9, 0x71, 0xcd, 0x8, 0x8}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x20, 0x14, 0x5d, "8b366f4e7b1e2423f87e0bf1acedde9847ab382be20e273e25139ed3cb7d05f9b74eb03181871f583b261bddfeb2aa7af1241ac2e3693b3ee31cf5312aef7caa87c5efa235f6de61ab10ee46cb6efd2f9ea0712fce9a929a30d3592eb9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x180, 0x4, [0xf000]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x2345}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0xb, 0x2, "d909"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b08d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7df}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x74}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r3, &(0x7f00000002c0)="110000001200050f0c1000000049b23e9b", 0x11, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000c00)={0x0, 0x22, 0xe8, {0xe8, 0xf, "3946d6c7735b8d56e0a3f7abffc64346c673a1ca1d834a284bced9cebbf69f0c2377b49cfdae37f10fa178edf920dda97614eebb0dffc128984cee93be6dba2232fa87875a224061721921128845563ea6ab439ac4610f722cfa30ead29b0cad8343d98ae77be5e2e15e0a69899664a00621cc7dff3c6df716fa50fa44cf85c708361ee9773c66e6a445c9aaced31c02d187a7b202cbe28b804a41301eb6b4e11e43e52e9e61d474a4ec488ee45b6f3a6aaf49bcfcc2d42479aba1c6dacb8494e71326a70be9b1a54abb3e87fe4c64be7f1bdca5e6fc171262cba0be36dcd3c4501e44d0fe75"}}, &(0x7f0000000d00)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "652784ad8d1c50289e3fba07505ebc0d8e3b061ec2c63d7b1408248e804ecb3b59d2044ac311a28d10c04a1fb48b5375310e83ec55393667604298c2907365e36e05e018cfdb73e12f9c73bb9ee3a3b8d1e4e23e7d46410564dbd53ed8127062863519c655a346496e53a5a0baacf5ba35cf1270032aaca01cf401b4d59bdb85665a20172ad2a73b5796d927d3c07aa5b6a1b47873c74447df1bd308ebfc10b19eaa76500ce761"}}, &(0x7f0000000940)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0xb, "91b7863d"}, @local=@item_4={0x3, 0x2, 0x3, "458221a4"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0xb, "cc05df1c"}, @local=@item_4={0x3, 0x2, 0x5, "90d29540"}, @global=@item_4={0x3, 0x1, 0x5, "c12473b7"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x22, 0x1, {0x22, 0x779}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000dc0)={0x40, 0x8, 0x90, "ba2ddad3d8e87d3ba487a3b02b75f426471510916051c4dc0cd1d99d211f172f89d7e52959099a3e9e2e28fb15776093405a3b067f78432bf08925a0796b45021ee6b9ca869be024c4ea9d43521a355480f8a846aca06d23c5fa516036bbb5672496f6ff9b7a0dbdc9e1fb815da4a1bafc13583777cb77bea03e2a00a475aa415df92d3ba286443905cdcb377539679e"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000ec0)={0x20, 0x1, 0x48, "9983076fe8cd6745b6ad32b331bf331bd05d3280aa2f25b7a622cb3815a4a12c6e6fed980ad67102c80ea17c3d138064b4302b9983de5983229236f5ebc0cfc058dacb5e11d5b78c"}, &(0x7f0000000f40)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "ca06"}]}}, 0x0}, 0x0) 03:38:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) [ 1930.159652][T10744] UDC core: couldn't find an available UDC or it's busy: -16 [ 1930.167763][T10744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:38:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) io_setup(0x3f, &(0x7f0000000780)=0x0) io_cancel(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1930.262341][ T5324] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.272937][ T5324] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1 03:38:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x3}}, {@errors_remount}, {@bh}, {@data_err_ignore}, {@noauto_da_alloc}, {@dioread_lock}, {@barrier}, {@nomblk_io_submit}, {@nodelalloc}]}, 0x1, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x74, 0x6d, 0xc19, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'netdevsim0\x00'}, {0x14, 0x35, 'dvmrp1\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x74}}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1ff, 0x0, 0x3ff, 0x50940353fb80b4b0, r4, 0x30c, '\x00', r7, r4, 0x5, 0x5, 0x5, 0x2}, 0x48) mkdirat(r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x4) 03:38:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x10, 0xfdfdffff, &(0x7f0000000440)=[@clear_death], 0x0, 0x0, 0x0}) [ 1930.402322][ T5324] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 2.29 [ 1930.411494][ T5324] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1930.420474][ T5324] usb 1-1: Manufacturer: syz [ 1930.427017][ T5324] usb 1-1: SerialNumber: syz 03:38:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x2, 0x101, 0x3fd, 0x8, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x445, &(0x7f00000010c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="ff6465762f6c6f6f7030004d77c24735a37cdcc200f46535706b10f8c07f3ec0defab79b92c5603b8b40ab50f994f5ffc5c8656b75201e54b854c056b85c60d5ba01d8dfa83099704386674a4bc24497f1b26e7ec8f814e7f50822a0bfc35c28bc6ecc582b88fa8e24222dceb4eb181e6afa22869eb047e8a0fb0096da76424db0e6594bc20df84fe715dc0985797c5da2fc545528254958e8d849813d16a2835e0c2204d2635fcba4dfccf89972efc5f19a56dea040a4ee7d6e171fe3cc5056f976816c"], &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x2000007, 0x30, r4, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f00000008c0)}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYRESOCT=r8], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500242909880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) personality(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0xff, 0x1f, 0x6b, @loopback, @private2, 0x0, 0x10, 0x2, 0x4}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000580)=""/253, 0xfd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="081a00000800000018370000030000000000000000000000181900ffff000000000000cf0d59ee8e00d26d6c79ff88ebc34a1afb8b25bae7674ad32649620ff4dd9f57515aa27d9000000000", @ANYRES32=r12, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x20, 0xb6, &(0x7f0000000240)=""/182, 0x41100, 0x48, '\x00', r14, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0xc33}, 0x10, r15, r13, 0x2, 0x0, &(0x7f00000006c0)=[{0x3, 0x3, 0xc, 0x6}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x8}, 0x90) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff7f0000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000f80c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r2, @ANYBLOB="0000000808000000183600000085100000f8ffffff18000000070008000000bf91000000000002b702000090a421043aa221af6c003e4ea15600000000858000000a010000b700"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x61, &(0x7f00000004c0)=""/97, 0x41100, 0x48, '\x00', r11, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r15, r1, 0x1, &(0x7f0000000640)=[r2, r0, r2, r2, r16, r2, r2, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x4, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 03:38:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='ext4_da_update_reserve_space\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x20, 0x20, 0xfffffff8, 0x1, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x66, 0x0, 0x8b, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x83, 0x12, "7b258ad297ccb11e98a9ca816d38d551"}, @ssrr={0x89, 0x7, 0x6b, [@rand_addr=0x64010101]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x72500, 0x40) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff"], 0x7c}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper={0x40086303}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x1, 0xc, 0x3, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x15, &(0x7f00000003c0)=""/21, 0x0, 0x40, '\x00', r3, 0x28, r1, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000540)=[r1], &(0x7f00000005c0)=[{0x5, 0x5, 0x7, 0x6}, {0x1, 0x1, 0x2, 0x6}, {0x1, 0x3, 0x1, 0xa}], 0x10, 0x1f}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700060800000000000000008500000075000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000007c0)='rdma.current\x00', 0x0, 0x0) 03:38:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:46 executing program 2: socket(0x840000000002, 0x3, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:46 executing program 2: r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="4b6e136305364de9b50b14e1cf65f01240d45df542db95982a7315589537bccdad3d3cc46c227c49ff61a650948e1d579d3b45f1cd23953898af413016fb6c52e8766a3a4dce163db8d39c2f54ce676c622286e301346b70b5e3a652a6ed36c77d0e26fcdd652d87a041b9e5153e503cb82a768426edb3aec9e4392393bdb947cbcdad18cb8945e660a1f27e70b81394c892197e17b475a89f0b25a43f9b6e70fd19cb073974cd315dcfff6480c1deb9c828a46fabc8c2967a154d7b5860e319fc4abc4064d52c3c74795651f35d94582e7556380ef3c0967db349d7b4290d831d1859bbd4dea64c0d691eba1436c85337d424cb2ab60e23a3", 0xf9, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "703c6fd198f1dc9aec56b455fee977078766eb7077286355aff3e6b0616c51a381c7cdd648de3d5df2859e20888e429814e094b48258ce6b89419d0e02567605", 0x34}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "4abe140d58398d5ad9ed866a5154b8e85feadc91e7614e446386fb7a600eff7c6af8e2525d066f832af3180cc963d9d2356cfbe779915609ff59b32f8635294a", 0x1c}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) keyctl$search(0xa, r1, &(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, r2) r3 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="fc5e1d1aaa12e5ce3e93285a64572aca15e5c5e7640073a07e95a99a0a6d908e71f0f3c8465a9dc670f554b2dc92bf972e147180ca1afde64a5e32b0129bd5293b8fb1d6aeea30fb4251b873d498121f13f2e0addd7605037fe7", 0x5a, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x1) r4 = request_key(&(0x7f0000000500)='cifs.idmap\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='logon\x00', r1) r5 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "26bfc10ec3a3c2836f70fc1e70bd32e79751e453f35502bbb90f6a9ed488e479e2ac2653ac38cb4fe5ef10aa54188f917c548267259048079fd8f1a353189b54", 0x1f}, 0x48, 0xfffffffffffffffa) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r7 = request_key(&(0x7f00000007c0)='cifs.spnego\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)='\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r1, 0x1) r8 = add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="2c990b404025ed9d102ab6d743581d13076810af28b2bee2392d7c169808e1c90dc389c15cec5060f0f4fe14d6008bf8b7ae7303a15bda5e6ba351dd2d2f0ecd4af88c0df9d8a9c54e948d4832a03a0a5d31f53ea6d1f9df2d1e692d7ce4c04f8b3e9f9fa508ce29d37dfb3baf7fc3806ce401e35704628f039be0bf2bcff2a3cf24cb496f0a4ef597e63cd7f3ace0cdb76199cdd3ee063951dccc094220fbda15fdeb3a29d692d6b5188a6ed1adbce6f23255ec8402f3a2f0b4d3e11c7f6ca625abe607de32e79c917161", 0xcb, r0) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffff8, r2, 0x1) r9 = add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, &(0x7f0000000a80)="6057d67bf2780499c0c1b9a11d0de397bb3b39dfa1000564a85f48f53b904464f0069363c234c574959072de76ad21d416a180bfd79d0c4d9a3c925b5fc55f5220ab655358d0ad6473a5e9b362033e9bb97588f2bfcd141c4611c1ad2882ad355ac9c06b884014dd0cde21e771500373da345975ac3213db89f3db9049136187511e113174d68286bf8093527b37c86558e7ee7c05c97ca9cacb16b1f5f3d98bcb934db66d1500eee521dc3e1d081c6e0989c7e9b46ab1e34d9ecf5dd3f286a7ef3680fda183281c625be6202bac5c0168d20cf5fb88c66913b1be2f9705e2eba4b7650d2ec09e8387cda80cc6a041aa3f53", 0xf2, r5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b80)={r9, 0xf9, 0x16}, &(0x7f0000000bc0)={'enc=', 'pkcs1', ' hash=', {'blake2s-256-x86\x00'}}, &(0x7f0000000c40)="7c9a319b9dd1f49eb5b563be2d1e0d2b2ca6bc6b022258b14f5235f6a07508280343d8b793a4587c44b43a3fc91e5f4ffd4e32fde9953069d55f86ff79305a7463cf061ca45d2cdf43f99ea743cd7d9c41c4f1d1873f19642c630cba68d7178654b302fca9156565bfe3580f3a16ae593a610118f00c4177171e610c5fed149e910c9dcdc9461a4399a2044207f59ab5cd34a939569f90494942f03fcc98b85956fcc47c91c134583eceb80dd051452e1c717ae67ce34ae7722ed517c7cd6b0296d2f989ef750f1542dd762eccd2b3c65864fce161d2b35b02fa8b29f9d62f7e640dbc74be09334d14951634f995e587847690dd20636ea752", &(0x7f0000000d40)="1496d9917b2ae87d63ba29e2ef24fab0e599bef9c586") keyctl$KEYCTL_MOVE(0x1e, r7, r2, r1, 0x1) r10 = add_key$keyring(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000e80), &(0x7f0000000ec0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r11, &(0x7f0000000f00)='cifs.spnego\x00', &(0x7f0000000f40)='\x9e\'[*-\x00') keyctl$revoke(0x3, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r7, 0x0) r12 = add_key(&(0x7f0000000f80)='id_resolver\x00', &(0x7f0000000fc0)={'syz', 0x2}, &(0x7f0000001000)="d2eaf6940e2e3404b51e51e33ad916e157d6f501c9a25a16461b218d7ae7ba133533fca4f47d67512de249bc9291ad084619ecf63bbb05ab0eef87f9bafb59ef280859a0251a3aa89f5c0b7e2c9dcafe02f1d32689905423d2d88ad9d363e79233ef5576c3f15f2f176de01385f167d4fe64c68b090e856179d43be4a6dd0f498f8391342033829f635864df522e4707c8b24cf7ec368d88f47ac2276079b3da41", 0xa1, r0) keyctl$KEYCTL_MOVE(0x1e, r12, r2, r2, 0x1) lstat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r13, 0x0) 03:38:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x540e, 0x7) 03:38:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xfe, 0x1, 0x2d, @private2, @mcast1, 0x20, 0x1, 0x1, 0x7}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x1000, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r3}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500ff077200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)='`', 0x1}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/144, 0x90}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@call={0x85, 0x0, 0x0, 0x19}, @ldst={0x6, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xce, &(0x7f00000002c0)=""/206}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r7, &(0x7f0000000000), 0x248800) 03:38:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x2, 0x101, 0x3fd, 0x8, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x445, &(0x7f00000010c0)="$eJzs3M1PHGUYAPBnBmgjrVIVv2qraGuLVkGooiamCTcPRA968LoBio18aMHENsTQxINXE/sHaLzaP8FoEz8uejK9qtGDNiGmcOihhzWzH7DALmUrMIb9/ZLZvu/MbN935s0zs/PyZAJoWT3ZRxJxMCJ+iYiucnXtDj3lf5ZvzI9mSxLF4pv/JKX9lm7Mj1Z3rX7vQPaRRvSmEenHSTxap93ZCxffLUxOjp+v1Pvnpt7rn71w8blzU4WJ8Ynx6YHTA0NDL7348uDAth3raz8v//lF++vTX15emr55ZrAz6+/Byrba49guPdGz9lzWOLHdjeXsgZpy0p5jR2hKW0Rkw9VRiv+uaIvVweuKH37LtXPAjipm9jfcvFAE9rAk8u4BkI/qjT57/q0uu/Xbg/wtDpcfAJcqczvLK+PfHmm58P6J775d83y/nXoi4u2RN45mS+zQPAwAAABAK/tmOCKerTf/l8aDNftl5Yci4uGIeCQiDkeU8nqORMTRiHgsIh6v5hM1Yf3+G+d/0ut3dGBsyeJwxKs1uV3LNeNfcaitUrs7q0RHcvbc5PjzEXFPRPRGx/6svlmW1tQ7hZ8abVud/7vaWV4zP1qdC6z043r7ur9PjxXmCnd8wKyxeCnicHu98U9WMoGSiHgiIp7cyn/4fSmjbqL7yq2VVa98cv+1RrvXzv9mS9b+2vFnJxU/jzhZN/5XMxeTzfMz+0vXg/7qVWGjHy8PfdWofeOfryz+Ozcf/0NJbb7ubPNtXO3+/ddG224Vi8XNx7/+9X9f8lapg/sq6z4szM2dH4jYl4xsXD/YfJ/3qur5qJ6vbPx7j9W//99X+U52Qo9FxPGIeKqSu3yydO+PeDoinomIU5u0uTDxR8MMM/Gfr2z8x5qK/+YLf1/69Hij9m8//ln8v1DqTG9ljd9/t7fVAcq7nwAAAAAAAABsj7T0Drwk7Vspp2lfX/kdft3RmU7OzM6dOjvzwfRY+V15h6IjrWZ6ddXkgw6Uyqv1wXX10xFxb0R81nZXqd43OjM5lvfBQ4s70CD+M3+15d07YMd5Xyu0LvEPrUv8Q+sS/9C6xD+0LvEPrUv8Q+uqxP9C3v0Adt/6+/9H10bO3Pz6yJWcugPsIr//oSX9l/f6KSgo7NVC3lcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+HfwMAAP//CzTTqg==") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="ff6465762f6c6f6f7030004d77c24735a37cdcc200f46535706b10f8c07f3ec0defab79b92c5603b8b40ab50f994f5ffc5c8656b75201e54b854c056b85c60d5ba01d8dfa83099704386674a4bc24497f1b26e7ec8f814e7f50822a0bfc35c28bc6ecc582b88fa8e24222dceb4eb181e6afa22869eb047e8a0fb0096da76424db0e6594bc20df84fe715dc0985797c5da2fc545528254958e8d849813d16a2835e0c2204d2635fcba4dfccf89972efc5f19a56dea040a4ee7d6e171fe3cc5056f976816c"], &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x2000007, 0x30, r4, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f00000008c0)}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYRESOCT=r8], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500242909880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) personality(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0xff, 0x1f, 0x6b, @loopback, @private2, 0x0, 0x10, 0x2, 0x4}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000580)=""/253, 0xfd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="081a00000800000018370000030000000000000000000000181900ffff000000000000cf0d59ee8e00d26d6c79ff88ebc34a1afb8b25bae7674ad32649620ff4dd9f57515aa27d9000000000", @ANYRES32=r12, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x20, 0xb6, &(0x7f0000000240)=""/182, 0x41100, 0x48, '\x00', r14, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0xc33}, 0x10, r15, r13, 0x2, 0x0, &(0x7f00000006c0)=[{0x3, 0x3, 0xc, 0x6}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x8}, 0x90) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff7f0000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000f80c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r2, @ANYBLOB="0000000808000000183600000085100000f8ffffff18000000070008000000bf91000000000002b702000090a421043aa221af6c003e4ea15600000000858000000a010000b700"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x61, &(0x7f00000004c0)=""/97, 0x41100, 0x48, '\x00', r11, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r15, r1, 0x1, &(0x7f0000000640)=[r2, r0, r2, r2, r16, r2, r2, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x4, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 03:38:47 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001800)=ANY=[@ANYBLOB="c9fcc208fb605e47e13b18b419bdb99cc57f00b579454f35c500000000d1540fef7667ebf2ce"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f00006d3000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000580)="b805000000b9004800000f01c16565660f38828f0000ffffc4017ae655070f01d1b9800000c00f3235000800000f30c481fd157d67c7442400b7000000c7442402a84d0000ff1c24c7442400b531d25dc744240200000000c7442406000000000f011c240f017a003e660f38813f", 0x6e}], 0x1, 0x23, &(0x7f0000000640)=[@cr4], 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="640f38f10266b9800000c00f326635004000000f3066b9e60b00000f32b840008ee8ff1f0f3226660f38298b7e9d0fbaf2e7660f71e57ef30fc77402", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r8}], 0x1, 0xfffffffffffffff8) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x14) process_vm_writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000340)=""/145, 0x91}], 0x3, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/68, 0x44}], 0x2, 0x0) 03:38:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1931.008742][T10770] loop2: detected capacity change from 0 to 512 [ 1931.096873][T10770] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz-executor.2: casefold flag without casefold feature 03:38:47 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="154c4ac879a0852819028008003950638f8e5758c2c8c410224bd8000000000036504c"], 0x15) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_TXQLEN={0x8}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x58}}, 0x0) openat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xa4b40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) r12 = gettid() r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r14}, 0x10) rt_sigqueueinfo(r12, 0x0, &(0x7f00000001c0)) [ 1931.139120][ T5324] usb 1-1: USB disconnect, device number 83 [ 1931.171153][T10770] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1931.211972][T10770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 03:38:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002a80)=@sg0, 0xee00, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) [ 1931.305037][T10780] lo: Caught tx_queue_len zero misconfig 03:38:47 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x6, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r4}, 0x10) (async) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000740)=ANY=[@ANYBLOB=' '], 0x120) (async) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_getnexthop={0x24, 0x6a, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x24}}, 0x80) unlink(&(0x7f0000000140)='./cgroup\x00') 03:38:47 executing program 2: r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="4b6e136305364de9b50b14e1cf65f01240d45df542db95982a7315589537bccdad3d3cc46c227c49ff61a650948e1d579d3b45f1cd23953898af413016fb6c52e8766a3a4dce163db8d39c2f54ce676c622286e301346b70b5e3a652a6ed36c77d0e26fcdd652d87a041b9e5153e503cb82a768426edb3aec9e4392393bdb947cbcdad18cb8945e660a1f27e70b81394c892197e17b475a89f0b25a43f9b6e70fd19cb073974cd315dcfff6480c1deb9c828a46fabc8c2967a154d7b5860e319fc4abc4064d52c3c74795651f35d94582e7556380ef3c0967db349d7b4290d831d1859bbd4dea64c0d691eba1436c85337d424cb2ab60e23a3", 0xf9, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "703c6fd198f1dc9aec56b455fee977078766eb7077286355aff3e6b0616c51a381c7cdd648de3d5df2859e20888e429814e094b48258ce6b89419d0e02567605", 0x34}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "4abe140d58398d5ad9ed866a5154b8e85feadc91e7614e446386fb7a600eff7c6af8e2525d066f832af3180cc963d9d2356cfbe779915609ff59b32f8635294a", 0x1c}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) keyctl$search(0xa, r1, &(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, r2) r3 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="fc5e1d1aaa12e5ce3e93285a64572aca15e5c5e7640073a07e95a99a0a6d908e71f0f3c8465a9dc670f554b2dc92bf972e147180ca1afde64a5e32b0129bd5293b8fb1d6aeea30fb4251b873d498121f13f2e0addd7605037fe7", 0x5a, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x1) r4 = request_key(&(0x7f0000000500)='cifs.idmap\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='logon\x00', r1) r5 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "26bfc10ec3a3c2836f70fc1e70bd32e79751e453f35502bbb90f6a9ed488e479e2ac2653ac38cb4fe5ef10aa54188f917c548267259048079fd8f1a353189b54", 0x1f}, 0x48, 0xfffffffffffffffa) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r7 = request_key(&(0x7f00000007c0)='cifs.spnego\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)='\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r1, 0x1) r8 = add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="2c990b404025ed9d102ab6d743581d13076810af28b2bee2392d7c169808e1c90dc389c15cec5060f0f4fe14d6008bf8b7ae7303a15bda5e6ba351dd2d2f0ecd4af88c0df9d8a9c54e948d4832a03a0a5d31f53ea6d1f9df2d1e692d7ce4c04f8b3e9f9fa508ce29d37dfb3baf7fc3806ce401e35704628f039be0bf2bcff2a3cf24cb496f0a4ef597e63cd7f3ace0cdb76199cdd3ee063951dccc094220fbda15fdeb3a29d692d6b5188a6ed1adbce6f23255ec8402f3a2f0b4d3e11c7f6ca625abe607de32e79c917161", 0xcb, r0) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffff8, r2, 0x1) r9 = add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, &(0x7f0000000a80)="6057d67bf2780499c0c1b9a11d0de397bb3b39dfa1000564a85f48f53b904464f0069363c234c574959072de76ad21d416a180bfd79d0c4d9a3c925b5fc55f5220ab655358d0ad6473a5e9b362033e9bb97588f2bfcd141c4611c1ad2882ad355ac9c06b884014dd0cde21e771500373da345975ac3213db89f3db9049136187511e113174d68286bf8093527b37c86558e7ee7c05c97ca9cacb16b1f5f3d98bcb934db66d1500eee521dc3e1d081c6e0989c7e9b46ab1e34d9ecf5dd3f286a7ef3680fda183281c625be6202bac5c0168d20cf5fb88c66913b1be2f9705e2eba4b7650d2ec09e8387cda80cc6a041aa3f53", 0xf2, r5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b80)={r9, 0xf9, 0x16}, &(0x7f0000000bc0)={'enc=', 'pkcs1', ' hash=', {'blake2s-256-x86\x00'}}, &(0x7f0000000c40)="7c9a319b9dd1f49eb5b563be2d1e0d2b2ca6bc6b022258b14f5235f6a07508280343d8b793a4587c44b43a3fc91e5f4ffd4e32fde9953069d55f86ff79305a7463cf061ca45d2cdf43f99ea743cd7d9c41c4f1d1873f19642c630cba68d7178654b302fca9156565bfe3580f3a16ae593a610118f00c4177171e610c5fed149e910c9dcdc9461a4399a2044207f59ab5cd34a939569f90494942f03fcc98b85956fcc47c91c134583eceb80dd051452e1c717ae67ce34ae7722ed517c7cd6b0296d2f989ef750f1542dd762eccd2b3c65864fce161d2b35b02fa8b29f9d62f7e640dbc74be09334d14951634f995e587847690dd20636ea752", &(0x7f0000000d40)="1496d9917b2ae87d63ba29e2ef24fab0e599bef9c586") keyctl$KEYCTL_MOVE(0x1e, r7, r2, r1, 0x1) r10 = add_key$keyring(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000e80), &(0x7f0000000ec0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r11, &(0x7f0000000f00)='cifs.spnego\x00', &(0x7f0000000f40)='\x9e\'[*-\x00') keyctl$revoke(0x3, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r7, 0x0) r12 = add_key(&(0x7f0000000f80)='id_resolver\x00', &(0x7f0000000fc0)={'syz', 0x2}, &(0x7f0000001000)="d2eaf6940e2e3404b51e51e33ad916e157d6f501c9a25a16461b218d7ae7ba133533fca4f47d67512de249bc9291ad084619ecf63bbb05ab0eef87f9bafb59ef280859a0251a3aa89f5c0b7e2c9dcafe02f1d32689905423d2d88ad9d363e79233ef5576c3f15f2f176de01385f167d4fe64c68b090e856179d43be4a6dd0f498f8391342033829f635864df522e4707c8b24cf7ec368d88f47ac2276079b3da41", 0xa1, r0) keyctl$KEYCTL_MOVE(0x1e, r12, r2, r2, 0x1) lstat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r13, 0x0) 03:38:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000001300), 0x4) 03:38:47 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0003020000000203684e43891cf24a1ed54195fa31c9d1d3fb8f6700c5d212e6a2611d3c1ed7097016c9d56aec1368e7577194d149e4963395f5224b4e105fc0bc9bca4aaf22257547fcce8a8dfd29c66d52339d84d9cd9c8380cfc14eb338acd0402305233f6b1c2c5715d9a02856cdacc5c24a"], 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mremap(&(0x7f0000b73000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000058a000/0x1000)=nil) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x24, 0xdf, {0xdf, 0xf, "58e85552e4c6d15bb3780f94e70b11e1728f9c6edda3fc6f3a0f5db64c41489df1dc571c454ff181170d0957d6b6e62ec91e079c668835487ea9110f566ca9c2c15f073681ac7db3a97624e0606100520414fff21c6aad00609188cd313993b71f3d431fe5008354fcdd25d38a02b3326e9ac4ea0e6a8306429ac7e18b2734b96a514aafee18702fc0c6855ffdd32edbf70aede44a220d79283b28f1f5e1b3fb3e673bae8c5e0a3ee9b0dd94eface542ae8325ba1375c149174dcc69dcf5ac92fac6cfacce895943b7640a8acdeac32806fb9ec76869521cc45fa72945"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000040)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3a, 0x8, 0x3f, 0x3, "fc636610", "b9874287"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x5, 0x2, 0xfb, 0xc6, 0xff, 0x800}}}, &(0x7f0000000980)={0x84, &(0x7f0000000600)={0x0, 0x3, 0xb3, "f68560c704bf2c265c229bc40232af2fded2d0117d3e6d8df11d54604acf375b27fb70e21a6245fda6d8611c08774c81e1af97b5d48fe65519d212fb12733da235d8546009ff56c68d1303a4dbb2b0469000e29bdd1736c4c7f3aa35a9c366b91acd5a8164e2f1af22e416ab7caaa9f9954a5bd51b4ef401543c22465792f51b4475f1517d50e83e2239bc1e6fb8f81cf6fa5580bd1d20aa8bf1abde990b7a37c8a93cb16be6438592d5f972c44f10a6dd38d0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3c}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x1, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "26f4"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "ea79"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x40}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xfd}}) 03:38:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x2, 0x101, 0x3fd, 0x8, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x445, &(0x7f00000010c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="ff6465762f6c6f6f7030004d77c24735a37cdcc200f46535706b10f8c07f3ec0defab79b92c5603b8b40ab50f994f5ffc5c8656b75201e54b854c056b85c60d5ba01d8dfa83099704386674a4bc24497f1b26e7ec8f814e7f50822a0bfc35c28bc6ecc582b88fa8e24222dceb4eb181e6afa22869eb047e8a0fb0096da76424db0e6594bc20df84fe715dc0985797c5da2fc545528254958e8d849813d16a2835e0c2204d2635fcba4dfccf89972efc5f19a56dea040a4ee7d6e171fe3cc5056f976816c"], &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x2000007, 0x30, r4, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f00000008c0)}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYRESOCT=r8], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500242909880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) personality(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0xff, 0x1f, 0x6b, @loopback, @private2, 0x0, 0x10, 0x2, 0x4}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000580)=""/253, 0xfd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="081a00000800000018370000030000000000000000000000181900ffff000000000000cf0d59ee8e00d26d6c79ff88ebc34a1afb8b25bae7674ad32649620ff4dd9f57515aa27d9000000000", @ANYRES32=r12, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x20, 0xb6, &(0x7f0000000240)=""/182, 0x41100, 0x48, '\x00', r14, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0xc33}, 0x10, r15, r13, 0x2, 0x0, &(0x7f00000006c0)=[{0x3, 0x3, 0xc, 0x6}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x8}, 0x90) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff7f0000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000f80c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r2, @ANYBLOB="0000000808000000183600000085100000f8ffffff18000000070008000000bf91000000000002b702000090a421043aa221af6c003e4ea15600000000858000000a010000b700"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x61, &(0x7f00000004c0)=""/97, 0x41100, 0x48, '\x00', r11, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r15, r1, 0x1, &(0x7f0000000640)=[r2, r0, r2, r2, r16, r2, r2, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x4, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 03:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0x3, 0x9, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x85, &(0x7f0000000280)=""/133, 0x41100, 0x71, '\x00', 0x0, 0x36, r1, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0x800, 0xe66f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r0, r0, r0, r0], 0x0, 0x10, 0x454b}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000aa000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8, 0x18, 0x1, 0x5da, {{0x6, 0x4, 0x0, 0x22, 0x18, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@end]}}}}}) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x6, &(0x7f00000004c0)=@raw=[@call={0x85, 0x0, 0x0, 0x5b}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x400}, @call={0x85, 0x0, 0x0, 0xd1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000500)='GPL\x00', 0xba1e, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, r1, 0x8, &(0x7f00000005c0)={0xfffffff7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5, r0], 0x0, 0x10, 0x1000}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) pause() 03:38:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002a80)=@sg0, 0xee00, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) [ 1931.684379][T10797] loop2: detected capacity change from 0 to 512 [ 1931.739959][T10797] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 1931.755841][T10797] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1931.772652][T10797] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 03:38:47 executing program 2: r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="4b6e136305364de9b50b14e1cf65f01240d45df542db95982a7315589537bccdad3d3cc46c227c49ff61a650948e1d579d3b45f1cd23953898af413016fb6c52e8766a3a4dce163db8d39c2f54ce676c622286e301346b70b5e3a652a6ed36c77d0e26fcdd652d87a041b9e5153e503cb82a768426edb3aec9e4392393bdb947cbcdad18cb8945e660a1f27e70b81394c892197e17b475a89f0b25a43f9b6e70fd19cb073974cd315dcfff6480c1deb9c828a46fabc8c2967a154d7b5860e319fc4abc4064d52c3c74795651f35d94582e7556380ef3c0967db349d7b4290d831d1859bbd4dea64c0d691eba1436c85337d424cb2ab60e23a3", 0xf9, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "703c6fd198f1dc9aec56b455fee977078766eb7077286355aff3e6b0616c51a381c7cdd648de3d5df2859e20888e429814e094b48258ce6b89419d0e02567605", 0x34}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "4abe140d58398d5ad9ed866a5154b8e85feadc91e7614e446386fb7a600eff7c6af8e2525d066f832af3180cc963d9d2356cfbe779915609ff59b32f8635294a", 0x1c}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) keyctl$search(0xa, r1, &(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, r2) r3 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="fc5e1d1aaa12e5ce3e93285a64572aca15e5c5e7640073a07e95a99a0a6d908e71f0f3c8465a9dc670f554b2dc92bf972e147180ca1afde64a5e32b0129bd5293b8fb1d6aeea30fb4251b873d498121f13f2e0addd7605037fe7", 0x5a, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x1) r4 = request_key(&(0x7f0000000500)='cifs.idmap\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='logon\x00', r1) r5 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "26bfc10ec3a3c2836f70fc1e70bd32e79751e453f35502bbb90f6a9ed488e479e2ac2653ac38cb4fe5ef10aa54188f917c548267259048079fd8f1a353189b54", 0x1f}, 0x48, 0xfffffffffffffffa) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r7 = request_key(&(0x7f00000007c0)='cifs.spnego\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)='\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r1, 0x1) r8 = add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="2c990b404025ed9d102ab6d743581d13076810af28b2bee2392d7c169808e1c90dc389c15cec5060f0f4fe14d6008bf8b7ae7303a15bda5e6ba351dd2d2f0ecd4af88c0df9d8a9c54e948d4832a03a0a5d31f53ea6d1f9df2d1e692d7ce4c04f8b3e9f9fa508ce29d37dfb3baf7fc3806ce401e35704628f039be0bf2bcff2a3cf24cb496f0a4ef597e63cd7f3ace0cdb76199cdd3ee063951dccc094220fbda15fdeb3a29d692d6b5188a6ed1adbce6f23255ec8402f3a2f0b4d3e11c7f6ca625abe607de32e79c917161", 0xcb, r0) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffff8, r2, 0x1) r9 = add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, &(0x7f0000000a80)="6057d67bf2780499c0c1b9a11d0de397bb3b39dfa1000564a85f48f53b904464f0069363c234c574959072de76ad21d416a180bfd79d0c4d9a3c925b5fc55f5220ab655358d0ad6473a5e9b362033e9bb97588f2bfcd141c4611c1ad2882ad355ac9c06b884014dd0cde21e771500373da345975ac3213db89f3db9049136187511e113174d68286bf8093527b37c86558e7ee7c05c97ca9cacb16b1f5f3d98bcb934db66d1500eee521dc3e1d081c6e0989c7e9b46ab1e34d9ecf5dd3f286a7ef3680fda183281c625be6202bac5c0168d20cf5fb88c66913b1be2f9705e2eba4b7650d2ec09e8387cda80cc6a041aa3f53", 0xf2, r5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b80)={r9, 0xf9, 0x16}, &(0x7f0000000bc0)={'enc=', 'pkcs1', ' hash=', {'blake2s-256-x86\x00'}}, &(0x7f0000000c40)="7c9a319b9dd1f49eb5b563be2d1e0d2b2ca6bc6b022258b14f5235f6a07508280343d8b793a4587c44b43a3fc91e5f4ffd4e32fde9953069d55f86ff79305a7463cf061ca45d2cdf43f99ea743cd7d9c41c4f1d1873f19642c630cba68d7178654b302fca9156565bfe3580f3a16ae593a610118f00c4177171e610c5fed149e910c9dcdc9461a4399a2044207f59ab5cd34a939569f90494942f03fcc98b85956fcc47c91c134583eceb80dd051452e1c717ae67ce34ae7722ed517c7cd6b0296d2f989ef750f1542dd762eccd2b3c65864fce161d2b35b02fa8b29f9d62f7e640dbc74be09334d14951634f995e587847690dd20636ea752", &(0x7f0000000d40)="1496d9917b2ae87d63ba29e2ef24fab0e599bef9c586") keyctl$KEYCTL_MOVE(0x1e, r7, r2, r1, 0x1) r10 = add_key$keyring(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000e80), &(0x7f0000000ec0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r11, &(0x7f0000000f00)='cifs.spnego\x00', &(0x7f0000000f40)='\x9e\'[*-\x00') keyctl$revoke(0x3, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r7, 0x0) r12 = add_key(&(0x7f0000000f80)='id_resolver\x00', &(0x7f0000000fc0)={'syz', 0x2}, &(0x7f0000001000)="d2eaf6940e2e3404b51e51e33ad916e157d6f501c9a25a16461b218d7ae7ba133533fca4f47d67512de249bc9291ad084619ecf63bbb05ab0eef87f9bafb59ef280859a0251a3aa89f5c0b7e2c9dcafe02f1d32689905423d2d88ad9d363e79233ef5576c3f15f2f176de01385f167d4fe64c68b090e856179d43be4a6dd0f498f8391342033829f635864df522e4707c8b24cf7ec368d88f47ac2276079b3da41", 0xa1, r0) keyctl$KEYCTL_MOVE(0x1e, r12, r2, r2, 0x1) lstat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r13, 0x0) 03:38:47 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000740)="f1f85d7055a2eb88ce0520e4087bac7b42339d8cf485a5c2a0409ac505823921433838e827c4e0ec649f59cf5fbbbc6cd20e76d3926d2a5d97e92b1e83818166dd881bcaa468139373b595e39c286319b170a8043c1281ae645671d045bed0255633cf9d4eb88fdb8b93277d565b3da392df277b5eb9ceb2", 0x78}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000000680)='}', 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1, 0x0, 0x78000000}}], 0x1, 0x2, 0x0) 03:38:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x2, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="604660420000000000000000000037009500000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) close_range(r1, 0xffffffffffffffff, 0x0) [ 1931.922240][ T5318] usb 4-1: new high-speed USB device number 37 using dummy_hcd 03:38:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) 03:38:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000b40)={0x1, 'nicvf0\x00', {}, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x2}]}}}]}, 0x44}}, 0x0) bind$packet(r2, &(0x7f0000000440)={0x11, 0xf6, r5, 0x1, 0x81, 0x6, @local}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=@acquire={0x154, 0x17, 0x4, 0x70bd26, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4d2}, @in6=@private1, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e20, 0x400, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0x73, r3, r4}, {{@in=@remote, @in=@local, 0x4e22, 0x2, 0x4e22, 0x3a, 0xa, 0x80, 0x0, 0x2c, r5, r6}, {0x800, 0x2, 0x7, 0x881b, 0x0, 0x38}, {0x9, 0x8, 0xbfc0000, 0x7}, 0x4, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x5, 0x6ade, 0x4, 0x70bd28}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @offload={0xc, 0x1c, {r10}}, @lastused={0xc}, @offload={0xc}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000880)=""/166, &(0x7f0000000940)=""/215, &(0x7f0000000a40)=""/153, 0xd000}) 03:38:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:48 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5421, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x540f, 0x7) 03:38:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1048410, 0x0, 0x3, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='net_prio.prioidx\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB]) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@metacopy_on}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020731af8ff00000000bfa10000000000000701000019000000b702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000280)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x100) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@ipv4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x2) [ 1932.282283][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.300149][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.315060][ T5318] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 03:38:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private}, {@in=@local, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'seqiv(aegis128l)\x00'}}}]}, 0x184}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000532020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x29, &(0x7f0000000400)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x10, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x2, 0x10000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1], &(0x7f0000000580)=[{0x5, 0x5, 0x0, 0x8}], 0x10, 0x81}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xffff}) fcntl$lock(r5, 0x25, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x1, 0xdc, &(0x7f0000000680)="e4", &(0x7f00000006c0)=""/220, 0x3, 0x0, 0x3e, 0xe7, &(0x7f00000007c0)="d89dd607d1f0e2eeace28ede9c1eec0dec3c23523d2fdd1eee3f3b5a4ac8c8477297b02404de69716e47c20f77daf35dd03533d94b8f15322e900582bc25", &(0x7f0000000800)="23dfda8191d2b05e759bc8cb4a0339b0043c404d1cd65f64dcc923b4626079824a546a11ed65727c1233a5c06b653e05143391da7ffdbdf0007547a643c57045880abc97121adaa92f06634348d2fd537ae1eb16537e21eff7016a7a21a59f0af430131333994b5a3fc4bc9f21ee85d17a589146988310e40bd4a8b17ca6be583b683d9bfb08825e37fdb43e601a914185779cb8d64acb09da317f28a35f215d1cbcdf4b6a256f8953e3b6aba96d81a7696c7c6dc4451a9830a365cb1054a33503a37fffd0060c9b96fbff45c717ff8fa40d8a8986e5fd98748eefebe5572e44cb58c65b82c629", 0x2, 0x0, 0x4}, 0x50) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1111083, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x28424, &(0x7f0000000a80)=ANY=[@ANYRES32=r1]) r6 = io_uring_setup(0x3964, &(0x7f0000000500)) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x80}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) removexattr(0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = open(&(0x7f0000000100)='.\x00', 0x555502, 0x0) r10 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) dup3(r10, r9, 0x0) signalfd(r6, &(0x7f0000000040), 0x8) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x242, 0x0) [ 1932.326527][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.345946][ T5318] usb 4-1: config 0 descriptor?? [ 1932.371201][T10832] overlayfs: failed to resolve './file0': -2 03:38:48 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000740)="f1f85d7055a2eb88ce0520e4087bac7b42339d8cf485a5c2a0409ac505823921433838e827c4e0ec649f59cf5fbbbc6cd20e76d3926d2a5d97e92b1e83818166dd881bcaa468139373b595e39c286319b170a8043c1281ae645671d045bed0255633cf9d4eb88fdb8b93277d565b3da392df277b5eb9ceb2", 0x78}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000000680)='}', 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1, 0x0, 0x100000000000000}}], 0x1, 0x2, 0x0) 03:38:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1932.438845][T10836] EXT4-fs (sda1): Unrecognized mount option "" or missing value 03:38:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x10, 0xfffffdfd, &(0x7f0000000440)=[@clear_death], 0x0, 0x0, 0x0}) 03:38:48 executing program 0: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYBLOB="74f656c120ac0c810902d206fd71fd82a387d94a8f482e1d009f82f4c075698c68c0cb3a9978ab9308a756816adda4e423dbec51b36872aab8121837c17b7d858e12f442f348a6ca46c14314754055a339ef495e424b30ec729fee0bb73c0871cf1e540431cbf74ac0cec6fac4a369bf063c10795b7dbdadc5ecb06187e8cf62eb925441a325058f62ffea51e6bc6aace629c14bf5819a8c9189030e82d57fd16da35c67e78a8ac445e3b68d5d69d4551c077e78473e0a8269f5b5d3f494168dae7796bc04aed9adbf09ba96f82058", @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="e79a32573d376f1d3562c7f8c09e1c6d34d04de61111dfde6e0a85d0ac797f207a9396329cfeaa26a1ae0bd823de941009e4ee4257338d55c79f83a24c1affe4b05e23183e45bc8d7eded4c64979ed2a06efb3ada60cd5cef08518b4b2604a63983f089d60fc9bccffda1c1759ff8ac2535bcabf915091adb020dba5ea77e0e4beb54af19b29af"], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5}]}]}, 0x38}}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r7}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r10}, 0x9) ioctl$SIOCSIFHWADDR(r9, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) 03:38:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x2, 0x101, 0x3fd, 0x8, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x445, &(0x7f00000010c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="ff6465762f6c6f6f7030004d77c24735a37cdcc200f46535706b10f8c07f3ec0defab79b92c5603b8b40ab50f994f5ffc5c8656b75201e54b854c056b85c60d5ba01d8dfa83099704386674a4bc24497f1b26e7ec8f814e7f50822a0bfc35c28bc6ecc582b88fa8e24222dceb4eb181e6afa22869eb047e8a0fb0096da76424db0e6594bc20df84fe715dc0985797c5da2fc545528254958e8d849813d16a2835e0c2204d2635fcba4dfccf89972efc5f19a56dea040a4ee7d6e171fe3cc5056f976816c"], &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x2000007, 0x30, r4, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f00000008c0)}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYRESOCT=r8], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500242909880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) personality(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0xff, 0x1f, 0x6b, @loopback, @private2, 0x0, 0x10, 0x2, 0x4}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000580)=""/253, 0xfd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="081a00000800000018370000030000000000000000000000181900ffff000000000000cf0d59ee8e00d26d6c79ff88ebc34a1afb8b25bae7674ad32649620ff4dd9f57515aa27d9000000000", @ANYRES32=r12, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x20, 0xb6, &(0x7f0000000240)=""/182, 0x41100, 0x48, '\x00', r14, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0xc33}, 0x10, r15, r13, 0x2, 0x0, &(0x7f00000006c0)=[{0x3, 0x3, 0xc, 0x6}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x8}, 0x90) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff7f0000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000f80c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r2, @ANYBLOB="0000000808000000183600000085100000f8ffffff18000000070008000000bf91000000000002b702000090a421043aa221af6c003e4ea15600000000858000000a010000b700"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x61, &(0x7f00000004c0)=""/97, 0x41100, 0x48, '\x00', r11, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r15, r1, 0x1, &(0x7f0000000640)=[r2, r0, r2, r2, r16, r2, r2, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x4, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 03:38:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0xa21, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x20000102, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500800000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) chdir(0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fstatfs(r6, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0xa21, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) syz_emit_ethernet(0x20000102, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sched_process_fork\x00', r2}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500800000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) (async) chdir(0x0) (async) creat(&(0x7f0000000180)='./bus\x00', 0x0) (async) fstatfs(r6, &(0x7f0000000000)) (async) 03:38:48 executing program 4: socket$inet6(0xa, 0x3, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1932.823651][ T5318] hid (null): bogus close delimiter 03:38:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xe, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240)="16", 0x20000000}, 0x20) (async, rerun: 64) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280), 0x20000000}, 0x20) (async, rerun: 64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000240)}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 03:38:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b908571502000000000000015d00000000000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x1, 0xa5, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x70, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffa, 0x6}, [@extension_unit={0xa, 0x24, 0x8, 0xb5, 0x4, 0x76, "05dca7"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x66, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0x3, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x200, 0xff, 0x19, "608a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x7, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x3, 0x1, 0xad, "", "11a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x40, 0x20, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0x8000}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x54, 0x1f, 0x3, 0xff, 0x45}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "5bf0960ad9d519f17b3b606feecd3c73"}]}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xa32d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x1000, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="5f9ec19e04aaf4aa39692c9e811425b5db7b951df837f158699f8a1417a8cc6387c6503179529579dda0", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffd7, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='mctp_key_acquire\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r8 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000040)="24000000180003041dfffd946f61fdff020c010a1f05fe060c10080008000f00fff3c00e140000001a00ffffba16a0aa1c09000014000000", 0x38}], 0x1}, 0x0) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 03:38:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac85800000000000000024e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0fe8a7d06d7535f7866907dc6751dfb292f7d3acec77f5efad9c11650300000000000000649c1cfd138d5521f9451759c3421eed73d5661cfeecf9c66cf6dd6dcd54c3b3ff02000000d7c983c044c03bf3cc2367a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4a37c9af2551ce935b0f327cb3f011a7d069111d5a34ed09baafa9e87110bd5602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2fc7925bfacbb031e7743f541cd0aed4af7588c8e1b44ccb19e810879b70a70000000000000000000000d7900a820b63278f4e9a217b98000000002a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a1420cfd9e1f84d8271ff6606b2a44bc47b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b207000000000000001d24291c25449f106a99893ed20fa7a050fbbef90327e827e513e96068fd1e8a43e89f9c050022a961546ed5365470fa503c1fac35b903e10c62bebc943c17ff1432d0881406bc176e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb87ba55b2d72078e9f40e4ffff06aabca77e64c988dd413230d60a7f7681314df1c2a0f4249c7be5329ac62417ba83b498812a8f57b9b52ebc8b327a967e41f61fe4382601bff5f5dbcd3d50a065bcc67943ba05f3a5366ca6d291f931d9cde41bdabdae4717317621abaa7179e2d44f8ebca654f9e4571963a3f198769e309fc99f6320f47140bb9a5e359804c2653d19462139d5c505dc6e4f178c9a098b51333cccfe0d2eb41dd079de3cfa60365787ca4b8eb920a05f4b5c0f44d16a2d9f2bc894dfd78e819e54e79eb5ceb91451149e099e47b94fd53ed2dd33d43d8c681e027175e8d281ba4ac708543bc3f9e8e35532b7b90eee5df24d5ec9cd4e33a79f5b123cf15edeb8b0ee7cafbfebb907ccee427f3616d6fd9015432977a55aa000"/838], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1933.011869][T25841] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1933.028315][T10873] UDC core: couldn't find an available UDC or it's busy: -16 [ 1933.042702][ T5318] usb 4-1: language id specifier not provided by device, defaulting to English [ 1933.044146][T10873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1933.105615][T10873] UDC core: couldn't find an available UDC or it's busy: -16 [ 1933.118928][T10873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1933.132206][ T30] audit: type=1326 audit(2000000329.110:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c8282ce69 code=0x0 03:38:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rmdir(0x0) [ 1933.432242][T25841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.443150][T25841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.453159][T25841] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1933.462330][T25841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.471673][T25841] usb 1-1: config 0 descriptor?? [ 1933.513282][ T5318] uclogic 0003:256C:006D.0132: interface is invalid, ignoring [ 1933.718275][ T5318] usb 4-1: USB disconnect, device number 37 [ 1933.955714][T25841] elecom 0003:056E:011C.0133: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.0-1/input0 [ 1934.173266][ T5324] usb 1-1: USB disconnect, device number 84 03:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="00b70300001d0000008500000083000000bf0900000000000055090100000000d79500000000000000b7020000000000008500000084000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0e"], 0xef) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="00b70300001d0000008500000083000000bf0900000000000055090100000000d79500000000000000b7020000000000008500000084000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0e"], 0xef) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) (async) 03:38:50 executing program 4: socket$inet6(0xa, 0x0, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x2, 0x101, 0x3fd, 0x8, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x445, &(0x7f00000010c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="ff6465762f6c6f6f7030004d77c24735a37cdcc200f46535706b10f8c07f3ec0defab79b92c5603b8b40ab50f994f5ffc5c8656b75201e54b854c056b85c60d5ba01d8dfa83099704386674a4bc24497f1b26e7ec8f814e7f50822a0bfc35c28bc6ecc582b88fa8e24222dceb4eb181e6afa22869eb047e8a0fb0096da76424db0e6594bc20df84fe715dc0985797c5da2fc545528254958e8d849813d16a2835e0c2204d2635fcba4dfccf89972efc5f19a56dea040a4ee7d6e171fe3cc5056f976816c"], &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x2000007, 0x30, r4, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f00000008c0)}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYRESOCT=r8], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500242909880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) personality(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0xff, 0x1f, 0x6b, @loopback, @private2, 0x0, 0x10, 0x2, 0x4}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000580)=""/253, 0xfd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="081a00000800000018370000030000000000000000000000181900ffff000000000000cf0d59ee8e00d26d6c79ff88ebc34a1afb8b25bae7674ad32649620ff4dd9f57515aa27d9000000000", @ANYRES32=r12, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x20, 0xb6, &(0x7f0000000240)=""/182, 0x41100, 0x48, '\x00', r14, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0xc33}, 0x10, r15, r13, 0x2, 0x0, &(0x7f00000006c0)=[{0x3, 0x3, 0xc, 0x6}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x8}, 0x90) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff7f0000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000f80c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r2, @ANYBLOB="0000000808000000183600000085100000f8ffffff18000000070008000000bf91000000000002b702000090a421043aa221af6c003e4ea15600000000858000000a010000b700"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x61, &(0x7f00000004c0)=""/97, 0x41100, 0x48, '\x00', r11, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r15, r1, 0x1, &(0x7f0000000640)=[r2, r0, r2, r2, r16, r2, r2, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x4, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 03:38:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001800)=ANY=[@ANYBLOB="c9fcc208fb605e47e13b18b419bdb99cc57f00b579454f35c500000000d1540fef7667ebf2ce"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async) r4 = dup(r2) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f00006d3000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000580)="b805000000b9004800000f01c16565660f38828f0000ffffc4017ae655070f01d1b9800000c00f3235000800000f30c481fd157d67c7442400b7000000c7442402a84d0000ff1c24c7442400b531d25dc744240200000000c7442406000000000f011c240f017a003e660f38813f", 0x6e}], 0x1, 0x23, &(0x7f0000000640)=[@cr4], 0x1) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="640f38f10266b9800000c00f326635004000000f3066b9e60b00000f32b840008ee8ff1f0f3226660f38298b7e9d0fbaf2e7660f71e57ef30fc77402", 0x3c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x3e) (async) fcntl$setsig(r7, 0xa, 0x12) (async) poll(&(0x7f00000000c0)=[{r8}], 0x1, 0xfffffffffffffff8) (async) dup2(r7, r8) (async) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x14) (async) process_vm_writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000340)=""/145, 0x91}], 0x3, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/68, 0x44}], 0x2, 0x0) [ 1934.307396][T10885] loop2: detected capacity change from 0 to 512 03:38:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) [ 1934.367471][T10885] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 1934.394520][T10885] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1934.438111][T10885] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 03:38:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rmdir(0x0) 03:38:50 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 03:38:50 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x50080003) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x7ffff000}], 0x1, 0x0, 0x0) 03:38:50 executing program 2: socket$inet6(0xa, 0x0, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000035c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0x80, 0x8}, @alu={0x4, 0x1, 0x7, 0x4, 0x9, 0xc, 0xffffffffffffffc0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000e00)=""/4096, 0x40f00, 0x40, '\x00', r8, 0x12, r1, 0x8, &(0x7f0000000040)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xd, 0x80000001, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000480)=[r1, r1, 0x1, r9, r1, r1], &(0x7f00000004c0)=[{0x2, 0x1, 0x1, 0x9}, {0x3, 0x5, 0x0, 0x5}, {0x2, 0x5, 0x4, 0x1}, {0x1, 0x1, 0x7, 0x6}, {0x1, 0x1, 0xc, 0x1}, {0x5, 0x4, 0x10, 0x9}], 0x10, 0xffffffff}, 0x90) symlink(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9100, &(0x7f0000000080)={0x0, 0x0, 0x40000}, 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r12) 03:38:50 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000740)="f1f85d7055a2eb88ce0520e4087bac7b42339d8cf485a5c2a0409ac505823921433838e827c4e0ec649f59cf5fbbbc6cd20e76d3926d2a5d97e92b1e83818166dd881bcaa468139373b595e39c286319b170a8043c1281ae645671d045bed0255633cf9d4eb88fdb8b93277d565b3da392df277b5eb9ceb2", 0x78}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000000680)='}', 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1, 0x0, 0x200000000000000}}], 0x1, 0x2, 0x0) 03:38:50 executing program 0: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x16}]}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$FS_IOC_RESVSP(r3, 0x800c6613, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x91, 0xf0}) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x22, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 03:38:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1934.719612][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1934.739175][T10931] HTB: quantum of class 80970002 is big. Consider r2q change. [ 1934.747699][T10931] HTB: quantum of class 80970002 is big. Consider r2q change. 03:38:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rmdir(0x0) 03:38:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000001300), 0x4) [ 1934.862309][ T8051] usb 5-1: new high-speed USB device number 38 using dummy_hcd 03:38:50 executing program 2: socket$inet6(0xa, 0x0, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:50 executing program 3: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="76c6fda71c3d4a7f5d86a6d4695e0998a4e7ce98c5135245f161aacb63d122c056b65849350720b2bf3280022ed35fc0f7c4d00402a919159738bc3965fa89528b92b5e0e7beef279e898ea127767137d7e303bd61309e03ef8a51143dedafe140fea2177f78e13334c38f695274071739b69a4cd5e833f4174b9cd0d1cf119fa2adc6091aa9b58f88f01dd71a4eb37b", @ANYRES64=0x0, @ANYRES64], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000400)={0x40, 0x22, 0xcc, {0xcc, 0x34, "042f2cff63b39a54b274a57d9405c77de7ec2354cdcee999071f09f0b073682e1efc24847467769796203c7cc242075be1441941010ab3404bd51c0b4e4dfb293c6bf69c16ef0d39eaf5f37037863ae2cf6913c95d92cf8274701011022672aa2de8e690f8cb975fc9ed304958a12de1458206cad5ffa4e75e71df0e4769d55cdd0dde8769a1f955f2841b341489feefcfafcedc9002c6afa2b3cbbadda0881c8488b9db95ac9db6b25833b99e3c46aded4b8aa584ef40d229bec47999041a91f2b1f8c4a63cf66d4766"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000080)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0x6, 0x6}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x80, 0x4c, "24212fce", "ff760d67"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x9, 0x71, 0xcd, 0x8, 0x8}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x20, 0x14, 0x5d, "8b366f4e7b1e2423f87e0bf1acedde9847ab382be20e273e25139ed3cb7d05f9b74eb03181871f583b261bddfeb2aa7af1241ac2e3693b3ee31cf5312aef7caa87c5efa235f6de61ab10ee46cb6efd2f9ea0712fce9a929a30d3592eb9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x180, 0x4, [0xf000]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x2345}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0xb, 0x2, "d909"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b08d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7df}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x74}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r3, &(0x7f00000002c0)="110000001200050f0c1000000049b23e9b", 0x11, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000c00)={0x0, 0x22, 0xe8, {0xe8, 0xf, "3946d6c7735b8d56e0a3f7abffc64346c673a1ca1d834a284bced9cebbf69f0c2377b49cfdae37f10fa178edf920dda97614eebb0dffc128984cee93be6dba2232fa87875a224061721921128845563ea6ab439ac4610f722cfa30ead29b0cad8343d98ae77be5e2e15e0a69899664a00621cc7dff3c6df716fa50fa44cf85c708361ee9773c66e6a445c9aaced31c02d187a7b202cbe28b804a41301eb6b4e11e43e52e9e61d474a4ec488ee45b6f3a6aaf49bcfcc2d42479aba1c6dacb8494e71326a70be9b1a54abb3e87fe4c64be7f1bdca5e6fc171262cba0be36dcd3c4501e44d0fe75"}}, &(0x7f0000000d00)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "652784ad8d1c50289e3fba07505ebc0d8e3b061ec2c63d7b1408248e804ecb3b59d2044ac311a28d10c04a1fb48b5375310e83ec55393667604298c2907365e36e05e018cfdb73e12f9c73bb9ee3a3b8d1e4e23e7d46410564dbd53ed8127062863519c655a346496e53a5a0baacf5ba35cf1270032aaca01cf401b4d59bdb85665a20172ad2a73b5796d927d3c07aa5b6a1b47873c74447df1bd308ebfc10b19eaa76500ce761"}}, &(0x7f0000000940)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0xb, "91b7863d"}, @local=@item_4={0x3, 0x2, 0x3, "458221a4"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0xb, "cc05df1c"}, @local=@item_4={0x3, 0x2, 0x5, "90d29540"}, @global=@item_4={0x3, 0x1, 0x5, "c12473b7"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x22, 0x1, {0x22, 0x779}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000dc0)={0x40, 0x8, 0x90, "ba2ddad3d8e87d3ba487a3b02b75f426471510916051c4dc0cd1d99d211f172f89d7e52959099a3e9e2e28fb15776093405a3b067f78432bf08925a0796b45021ee6b9ca869be024c4ea9d43521a355480f8a846aca06d23c5fa516036bbb5672496f6ff9b7a0dbdc9e1fb815da4a1bafc13583777cb77bea03e2a00a475aa415df92d3ba286443905cdcb377539679e"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000ec0)={0x20, 0x1, 0x48, "9983076fe8cd6745b6ad32b331bf331bd05d3280aa2f25b7a622cb3815a4a12c6e6fed980ad67102c80ea17c3d138064b4302b9983de5983229236f5ebc0cfc058dacb5e11d5b78c"}, &(0x7f0000000f40)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "ca06"}]}}, 0x0}, 0x0) 03:38:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5450, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) [ 1935.232241][ T8051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.249879][ T8051] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1935.270938][ T8051] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1935.290106][ T8051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.309281][ T8051] usb 5-1: config 0 descriptor?? 03:38:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1935.332156][ T5318] usb 4-1: new high-speed USB device number 38 using dummy_hcd 03:38:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) [ 1935.430092][T10960] UDC core: couldn't find an available UDC or it's busy: -16 [ 1935.438350][T10960] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:38:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000840)='workqueue_activate_work\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7, 0x9, 0x3, 0x1604, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x4}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) clock_settime(0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1, 0x0) vmsplice(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 03:38:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) [ 1935.622387][ T5318] usb 4-1: device descriptor read/64, error -71 03:38:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200006b5f2ec8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='ext4_fc_commit_start\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) [ 1935.840077][T10970] serio: Serial port ptm0 03:38:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200006b5f2ec8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='ext4_fc_commit_start\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) [ 1936.042185][ T5318] usb 4-1: device descriptor read/64, error -71 [ 1936.042316][ T8051] usbhid 5-1:0.0: can't add hid device: -71 [ 1936.054407][ T8051] usbhid: probe of 5-1:0.0 failed with error -71 [ 1936.067380][T10974] serio: Serial port ptm1 [ 1936.073801][ T8051] usb 5-1: USB disconnect, device number 38 03:38:52 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b8667b4dd0c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 03:38:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) [ 1936.312070][ T5318] usb 4-1: new high-speed USB device number 39 using dummy_hcd 03:38:52 executing program 0: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:52 executing program 0: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYBLOB="74f656c120ac0c810902d206fd71fd82a387d94a8f482e1d009f82f4c075698c68c0cb3a9978ab9308a756816adda4e423dbec51b36872aab8121837c17b7d858e12f442f348a6ca46c14314754055a339ef495e424b30ec729fee0bb73c0871cf1e540431cbf74ac0cec6fac4a369bf063c10795b7dbdadc5ecb06187e8cf62eb925441a325058f62ffea51e6bc6aace629c14bf5819a8c9189030e82d57fd16da35c67e78a8ac445e3b68d5d69d4551c077e78473e0a8269f5b5d3f494168dae7796bc04aed9adbf09ba96f82058", @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="e79a32573d376f1d3562c7f8c09e1c6d34d04de61111dfde6e0a85d0ac797f207a9396329cfeaa26a1ae0bd823de941009e4ee4257338d55c79f83a24c1affe4b05e23183e45bc8d7eded4c64979ed2a06efb3ada60cd5cef08518b4b2604a63983f089d60fc9bccffda1c1759ff8ac2535bcabf915091adb020dba5ea77e0e4beb54af19b29af"], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5}]}]}, 0x38}}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r7}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r10}, 0x9) ioctl$SIOCSIFHWADDR(r9, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) 03:38:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b8667b4dd0c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 03:38:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 03:38:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 03:38:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1936.591840][ T5318] usb 4-1: device descriptor read/64, error -71 03:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) [ 1936.731869][T25841] usb 1-1: new high-speed USB device number 85 using dummy_hcd 03:38:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702008b00000000b703000000000000850000007200000095708b75b737ec49be82ab6c80aca13381047b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "67f6245d"}]}}, 0x0}, 0x0) 03:38:52 executing program 2: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000300000085100000f8ffffff184300001282f5f58633e5c100000000162600000900000018470000020000000000000000000000183000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) alarm(0x0) r5 = epoll_create(0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111640000e00000180000ffe200000000000000000000009500000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x40000000}) pause() fcntl$setstatus(r2, 0x4, 0x4800) [ 1936.981895][ T5318] usb 4-1: device descriptor read/64, error -71 [ 1937.102090][ T5318] usb usb4-port1: attempt power cycle [ 1937.112417][ T5324] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1937.162299][T25841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.173447][T25841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.183583][T25841] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1937.192604][T25841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.202311][T25841] usb 1-1: config 0 descriptor?? [ 1937.472267][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.483227][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.493937][ T5324] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1937.503540][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.512083][ T5318] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1937.520994][ T5324] usb 5-1: config 0 descriptor?? 03:38:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 03:38:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200006b5f2ec8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='ext4_fc_commit_start\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) [ 1937.676658][T25841] elecom 0003:056E:011C.0134: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.0-1/input0 [ 1937.682030][ T5318] usb 4-1: device descriptor read/8, error -71 03:38:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200006b5f2ec8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='ext4_fc_commit_start\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) [ 1937.798797][T11011] serio: Serial port ptm0 [ 1937.842649][T11013] serio: Serial port ptm1 [ 1937.893056][T25841] usb 1-1: USB disconnect, device number 85 [ 1937.972006][ T5318] usb 4-1: device descriptor read/8, error -71 [ 1938.005029][ T5324] sony 0003:054C:1000.0135: unknown main item tag 0x0 03:38:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e800000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/254, 0xfe) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pread64(r3, &(0x7f0000000100)=""/176, 0xb0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) [ 1938.013966][ T5324] sony 0003:054C:1000.0135: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.4-1/input0 [ 1938.025313][ T5324] sony 0003:054C:1000.0135: failed to claim input 03:38:54 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x16}]}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$FS_IOC_RESVSP(r3, 0x800c6613, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x91, 0xf0}) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x22, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) [ 1938.214290][ T8051] usb 5-1: USB disconnect, device number 39 03:38:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) setrlimit(0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0x4, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x1d) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r0, 0x0, &(0x7f0000001a40)=0x6) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001a80)={0x0, 0x0}) prlimit64(r6, 0x5, &(0x7f0000001ac0)={0x0, 0xffffffff00000001}, &(0x7f0000001b00)) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000040)=0x22) gettid() prlimit64(r0, 0xf, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000003bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140060e3ae858ab000000000b3d461b60a027e54f70efd0000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x881) getuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x40) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0/file0\x00'}, 0x6e) 03:38:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lx}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lx}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r8}, 0x10) write$cgroup_int(r6, &(0x7f0000000000), 0x12) (async) write$cgroup_int(r6, &(0x7f0000000000), 0x12) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) vmsplice(r2, 0x0, 0x0, 0x0) 03:38:54 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:54 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5451, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:54 executing program 4: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff60211cb40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x16}]}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$FS_IOC_RESVSP(r3, 0x800c6613, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x91, 0xf0}) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x22, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 03:38:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:55 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_task_getioprio\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRES16, @ANYRES16=r3, @ANYRESHEX=r1, @ANYRES64=r2, @ANYBLOB="3db8198e04fc85f1912fe7f17ecabe5b4203cc7e0e4c17b0cf979710f8152c50549e683016068ae4732fece0cf1d84a8ca5b22417d2e887d0ed208a0ca23d89a112c6307f0123417587f5c9872476e9d1a0df3f3ed2bdc3eed0073cc1dd31a2281744a2aaf762f68355e52855708e18a2e7f7793b337a390306f085e14a36ad3d9e49cfd4c3335fb074e2e6e7cc43554762c02bfbcb931aff92a2deca0bfcfa2632a073441a0dd13f38af079496b13f51338055775786c69f84292abf6b8f0c7aa871d2e9bc502ca66b5836e6c0a1e39498b454f25eece8d5e22ca096c54642a4cedd11962980acf549cb2ec239b72bd8eb10c33", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r7 = pidfd_getfd(r6, r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) pidfd_send_signal(r8, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000090caa98c4498bc89a8144c20c18650"], 0x8) getsockopt$inet6_opts(r9, 0x29, 0x39, 0x0, &(0x7f0000001200)) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f0000000100)=@fragment={0x89, 0x0, 0x3, 0x0, 0x0, 0xc, 0x66}, 0x8) r11 = openat$cgroup_subtree(r10, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000000c0)=ANY=[], 0x6a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_task_getioprio\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRES16, @ANYRES16=r3, @ANYRESHEX=r1, @ANYRES64=r2, @ANYBLOB="3db8198e04fc85f1912fe7f17ecabe5b4203cc7e0e4c17b0cf979710f8152c50549e683016068ae4732fece0cf1d84a8ca5b22417d2e887d0ed208a0ca23d89a112c6307f0123417587f5c9872476e9d1a0df3f3ed2bdc3eed0073cc1dd31a2281744a2aaf762f68355e52855708e18a2e7f7793b337a390306f085e14a36ad3d9e49cfd4c3335fb074e2e6e7cc43554762c02bfbcb931aff92a2deca0bfcfa2632a073441a0dd13f38af079496b13f51338055775786c69f84292abf6b8f0c7aa871d2e9bc502ca66b5836e6c0a1e39498b454f25eece8d5e22ca096c54642a4cedd11962980acf549cb2ec239b72bd8eb10c33", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) (async) getpgrp(0x0) (async) syz_pidfd_open(r5, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) (async) pidfd_getfd(r6, r6, 0x0) (async) pidfd_getfd(r7, r7, 0x0) (async) pidfd_send_signal(r8, 0x0, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000090caa98c4498bc89a8144c20c18650"], 0x8) (async) getsockopt$inet6_opts(r9, 0x29, 0x39, 0x0, &(0x7f0000001200)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r10, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) (async) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f0000000100)=@fragment={0x89, 0x0, 0x3, 0x0, 0x0, 0xc, 0x66}, 0x8) (async) openat$cgroup_subtree(r10, &(0x7f0000000040), 0x2, 0x0) (async) write$cgroup_subtree(r11, &(0x7f00000000c0)=ANY=[], 0x6a) (async) 03:38:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) alarm(0x0) r5 = epoll_create(0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111640000e00000180000ffe200000000000000000000009500000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x40000000}) pause() fcntl$setstatus(r2, 0x4, 0x4800) 03:38:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702008b00000000b703000000000000850000007200000095708b75b737ec49be82ab6c80aca13381047b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "67f6245d"}]}}, 0x0}, 0x0) 03:38:55 executing program 1: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r2}, 0x80) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r2, 0x0, 0x0, &(0x7f0000000400)=[0x1, r3]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r4, 0x0) 03:38:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:55 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) [ 1939.859286][T11075] UDC core: couldn't find an available UDC or it's busy: -16 [ 1939.897704][T11075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:38:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe63}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6(0xa, 0x80803, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x4e21, 0xfffe, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r7 = io_uring_setup(0x54a2, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x10000000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000007c660dd1000000000000000000c1fb5fbbb53b998932da188ac559e73273a896832be1d4195711c2af54c4421a1dff34fc742c773be2f49616e35da86569dda965f1a3900f63b296e1d3fe4bc5d075c2", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x407f}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x20900, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0xb2, 0x9}, 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000780)=ANY=[@ANYBLOB="09080000000000000000000000000000851000000600000018100000b8a2a65ebb561c8ceb853906d480839c33766c9cd3a16a6c8eb18e4a5aea402762d31cda965ebd6830f2ef67389510a20782891d7f97eddb7c5540e6ab140589812025615cdec91fcae996b3aa27208a9f343fb66e6542b506145fa524675c658927257685906b1a062210feb6b135b4fce12629c0ad93734d1ef88d830569ce902372ac207461ed95b6f4a6aba6316f0e3685c824bcf9481ef5e5c10d598dd68d64afa3f7d0601df11b237185bc374bd3963dee137ff1551185f870774cbcca6afc86f4f4e96ab5726c13dd860640e52b36f00cc3", @ANYRES32=r10, @ANYBLOB="00000000000000003e000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r11, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d3baf011c61e01c9a7", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) 03:38:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) [ 1940.192453][ T5318] usb 4-1: new high-speed USB device number 42 using dummy_hcd 03:38:56 executing program 2: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r2}, 0x80) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r2, 0x0, 0x0, &(0x7f0000000400)=[0x1, r3]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r4, 0x0) 03:38:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x2, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r8, r9) connect$unix(r10, &(0x7f0000000100)=@abs, 0x6e) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r11, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @loopback}, &(0x7f0000000400)=0xc) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) recvmsg$unix(r8, &(0x7f0000000a40)={&(0x7f00000007c0), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000840)=""/228, 0xe4}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x1) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x18, r7}, 0x18) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x93c, 0x4, 0x1, 0x440, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffff00}}, &(0x7f0000000340)='syzkaller\x00', 0x1f, 0x8, &(0x7f0000000380)=""/8, 0x41000, 0x20, '\x00', r12, 0x2c, r13, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, r14, r15, r16], 0x0, 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r17, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 03:38:56 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close(r2) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 03:38:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x3d}, 0x48) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000a) unshare(0x20020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x0) 03:38:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) alarm(0x0) r4 = epoll_create(0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111640000e00000180000ffe200000000000000000000009500000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x40000000}) pause() 03:38:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:56 executing program 1: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r2}, 0x80) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r2, 0x0, 0x0, &(0x7f0000000400)=[0x1, r3]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r4, 0x0) 03:38:56 executing program 4: pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ff84850000006d000000940000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB=' '], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='uVer.t'], 0x0, 0x0) 03:38:56 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000647e6746850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) lseek(r2, 0x5a, 0x0) ioctl$FITHAW(r2, 0xc0045878) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=@RTM_NEWMDB={0xb8, 0x54, 0x301, 0x70bd2b, 0x25dfdbff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x2, {@in6_addr=@mcast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x3, 0x4, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0xe}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x4, {@ip4=@loopback, 0x800}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0xb8, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vti={{0x8}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x1}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}, @IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x4}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8001}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}, @IFLA_VTI_LINK={0x8, 0x1, r5}, @IFLA_VTI_OKEY={0x8, 0x3, 0xfff}, @IFLA_VTI_LINK={0x8, 0x1, r5}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1ff}]]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0xb8}, 0x1, 0x8, 0x0, 0x4000}, 0x0) [ 1940.554266][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.571082][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.585622][ T5318] usb 4-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 03:38:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1940.606951][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.628441][ T5318] usb 4-1: config 0 descriptor?? 03:38:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r0, 0x4000, r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) (async) alarm(0x0) r5 = epoll_create(0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111640000e00000180000ffe200000000000000000000009500000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x40000000}) pause() (async) fcntl$setstatus(r2, 0x4, 0x4800) 03:38:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086605, 0x20001419) 03:38:56 executing program 0: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @random="b03cc0034375", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:38:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, @desc2}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=.,upperdir=./file1,metacopy=on']) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYBLOB="f4359db4925a0e29017a77155c32fdc388a3077730fa1550f1e9c015d11f2900b4334386dc88f1c6e21dad23caf05a085ce1ddda2afbb76cd5132213a3c914beaccd46b812b3a29231786ea32c59c888ae5d388f14ab9d9c1e2c63a0f991d214ef8edf1046842a726b11ab844f0929d8b4846fdb28284cdaf28c27078cf8a6ed044b903b0d6f6c348be72ebb1a7de8d04d0e2aee755c980d95532d119eddb741bb94d299715e078222394f00e330be28b6ff1c0ca7e86a25becd21fbb50fcd749cb9c4e098"], 0x20}}, 0x20040880) 03:38:57 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x330, 0xffffff80, 0x178, 0x7, 0x178, 0x488, 0x258, 0x258, 0x558, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x300, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@hl={{0x28, 'hl\x00', 0x2}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 03:38:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) [ 1941.115917][ T5318] sony 0003:054C:1000.0136: unknown main item tag 0x0 [ 1941.135273][ T5318] sony 0003:054C:1000.0136: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.3-1/input0 [ 1941.158665][ T5318] sony 0003:054C:1000.0136: failed to claim input 03:38:57 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000001640)={&(0x7f0000001100)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dontfrag={{0x12, 0x29, 0x43}}, @hoplimit], 0x30}, 0x0) lsetxattr$security_capability(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), &(0x7f0000000600)=@v3, 0x18, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) 03:38:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) writev(r1, &(0x7f0000001e00)=[{&(0x7f0000000080)="ad", 0x1}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000fea40000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r4, 0x1, &(0x7f0000002540)=[&(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000380)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r8, &(0x7f0000000280)='./file1\x00', 0xc280, 0x0) 03:38:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086608, 0x20001419) [ 1941.250685][T11145] overlayfs: missing 'lowerdir' [ 1941.331016][T25841] usb 4-1: USB disconnect, device number 42 03:38:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:57 executing program 4: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:57 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x29, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}, {0x0, 0x3938700}}, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000140)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10801, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x1, 0xfffffffc, 0x14, @dev={0xfe, 0x80, '\x00', 0x3f}, @private2, 0x80, 0x8, 0x2, 0x6}}) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in=@multicast1, 0x4e20, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x89, r5, r6}, {0x3ff, 0xf1a4, 0x6, 0x32f, 0x77, 0x1, 0x2, 0xffffffffffffff1f}, {0x40c6, 0xfffffffffffffff9, 0xffffffffffffffff, 0x1}, 0x311e, 0x6e6bc0, 0x2, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x33}, 0x1, @in6=@private1, 0x0, 0x0, 0x3, 0x7, 0x30, 0x1, 0xfffffffe}}, 0xe8) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14, 0x180000) preadv2(r7, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/24, 0x18}], 0x3, 0x1, 0xffff, 0x4) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000800)='bpf_lsm_xfrm_state_free_security\x00') r10 = fsmount(0xffffffffffffffff, 0x0, 0x66) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9fcb}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000740)='syzkaller\x00', 0x27, 0x2b, &(0x7f0000000780)=""/43, 0x41100, 0x30, '\x00', r5, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r10, 0x1, r11], 0x0, 0x10, 0xba80}, 0x90) r13 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000a00)={'ip_vti0\x00', r8, 0x80, 0x1, 0x1, 0xb5, {{0x9, 0x4, 0x1, 0x33, 0x24, 0x66, 0x0, 0xff, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0xf, 0xc6, [@broadcast, @broadcast, @multicast1]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r10, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000dc0)={@loopback, @empty, 0x0}, &(0x7f0000000e00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f00000015c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f0000000e80)={0x6e0, r13, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x188, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb25}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf24f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r18}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x40040051}, 0x8881) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x17, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff800}}, @map_fd={0x18, 0x3, 0x1, 0x0, r11}, @call={0x85, 0x0, 0x0, 0x4d}]}, &(0x7f00000016c0)='GPL\x00', 0x4, 0xd6, &(0x7f0000001700)=""/214, 0x41000, 0x1, '\x00', r18, 0x25, r10, 0x8, &(0x7f0000001800)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001840)=[r11, r10], &(0x7f0000001880)=[{0x1, 0x5, 0x3, 0x3}, {0x5, 0x1, 0x1, 0x1}, {0x3, 0x2, 0xd, 0x1}], 0x10, 0x1}, 0x90) connect$inet6(r10, &(0x7f0000001980)={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x70}, 0x1c) r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00), r10) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x1a0, r19, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2000000}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendmsg$nl_generic(r10, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xe0, 0x41, 0x100, 0x70bd2a, 0x25dfdbfc, {0x20}, [@generic="a52705c5b8c31f4882410a52b6f5707feb5d24fb9b92a9a6130c376f1d6feb62ad2872e304fe13508a94d2c4ffa2248a93a221b96e73e166356a4998a857754e67d15a056abd55e5aa20240a2442dcc33c224a1fe6f3b9bd4beb2a8df8ae6792fa84a43460a5ae2a61d34355b8036d01672e29bb3041dbeb436416e1685f1d554dd6425c1b261688d0fa45b49eb3e315daa27f3b945158d7d526696aacbf92f8a8121a5dd8b84fbafa7b51", @typed={0x20, 0xbe, 0x0, 0x0, @binary="39eeb7fc4ab1693ba809b34dc85c2dc231afdb72ac949f322c32df6f"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8800}, 0x800) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@bloom_filter={0x1e, 0x5d62, 0x6, 0x80000000, 0x1240, r11, 0x2, '\x00', 0x0, r10, 0x2, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x14, 0x2, &(0x7f0000001e40)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f0000001e80)='GPL\x00', 0x101, 0x2c, &(0x7f0000001ec0)=""/44, 0x41100, 0x22, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001f40)={0x2, 0x8, 0x101, 0x9}, 0x10, r16, r12, 0x7, &(0x7f0000002000)=[r11, r20, 0x1, r11], &(0x7f0000002040)=[{0x3, 0x3, 0xc}, {0x3, 0x4, 0xc, 0xf3f1e9363fccf55e}, {0x4, 0x2, 0x4, 0x9}, {0x3, 0x1, 0xd, 0xa}, {0x1, 0x5, 0xa, 0x3}, {0x3, 0x2, 0x5, 0xa}, {0x3, 0x1, 0x6, 0x6}], 0x10, 0x7}, 0x90) recvmmsg(r4, &(0x7f0000004dc0)=[{{&(0x7f0000002180)=@nl, 0x80, &(0x7f0000002440)=[{&(0x7f0000002200)=""/89, 0x59}, {&(0x7f0000002280)=""/1, 0x1}, {&(0x7f00000022c0)=""/163, 0xa3}, {&(0x7f0000002380)=""/157, 0x9d}], 0x4, &(0x7f0000002480)=""/133, 0x85}}, {{&(0x7f0000002540)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000025c0)=""/3, 0x3}, {&(0x7f0000002600)=""/163, 0xa3}, {&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/180, 0xb4}, {&(0x7f0000002880)=""/137, 0x89}, {&(0x7f0000002940)=""/210, 0xd2}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x7, &(0x7f0000003ac0)}, 0x3}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003b00)=""/69, 0x45}, {&(0x7f0000003b80)=""/219, 0xdb}, {&(0x7f0000003c80)=""/17, 0x11}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x4, &(0x7f0000004d00)=""/151, 0x97}, 0x5}], 0x3, 0x12000, &(0x7f0000004e80)) 03:38:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff95, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='9p_client_req\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x0) fsync(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0x26000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@version_L}, {@nodevmap}, {@cache_fscache}, {@uname={'uname', 0x3d, '\x00'}}, {@uname={'uname', 0x3d, '9p_client_req\x00'}}, {@privport}, {@uname={'uname', 0x3d, '9p\x00'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x34, 0x62, 0x61, 0x37, 0x38, 0x61, 0x62], 0x2d, [0x64, 0x62, 0x30], 0x2d, [0x64, 0x61, 0x63, 0x35], 0x2d, [0x33, 0x62, 0x32, 0x39], 0x2d, [0x7ac2837e3ea10f2b, 0x0, 0xe, 0x65, 0x36, 0x30]}}}]}}) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x87, 0x1}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) shutdown(0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf000000000000000000007000000095"], &(0x7f0000000040)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) statx(r5, &(0x7f0000000440)='./file1\x00', 0x2000, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000006c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x1020005, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r11}}, {@version_L}, {@aname={'aname', 0x3d, 'version=9p2000.L'}}, {@access_uid={'access', 0x3d, r12}}, {@access_uid}], [{@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@subj_user={'subj_user', 0x3d, '9p_client_req\x00'}}, {@dont_hash}]}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001a40)={0x90000010}) socket$inet6_udplite(0xa, 0x2, 0x88) 03:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1, 0x0, 0x0) 03:38:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x6609, 0x20001419) 03:38:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:58 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5452, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 03:38:58 executing program 4: timer_create(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:38:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702008b00000000b703000000000000850000007200000095708b75b737ec49be82ab6c80aca13381047b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "67f6245d"}]}}, 0x0}, 0x0) 03:38:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:58 executing program 0: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r3}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r3, 0x0, 0x0, &(0x7f0000000400)=[0x1, r4]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup3(r2, r5, 0x0) 03:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x40000000, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 03:38:58 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfd", 0xc4}], 0x1, 0x0, 0x6b}, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000100000000009d00fe0018110000830b9f1c5a2e06cde0bf9aff50fcffe636322e9e8cf0166f7d8bc9dc35c276c11e123381f4898d0e3e8ceac158388d9bd841b95220d058e247109a09506d2240adb4587ed2d95540d17dd1e2c4bca79fe2c9253e8bcd288eef69d9624d8e549133759f894b4f92ccbf4c4e179df0eed7fdb88bd6fec2d98caddfa0f1b8db2f6fb9ddc899b2794206", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@union={0x10, 0x8, 0x0, 0x5, 0x1, 0x6, [{0x3, 0x3, 0x4}, {0xa, 0x2, 0xbc}, {0x7, 0x5}, {0x8, 0x1, 0x1}, {0xf, 0x5, 0x3}, {0xd, 0x3, 0x3}, {0xb, 0x5, 0xf29}, {0xc, 0x1, 0x79800}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000380)=""/209, 0x88, 0xd1, 0x0, 0x1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', 0x0, r4, 0x3, 0x0, 0x5}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_insert_range\x00', r3}, 0x0) (async) io_destroy(0x0) 03:38:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086630, 0x20001419) 03:38:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5450, &(0x7f00000001c0)=ANY=[]) 03:38:58 executing program 2: socket$inet6(0xa, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000800000000779b5d72"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000700)='GPL\x00', 0x2, 0xfffffdec, &(0x7f0000002180)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000050000000000000001010200852000000200542ee7009500000000000000186800000500ccc210455c63ed0efb240ccbccb7266e00000000000004e700"/75], &(0x7f0000000980)='GPL\x00', 0x80, 0x36, &(0x7f0000000c40)=""/54, 0x41000, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r2}, 0x80) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="015e", @ANYRES32=0x1, @ANYBLOB="00000000050004481002000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x299, 0x8}, 0x10, r2, 0x0, 0x0, &(0x7f0000000400)=[0x1, r3]}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r4, 0x0) 03:38:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/838], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 03:38:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 1942.402286][ T5324] usb 4-1: new high-speed USB device number 43 using dummy_hcd 03:38:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000ff190d01000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='signal_deliver\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000b0100000009000000fe0019110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000240)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)='?'}) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='ext4_es_insert_delayed_block\x00', r7}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x4001e) [ 1942.441352][ T30] audit: type=1326 audit(2000000338.410:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02312e7e69 code=0x0 03:38:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x800e0000, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 03:38:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40087602, 0x20001419) 03:38:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) alarm(0x0) epoll_create(0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111640000e00000180000ffe200000000000000000000009500000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) pause() 03:38:58 executing program 2: r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) r1 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000011c0)=0x0) r5 = syz_clone3(&(0x7f0000001500)={0x2800000, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280), {0x1e}, &(0x7f00000012c0)=""/212, 0xd4, &(0x7f00000013c0)=""/218, &(0x7f00000014c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)=0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000000952ad700"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001700)={@ifindex, r11, 0x5, 0x1c}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0) r13 = dup(r9) read$eventfd(r13, &(0x7f0000000b80), 0x8) r14 = fcntl$dupfd(r8, 0x0, r8) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r8, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f000086fff4)) r16 = getpid() r17 = getpid() kcmp$KCMP_EPOLL_TFD(r16, r17, 0x7, r7, &(0x7f00000000c0)={r15, r14, 0x80}) r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001640)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/113, &(0x7f00000015c0)=[r0, r1, r2, r3, r4, r5, r6, r16], 0x8, {r18}}, 0x58) [ 1942.658721][T11207] EXT4-fs warning (device sda1): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. 03:38:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:38:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000001300), 0x4) [ 1942.822309][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.839210][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.851113][ T5324] usb 4-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1942.861723][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.873510][ T5324] usb 4-1: config 0 descriptor?? 03:38:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0xa002aac8, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 03:38:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:58 executing program 1: r0 = dup(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x5}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x20}]}, 0x10) dup3(r0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r7, @ANYBLOB="f7ff00e4ffffff001c0912000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r7, @ANYRES64, @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@loopback, r7}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900020000000055092d01000000000095000f281d2548201b52000000000000b7000400b70000000000000095000000000000000000000000000000000000008151b50ec6b6bd5ca71801cf9d2550ac3da25e84867c7cdaebad2d635aae4e32ba9e760088fd69195b93f3ccc527a548a7ebbfed7a5ce9e1eac62f8ff4e106dff74655813260bb13d455ef9b3fb8857002c6110e3dd982e514de68f1d7c86d2dcfebcbc8f344e380a10c5b25bc6850393b0d84cbb2d0066eb595ba3fef4a91"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r12}, 0x10) io_cancel(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) eventfd(0x801) 03:38:59 executing program 2: r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) r1 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000011c0)=0x0) r5 = syz_clone3(&(0x7f0000001500)={0x2800000, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280), {0x1e}, &(0x7f00000012c0)=""/212, 0xd4, &(0x7f00000013c0)=""/218, &(0x7f00000014c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)=0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000000952ad700"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001700)={@ifindex, r11, 0x5, 0x1c}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0) r13 = dup(r9) read$eventfd(r13, &(0x7f0000000b80), 0x8) r14 = fcntl$dupfd(r8, 0x0, r8) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r8, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f000086fff4)) r16 = getpid() r17 = getpid() kcmp$KCMP_EPOLL_TFD(r16, r17, 0x7, r7, &(0x7f00000000c0)={r15, r14, 0x80}) r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001640)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/113, &(0x7f00000015c0)=[r0, r1, r2, r3, r4, r5, r6, r16], 0x8, {r18}}, 0x58) 03:38:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) [ 1943.040734][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 03:38:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x2, 0x2f6b, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0xebb, 0x6}}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x11, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = dup(r3) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000001d00fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001ac0)='sys_enter\x00', r7}, 0x10) io_destroy(0x0) 03:38:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 03:38:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000f7bb5e08e03a1b207a0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700200000000000000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000760000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r4}, 0x10) write$cgroup_int(r5, &(0x7f0000000000), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xf3, 0x79a9, 0x11, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x20, 0x8, 0x80000001}}) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x42c, 0x13, 0x800, 0x70bd27, 0x25dfdbfb, {0x26, 0xfd, 0x4, 0x3, {0x4e23, 0x4e22, [0x7, 0x5, 0x1400000, 0x2bab], [0x10, 0x8001, 0x10001, 0x2], r8, [0x5, 0x5]}, 0x642c, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "2f7bc25c97f0428fc29aacd107aa11640e445ddf0a6e5527f08b1312d34350cde968a529fccd56d70be23ab8ddd7f5903394f8c0"}, @INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "293a757428850b4f0176449de787e9ca72446248dc007fc4a395bad947228548ccd6adc999d14c28f4c58eaeeeaf670fe59ad2808aead57e2542a723d5fd1fb6edc7ce97347fa4bad0a86f40283b8e80cc0a52b04453517dcf77052dbeff3f8885d187fc73f72dfb22760878819bf810a1167b31a30c4f8491e8ee7eb3f9b27da0052c9ba4036eddee9f5ddb5b3930053d3468a454abc093893abfdcf3c6eb87d2fc3b2f9f0ad8e2e810b162577b8d3fe0c77f7ed84e1859f58b3976ef6df5"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "1314f411314cb6b92507e999f16e2921a1c378cd7706e56bb75076bc3ab889a9b744c477c8aff67ac915cbb914be804920fa65a101e27f7284846bec6fadc3a961556cc9442e663f58e305879ab8cc8f3fa1bc3252233517d79c98355992d98d0e64a2ef2a7a3328c72739617b66b6f06ddc9c586bcb49815d9cdcab4106d1456a83ceb9c9f40e685c021ec063932b2c9b8366ecabe8c40cb090fb61d8090bff0625fbd364e2c85014d39e2d1132dfa8a0483b3f299a7dc82d2b9a4303796c64142df0b1b59f06e48b2579f70c00fd163d1c63"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "84c3b56989c2928c558336c4fd93cccf5c470d40cc7a313deee6361d591aa8c77be945a23cef9f318a871273738647d08639e42aa4cb8af3d8e17d44f676ad98fa71527303e75a81d25e0d19b1bf8bcd8fa6965aa5009ae6f7a1c04f2b8f5e2a68bbab26fc584a1256779728343fa94fb047aa51bc1d6dc6cd544afc9523103caba18a36305c00bfba6319c94366c4da7149693d03a33e9c52c282fa"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "4b34beb783d9d581c5553922208c3fd7948818fb6179fe7c8eff95db93d61b2b5836d7bcb138eb84dd3048cf4bf67a0240c421e60b7fcbc9908e"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "75dbdacbb0f4c93c00cdd7882c303d1034168303563a93523258d9740303421340c6a3347cbaf8ed0c062a4beede1c50cd071acd15e40924fb3bf1bc930b57e219953c3f725e38115d3e96dab5a0d81c00c1d4dffbefb51b6f01f2267ffa4d263e10c548cef8d1c680da2051afdd9e38a5bb1758931a155b99cdf5a485765461a2d189450b72c9dfb171b2820aeb6948832ba5d5a7636c4c03d19f24ac9f5aa0"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "badf8596b34f4818264593f86051fec43888db1fafae1e14502d8322c6ad5b8361ca8b32f013996fe40c4f0ab508d77d3e7683a7d5aca6a5f72c46424cc25cb6e5c8c0bd65d43376dca3c6100367fb52f41dd7016560a6e88fb05cd29eaef46f21baf40bc166f1120ebe1bdc91ca388c9121a8cc1658e5c90ce8513be7c96eda084c"}]}, 0x42c}, 0x1, 0x0, 0x0, 0xc0}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000080)=0x10, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x2000258e, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x401, 0x8000071, 0x1000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r12}, 0x10) r13 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r13, 0x1, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 03:38:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:38:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:38:59 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 1943.344513][ T5324] sony 0003:054C:1000.0137: unknown main item tag 0x0 [ 1943.354061][ T5324] sony 0003:054C:1000.0137: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.3-1/input0 03:38:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) [ 1943.385132][ T5324] sony 0003:054C:1000.0137: failed to claim input [ 1943.545223][T25841] usb 4-1: USB disconnect, device number 43 03:39:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @random="b03cc0034375", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:39:00 executing program 1: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 03:39:00 executing program 2: r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) r1 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000011c0)=0x0) r5 = syz_clone3(&(0x7f0000001500)={0x2800000, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280), {0x1e}, &(0x7f00000012c0)=""/212, 0xd4, &(0x7f00000013c0)=""/218, &(0x7f00000014c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)=0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000000952ad700"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001700)={@ifindex, r11, 0x5, 0x1c}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0) r13 = dup(r9) read$eventfd(r13, &(0x7f0000000b80), 0x8) r14 = fcntl$dupfd(r8, 0x0, r8) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r8, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f000086fff4)) r16 = getpid() r17 = getpid() kcmp$KCMP_EPOLL_TFD(r16, r17, 0x7, r7, &(0x7f00000000c0)={r15, r14, 0x80}) r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001640)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/113, &(0x7f00000015c0)=[r0, r1, r2, r3, r4, r5, r6, r16], 0x8, {r18}}, 0x58) 03:39:00 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddrlabel={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 03:39:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008880, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(0x3) 03:39:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) sendfile(r1, r0, 0x0, 0x100000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='consume_skb\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) 03:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) 03:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 03:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) alarm(0x0) epoll_create(0x30) pause() 03:39:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xe, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1\x00', 0x4, 0x5, 0x1fe0}) ioctl$FICLONE(r0, 0x40049409, r0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast1, @loopback, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x4, 0x2, 0x0, 0x92c, 0x42, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x20, 0x7}}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%ps \x00'}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000600)='bpf_lsm_tun_dev_attach\x00') r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r4}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x83}}, @ldst={0x2, 0x0, 0x1, 0x3, 0x9, 0xfffffffffffffffe, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3f}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000440)='GPL\x00', 0xd8, 0xbe, &(0x7f0000000480)=""/190, 0x41100, 0x41, '\x00', r2, 0x39, r6, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x6, 0x101, 0x31ef}, 0x10, r7, r8, 0x8, &(0x7f0000000840)=[r9, r10, r11, r12, 0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x2, 0x4, 0xf, 0xb}, {0x5, 0x3, 0xc, 0x9}, {0x1, 0x1, 0x4, 0x3}, {0x3, 0x4, 0x10, 0x2}, {0x1, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x6, 0xb}, {0x1, 0x4, 0x10, 0xe}, {0x4, 0x4, 0x10, 0x5}], 0x10, 0x9e9}, 0x90) r13 = dup(r10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={r6, 0x20, &(0x7f0000000c40)={&(0x7f0000000ac0)=""/229, 0xe5, 0x0, &(0x7f0000000bc0)=""/67, 0x43}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x2, 0x9, &(0x7f00000009c0)=@raw=[@ldst={0x3, 0x2, 0x1, 0xa, 0x7, 0x4, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @alu={0x3, 0x0, 0x8, 0x2, 0x0, 0x18, 0x4}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f0000000a40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', r2, 0xf, r10, 0x8, &(0x7f0000000a80)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r14, r4, 0x7, 0x0, &(0x7f0000000cc0)=[{0x5, 0x2, 0x10, 0x5}, {0x1, 0x4, 0x5, 0xc}, {0x0, 0x5, 0x7}, {0x0, 0x3, 0xd, 0xc}, {0x4, 0x3, 0x5, 0x4}, {0x4, 0x2, 0x6, 0x9}, {0x0, 0x1, 0xa, 0x4}], 0x10, 0x36}, 0x90) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xc, 0x4, &(0x7f0000000e00)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x5, 0xb, 0x0, 0x80, 0x10}, @alu={0x7, 0x0, 0x2, 0xb, 0xb, 0x8, 0x8}], &(0x7f0000000e40)='syzkaller\x00', 0xffffffff, 0x53, &(0x7f0000000e80)=""/83, 0x41000, 0x4, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x1, 0x4, 0x2, 0xff}, 0x10, r7, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000f80)=[{0x3, 0x4, 0xd}, {0x1, 0x3, 0xe, 0x9}, {0x1, 0x1, 0xe, 0xb}, {0x4, 0x2, 0x5, 0x4}, {0x3, 0x5, 0xf, 0x7}, {0x5, 0x1, 0xc, 0x7}], 0x10, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x17, 0x9, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0xa, 0x1, 0x0, r11}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @exit]}, &(0x7f0000001140)='syzkaller\x00', 0x44deaa8e, 0x0, 0x0, 0x41000, 0x8, '\x00', r2, 0x1, r4, 0x8, &(0x7f0000001180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0xd, 0xa8, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000001200)=[r4], &(0x7f0000001240)=[{0x5, 0x2, 0x6, 0x3}, {0x3, 0x3, 0x3, 0x7}, {0x5, 0x4, 0x2, 0x7}, {0x2, 0x1, 0xc, 0x2}, {0x0, 0x3, 0xb, 0x8}, {0x3, 0x3, 0x1, 0x7}, {0x1, 0x2, 0x0, 0xb}, {0x4, 0x5, 0x3, 0xb}], 0x10, 0x4333}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001400)={'syztnl2\x00', &(0x7f0000001380)={'tunl0\x00', r2, 0x7, 0x700, 0x8, 0xc7d1, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x13, 0x33, [@private=0xa010101, @rand_addr=0x64010102, @local, @multicast1]}]}}}}}) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0x101, 0x0, r13, 0x5, '\x00', r16, r4, 0x2, 0x4, 0x2}, 0x48) ioctl$F2FS_IOC_SET_PIN_FILE(r13, 0x4004f50d, &(0x7f00000014c0)=0x1) r18 = syz_open_dev$vcsa(&(0x7f0000001500), 0x8, 0x220000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)=r15}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1b, 0x2e, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @jmp={0x5, 0x1, 0x9, 0x9, 0x0, 0x100, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r18}}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x3, 0x6, 0x4, 0x2, 0x18, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r19}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff2ce}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001780)='GPL\x00', 0x6, 0xd6, &(0x7f00000017c0)=""/214, 0x41000, 0x41, '\x00', r2, 0x2f, r10, 0x8, &(0x7f00000018c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r14, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001900)=[{0x1, 0x2, 0xa, 0x5}], 0x10, 0x2}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x25, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x441e, 0x0, 0x0, 0x0, 0xffffff81}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee59}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56fd0b8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @alu={0x7, 0x0, 0xb, 0xb, 0x3, 0x20, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xbd}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, &(0x7f0000001bc0), 0x40f00, 0x42, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0x3, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001dc0)=[{0x3, 0x4, 0xa, 0x4}, {0x4, 0x3, 0x8, 0x6}, {0x0, 0x4, 0x5, 0x8}], 0x10, 0x853}, 0x90) 03:39:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x2, r3}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x2, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r8, r9) connect$unix(r10, &(0x7f0000000100)=@abs, 0x6e) (async) connect$unix(r10, &(0x7f0000000100)=@abs, 0x6e) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r11, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) (async) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @loopback}, &(0x7f0000000400)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @loopback}, &(0x7f0000000400)=0xc) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) recvmsg$unix(r8, &(0x7f0000000a40)={&(0x7f00000007c0), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000840)=""/228, 0xe4}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x1) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x18, r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x93c, 0x4, 0x1, 0x440, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x2}, 0x48) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x93c, 0x4, 0x1, 0x440, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffff00}}, &(0x7f0000000340)='syzkaller\x00', 0x1f, 0x8, &(0x7f0000000380)=""/8, 0x41000, 0x20, '\x00', r12, 0x2c, r13, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, r14, r15, r16], 0x0, 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r17, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) (async) write$P9_RVERSION(r17, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 03:39:00 executing program 2: r0 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/11, 0xb, 0x0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1) dup(r0) r2 = socket$inet_tcp(0x2, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) stat(&(0x7f0000000400)='./bus\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000100)=ANY=[@ANYBLOB='/dew=/nullb0'], r9, &(0x7f0000000200)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) keyctl$restrict_keyring(0xa, r10, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)='e\'.\x00') r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00') r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 03:39:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @random="b03cc0034375", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:39:00 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f0000002a80)=[{&(0x7f0000000080)="0d94124ee0e70956", 0x8}, {&(0x7f0000000140)="d3040b033ef5621ff3336e78b5e49d4d94e7cc2c175da9788b712cf2f6a09a01b9b8d592f6d240c4b8fc81c28756a03e5810d64c39c09c65e4a94ab42dbba198087c79cd6ae96e00f5d1208a", 0x4c}, {&(0x7f00000001c0)="df6b4cb5e22a66412df47507147ca739fa96870f489a7cde1f63ed280f576806bddfe0686fd8e64d44c5b7b50fbb06f0f36b708ac1e6f8f1be0b8d816ac22163fc0ec9343da46c01eee4579bb2e0782657eeb23a18ced7ecc5742d7413b1b71032588601a41cd2038a059c21a562ea434413c087c0842910f8c5d3b7854227bac6303169e9344dfd074ca8e50bd743af41", 0x91}, {&(0x7f0000000380)="8bcb4ce9e64965042308e4e94891b78f07019c6671855988ed49283020bf782f651a566a78312223ea72359518ce1cb760d402d37351d73cf60e9737bbc30e0992a9481fb9a6285f08", 0x49}, {&(0x7f0000000400)="a4fd1e0b191100694a49badd870896f7bd154ebd3644a9849248b5ae32cd8291dfa1ff4f7b8d661b2c3fe238ef6799c6ae9e9f972a3be6a731fb7f7eab710ce8351b7adedc7e5fe2e9589ede91055e316452dbad8247898b7e93c53b2dfa0fd8397542ac9f795741e002ab8f35199a811fe1f694417753e9f734bfb98b1fc17ce2a68e3c", 0x84}, {&(0x7f00000004c0)="649a74467321ba275f253fb098b72e2b920cd4b694fad6c96a93618c22679adabce17d2ec377a712ed80db49f3e48a6b7e83a1f99cdf1873a9b56f744fb7efcc20fcfdf5688200a48a65a0784df95ef8d6f5f1570675bde47251c4e59202d6feec56851c4ed74166e200fcc443ec10d3d578be5308ec86aa30d9275d962b669e976fda9761ac8f95789755d70988815322dc89eaa2fb1b4189ccb6b8b7c644d9bbd2722fbf04ffc4ce65e4ad028e71ef860f5fad5aedd405e75a966accae87e45f32a32871754b0c0ea2edf00cd5aebe249be6d96066e8a59d89752828e642e4ef7027dd7968e99ca7e1b5ee0f1688e85837b12335fe5daa79a94b56", 0xfc}, {&(0x7f00000000c0)="333adc6d3bd3353258bb1369b5d6d7e05f1bc8879d56ca8ac0e43e06a71f719e7b7058c38ac55000c7bdd504ec4d09608c98c76eff", 0x35}, {&(0x7f00000005c0)="0a0ffb4a108698508b5a63da3cab7c573ecb9768a98c1e8fdb9294297208193910d7e2eca11c69cb6182dc9212fd685f002885124ba6172ce7f7b22a3da190fefb2d123266ad783a0edb2120a35ee03035eb4d9971e962774f84e0d4dfba699179dd0a4ee5de0a25e7c5a83612d7eb234c614844e51dd11caf51edf5961a313995dc9d829b0dd6914562d8e79ca368850cc1aa689ffd76f7a79e055a02302f7ad0b10bc0f8091ed518086e55c36168fcdf63b2d8335f6c90c7773725d61047eb7b7c49e0046a9c7da4159719e9129d9823581749e281c6f7dc64365bece745421b8dd68d47925437c2497466652f5c29bb24371ab42967fa29f9041dffb7c05fd9003218b08bc761a16c9a73fd34b21fd709b0a430df78a539838e2294c8cb3dd3207125a40d0c1af47507db9d93c2409936169284594b955d6e5792270dd432ca948a1235b240f1e9c874e0edb548a2eb7c095c254a38e3b9927c1bbc827753d9eb5ac1e828d82f984c82d53d61bb0e1bde7d829cde3c03fbddb7003c8795d0969e262ed7e8f3d00805d709436d5b981b96d861c6881daa66bd202cef892913b6e6e807ffcb63148e16799cbbaec0c4f36807e2ca818a71f8f59158f8be7daa85ac196b8ff9a3464b9aea67e4da100bbae160f6e393db8c04b3754473d7e7a27f7def82159109ab560f075ecd61335250bd7bc7991c40125b5d2f4ec7cb1702c6459a60429b6c4cea9a21e29768a15c07bab52027c714b0b9d81dbda9fc925c988154072f4115abe015f0caf6cafb23f9e68a27fc7ced6c35bcfda431681e8325d83dbdb2f5f7c706b632e158770d9befa09877603e13cd89b1377379724e53b2e7c61ae3bd9bc33e1c6db9c739dab51e7053044d06b7b3c12d76f4dd569bcbe5feca1f9f06a99e86d76fc9fda4e795f91cb071d4ef14dac7ba2f15abd36b57c52ec83e0f3ec32c8688dec38bd0b95fff037f59f06143b2996eeb5957253f39a1fdb7ecc0d4a77237a02ba430e3e2c90ccef1ff8861155297398f80811614a5e75763fc03ba2421eedc9a11e8dc5df36329e68e7f8c88b04a5c690a8ffcdc03035c7e74d1b8f1591bcab3f3af30c8f765791dcdbfaf2b33c321bff7f2de531dd8519bb98bc445b8c551f207d04694b5b5b0cb3688f639f2101671dcb13c0d16b1d074d2b950b3b0b5aa2362d38d91daa85df2f1e61af021c10ad3319919d7e69b21b84802289fb439242435a82b91255c628bf6fa5b63d446cc3e01829276aed69096f8125a21ac29c9081488a0973402fb914e79eb9b070cde6a97d6d1d7b12a832ee52415e1fea33c9b1ccaf47657d4cf8bed8947227cbe03a49b460224934a59c46782c990dbff1b4328bb12335b181f8053cbfdd8a24feea0672bc5b4796832fcc8e77c311e576f42d3edddae303bc0b92a8421658ade0e088a9a12f013d94c31e55ae2a016c7c3f825b850c1cf6b0a3e48f55c29ea4ead23abb22ddb4ea37fe4acc663f577cead89a4d202e90dfe39477e4d6650496b3a9566deb7e91333a432e0c791a2900117743e3de48e5dd42c970eeffa630f0de4f9eb2eeb8f582042bd358c5266dbbbe2ec6b993b75dfa15042e01017d9598d57e2cd323a872aa7b069ba380f0743ea369635cc7db6709560b79274ffc65668266d3a7ca723bd0d40b8434470b2a1be3ebfc20ee46cc651c2fb8f2437e26ab0dbb0158e1847283e9ae96fab250b60982bbc6bd420b743049d5e126e3a7d52097510217f56de1859e23f1f59749b5e79bfb79e0c135bad9519a4d0b8fc57f9d98784eea65935745f03ffc969484deb13bdd2935a5471ef1758a522469d953984b21d504af88a62cd22f7ff1d9dce608a7951538f94f7e81d957e6c0ddbb68db05e2d0bbbe7a8d16462354b3971883f26064c7e433bab4d3d1933b26d4f41ecec6a21033b19e792ba52a068c6e1537fd9c0d8a81cf6e3f5d13d0f7de5b8862afd7bdadf4aec584e303c0acda455cf9eaa7f5eb314c6f03cdb72e7f1b1710217595b134771d9946840093371e327af7c018c8941c80d81cb1bff319f5e359273ac917059dbe6ca08e7090bfeb7c4ec1b8fd4115840203ea38ac991e4cb0efa512cd72c3ffe4bcf8dd39a96706d8fe6a61b128999c1178be114ea31b80af57ca83de4568e6fe3c48531c3ffc9e599fbfb3574a34ee21db00944ebf188118bc40beeb75818957fe7bb49dcc027ebd7799455c8dbd8627e54a2824d76c2fcf53f1e4e2be17d19430e5f1a195e66e93ff90dfcf3311be86a18e3911e8dba6d9efc664e2e90e690334f85996eff8d940d6509b0e590da54fce9539df89b96c5f0cba12cfc6b8ad5f7458674b5ead5e0da2f55d78620ade233fa578878bb5734f59f3bd940e53c6afdda24e10e52ae835302032fce9a502bff376895d717226b4736bd61fa77b72d5865a10ed835bef1c5104e5699fd099451c56b5829e91b15901e797271a24393c84be554f384c9f4d252e488c30cf9bcb5bb64ee8b2d0a7034e64ecd884c0640e5d59821cc2e7629bd963ae6fca66572dca915482c522300c804abd6e58932672a45efa42e5a9dae1ceb5d37ab222c394dc2eb59a7ee2f626829830a65e95b2f4197ae84c16dcf379854b9de06c9ed9074f1a379bfea16634038d29480e1d8741edf77e790e7f602bb8a0f2320c2eb3b012266dd3f90462b2946eabbcd35dad3de5fb67594f7b8339451551b7e4ffb1fcddf621cf321f8b19768e0b30591db948a055ebabec3f4c8bc35c54126be2978164a173d14c0c0fec43fee6e50d2d66a1391f1bb3540dd03bec6107e39a394ad104d36df1d561a7778ef0dca307947f6eca0f6a862f68e71e42fc8f9d124b709840526573be5363bf6e9ab409b0b7ed2511dfb6d22fc113220b0e8db56ca1514c2b0f098536c8dabbc3043cc5656824c3de5911f532a0ae8ede49380e73eca53a5ced0b9351225aba86d183463ea217808db9586ef185cbf480e449594feab72bb22ab99b57978c4b440919d349539d055fa23667888d0af5e3b6e4738cec4f525282362d819f881c7c679c67c39586a22bd6b429e677b1da5be9cb297a698582780e204eb57f4ae73b2a080fcfb693e2d2cfa7b7a5a0a38aba464d3e5207a45ac6e967d47783193c52383f4d10d4e5cc89be4863da155cd63cdefd4fe2b26d253662ee957cc05cdce60f20ceac3798cf397c2ebcaf337f4a6cdc694eade5b7bf044286e63ba2a84111f0908df0d8fb4e4a8e634aaea68893efa187adaec377d09bab2d38444675869dd11e2530df76d7963bec9cd115d52bc0a87dcca60ead412a93dba096f409a06665705232ad1939e8a22c43eff06f7fd8df6dc415da7d6336cc921b4fa8990a697dbcde29a3f9047544478c72ca3355bef278e449a08157a6a4250b99c8998b30a1253d16a35ee3b14cc51bc76c7146d24fe24e9a972a52c0e171331cec9e44628c9029cf2d5daefd504a372bb8e8c032c91a64aea8cde30d0a5b96690bd4b707e39e4b5bd949824245527643d7bec1ed446a3b7bd48507e2f79231783cd7e144d89bd0ad9fe04320adcc3e110ff991e247c715ce5e3466b55b3b50dc3a5ce5c8780cb25c572e6804ffee7325783e7b9d7602fc70886a6fffce5fbf56ae82dc92d68694cb1564a0ffa75e8136248261f795b4a86e7bb07bbb043dc1fe789d641cad4b8551156d7740851a0b197e124cacf60282ada345698c5e25ea9743bfce0a9ce91e7bf2ff8f42fdaeb1dc62ca9408e723197f7af014138ec97e455d75f669ebb7ee4c6e646fa0b8a967bc385767c478af9929cbedbbc0bce0264e12170828659620f", 0xa9a}], 0x8}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x6, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r4, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000001200)=ANY=[@ANYRES64=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000156510000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020800000000008500000086006800ff89090004000000bf910000f4ff00007200000085060000b702000000000000950000000026840ac7a362d38182bec8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = fsopen(&(0x7f0000000080)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r10, 0x4, &(0x7f0000000100)='nolazytime\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001140)='xdp_devmap_xmit\x00', r9}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002940)=@newnexthop={0xe8, 0x68, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3c}, [@NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}]}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe1a2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xfa}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x7}, {0x2, 0x3f}, {0x2, 0x7}]}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffff9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0xffffffffffffff8a, 0x3, 0xb75e}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xd9b8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}]}]}, 0xe8}}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @local}}}], 0x20, 0x11000000}}], 0x1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002780)={r9, 0xe0, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001540), &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000001500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002a40), &(0x7f0000001580), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000002640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0xe, 0x12, &(0x7f00000012c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb41}}], &(0x7f0000001380)='GPL\x00', 0x9, 0x1000, &(0x7f0000001640)=""/4096, 0x41000, 0x1, '\x00', r12, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x3, 0xfffffffb, 0x3}, 0x10, r13, r8, 0x5, &(0x7f00000027c0)=[r2, r4, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff, r11, r2], &(0x7f0000002800)=[{0x3, 0x3, 0x10}, {0x3, 0x3, 0x8, 0xb}, {0x0, 0x3, 0x1, 0x2}, {0x4, 0x2, 0xe}, {0x0, 0x3, 0xf, 0x5}], 0x10, 0x100}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000002b00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x2, 0x1, 0x4, 0xb, 0x40, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x0, 0x1, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x1, 0x9, 0x7, 0x80, 0xffffffffffffffff}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='task_newtask\x00', r14}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') 03:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8008, 0x5, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@fscache}, {@uname={'uname', 0x3d, 'clsact\x00'}}, {@cache_loose}, {@cache_none}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_fscache}]}}) [ 2045.001745][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2045.008902][ C0] rcu: 1-...!: (3 ticks this GP) idle=475/1/0x4000000000000000 softirq=207870/207872 fqs=0 last_accelerate: 81de/a94d dyntick_enabled: 1 [ 2045.023130][ C0] (detected by 0, t=10006 jiffies, g=301605, q=126) [ 2045.029638][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2045.034752][ C1] NMI backtrace for cpu 1 [ 2045.034784][ C1] CPU: 1 PID: 292 Comm: syz-fuzzer Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2045.034841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 2045.034869][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 2045.034928][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 8a 03 f3 03 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 2045.034970][ C1] RSP: 0018:ffffc900001d09a0 EFLAGS: 00000046 [ 2045.035011][ C1] RAX: 0000000000000003 RBX: 1ffff9200003a138 RCX: ffffffff8154f88f [ 2045.035047][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888118f33d40 [ 2045.035082][ C1] RBP: ffffc900001d0a50 R08: dffffc0000000000 R09: ffffed10231e67a9 [ 2045.035120][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2045.035157][ C1] R13: ffff888118f33d40 R14: 0000000000000003 R15: 1ffff9200003a13c [ 2045.035194][ C1] FS: 000000c000efe090(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2045.035239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2045.035275][ C1] CR2: 0000000000000000 CR3: 000000011e5a2000 CR4: 00000000003506a0 [ 2045.035314][ C1] Call Trace: [ 2045.035329][ C1] [ 2045.035350][ C1] ? show_regs+0x58/0x60 [ 2045.035402][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 2045.035461][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 2045.035554][ C1] ? kvm_wait+0x117/0x180 [ 2045.035599][ C1] ? kvm_wait+0x117/0x180 [ 2045.035646][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2045.035715][ C1] ? nmi_handle+0xa8/0x280 [ 2045.035768][ C1] ? kvm_wait+0x117/0x180 [ 2045.035814][ C1] ? default_do_nmi+0x69/0x160 [ 2045.035868][ C1] ? exc_nmi+0xaf/0x120 [ 2045.035915][ C1] ? end_repeat_nmi+0x16/0x31 [ 2045.035966][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 2045.036116][ C1] ? kvm_wait+0x117/0x180 [ 2045.036162][ C1] ? kvm_wait+0x117/0x180 [ 2045.036210][ C1] ? kvm_wait+0x117/0x180 [ 2045.036256][ C1] [ 2045.036271][ C1] [ 2045.036286][ C1] ? sock_map_delete_elem+0xcb/0x130 [ 2045.036342][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 2045.036393][ C1] ? pv_hash+0x86/0x150 [ 2045.036446][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 2045.036521][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 2045.036589][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 2045.036647][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 2045.036705][ C1] ? sched_group_set_idle+0x640/0x640 [ 2045.036760][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 2045.036815][ C1] do_send_sig_info+0x7e/0x230 [ 2045.036870][ C1] group_send_sig_info+0x113/0x460 [ 2045.036919][ C1] ? __kasan_check_read+0x11/0x20 [ 2045.036971][ C1] ? __lock_task_sighand+0x100/0x100 [ 2045.037031][ C1] do_bpf_send_signal+0x8c/0x150 [ 2045.037090][ C1] irq_work_run_list+0x1c2/0x290 [ 2045.037145][ C1] ? irq_work_run+0xf0/0xf0 [ 2045.037204][ C1] irq_work_run+0x69/0xf0 [ 2045.037253][ C1] __sysvec_irq_work+0x63/0x1b0 [ 2045.037309][ C1] sysvec_irq_work+0x41/0xb0 [ 2045.037359][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 2045.037401][ C1] RIP: 0010:__do_softirq+0x10e/0x5bf [ 2045.037450][ C1] Code: a0 21 28 85 e8 83 cd c2 ff 65 66 c7 05 09 63 03 7b 00 00 48 c7 c7 a0 21 28 85 e8 6d cd c2 ff 65 89 1d ee 70 02 7b fb 89 5d b8 ff ff ff ff 0f bc 45 b8 41 89 c4 41 ff c4 0f 85 c5 00 00 00 48 [ 2045.037499][ C1] RSP: 0018:ffffc900001d0f70 EFLAGS: 00000286 [ 2045.037537][ C1] RAX: 0000000000000001 RBX: 0000000000000200 RCX: ffff88811e6ce2c0 [ 2045.037571][ C1] RDX: 1ffffffff0e51e08 RSI: ffffffff852821a0 RDI: ffffffff8582ffa0 [ 2045.037609][ C1] RBP: ffffc900001d0fe8 R08: ffffffff8728f040 R09: ffffffff8728f048 [ 2045.037649][ C1] R10: ffffffff8728f058 R11: ffffffff8728f050 R12: ffff88811e6ce2c0 [ 2045.037687][ C1] R13: ffff888151516500 R14: 0000000000400040 R15: dffffc0000000000 [ 2045.037748][ C1] do_softirq+0xf6/0x150 [ 2045.037799][ C1] [ 2045.037814][ C1] [ 2045.037829][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 2045.037881][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 2045.037934][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 2045.037987][ C1] ? bpf_send_signal_common+0x2ba/0x420 [ 2045.038050][ C1] __local_bh_enable_ip+0x75/0x80 [ 2045.038101][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 2045.038155][ C1] sock_map_delete_elem+0xcb/0x130 [ 2045.038210][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x660 [ 2045.038252][ C1] bpf_trace_run3+0x11e/0x250 [ 2045.038307][ C1] ? bpf_trace_run2+0x210/0x210 [ 2045.038358][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2045.038409][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2045.038461][ C1] ? kasan_quarantine_put+0x34/0x1a0 [ 2045.038520][ C1] ? kmem_cache_free+0x116/0x2e0 [ 2045.038574][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2045.038621][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2045.038670][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 2045.038721][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2045.038772][ C1] __traceiter_kmem_cache_free+0x32/0x50 [ 2045.038823][ C1] kmem_cache_free+0x2c3/0x2e0 [ 2045.038882][ C1] __dequeue_signal+0x4f8/0x600 [ 2045.038937][ C1] dequeue_signal+0x10c/0x520 [ 2045.038985][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2045.039039][ C1] ? unhandled_signal+0x150/0x150 [ 2045.039090][ C1] ? cgroup_freezing+0x88/0xb0 [ 2045.039143][ C1] ? freezing_slow_path+0x141/0x190 [ 2045.039196][ C1] get_signal+0x7cf/0x1630 [ 2045.039261][ C1] arch_do_signal_or_restart+0xbd/0x1680 [ 2045.039313][ C1] ? __check_object_size+0x73/0x3d0 [ 2045.039370][ C1] ? copy_user_enhanced_fast_string+0x29/0x40 [ 2045.039428][ C1] ? strncpy_from_kernel_nofault+0x169/0x1e0 [ 2045.039500][ C1] ? ktime_get_boot_fast_ns+0x1bf/0x1f0 [ 2045.039552][ C1] ? get_sigframe_size+0x10/0x10 [ 2045.039600][ C1] ? __se_sys_futex+0x37b/0x3e0 [ 2045.039672][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 2045.039722][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 2045.039774][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 2045.039830][ C1] do_syscall_64+0x49/0xb0 [ 2045.039873][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2045.039927][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2045.039986][ C1] RIP: 0033:0x472463 [ 2045.040021][ C1] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 2045.040065][ C1] RSP: 002b:000000c0006f9ef0 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 2045.040110][ C1] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 0000000000472463 [ 2045.040144][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000244b7f8 [ 2045.040176][ C1] RBP: 000000c0006f9f38 R08: 0000000000000000 R09: 0000000000000000 [ 2045.040209][ C1] R10: 0000000000000000 R11: 0000000000000286 R12: 000000000046e720 [ 2045.040241][ C1] R13: 000000c000efe000 R14: 000000c0004489c0 R15: 0000000000000006 [ 2045.040289][ C1] [ 2045.040687][ C0] rcu: rcu_preempt kthread starved for 10006 jiffies! g301605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2045.715560][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2045.725582][ C0] rcu: RCU grace-period kthread stack dump: [ 2045.731315][ C0] task:rcu_preempt state:R running task stack:28184 pid: 14 ppid: 2 flags:0x00004000 [ 2045.742057][ C0] Call Trace: [ 2045.745339][ C0] [ 2045.748058][ C0] __schedule+0xccc/0x1590 [ 2045.752320][ C0] ? __sched_text_start+0x8/0x8 [ 2045.757025][ C0] ? __kasan_check_write+0x14/0x20 [ 2045.761947][ C0] ? __kasan_check_write+0x14/0x20 [ 2045.767100][ C0] schedule+0x11f/0x1e0 [ 2045.771090][ C0] schedule_timeout+0x18c/0x370 [ 2045.776264][ C0] ? native_set_ldt+0x360/0x360 [ 2045.780961][ C0] ? console_conditional_schedule+0x30/0x30 [ 2045.786881][ C0] ? update_process_times+0x200/0x200 [ 2045.792531][ C0] ? prepare_to_swait_event+0x308/0x320 [ 2045.797964][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 2045.803003][ C0] ? debug_smp_processor_id+0x17/0x20 [ 2045.808992][ C0] ? __note_gp_changes+0x4ab/0x920 [ 2045.814649][ C0] ? rcu_gp_init+0xc30/0xc30 [ 2045.819756][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2045.825255][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 2045.829996][ C0] rcu_gp_kthread+0xa4/0x350 [ 2045.834410][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 2045.839235][ C0] ? rcu_barrier_callback+0x50/0x50 [ 2045.844618][ C0] ? __kasan_check_read+0x11/0x20 [ 2045.849425][ C0] ? __kthread_parkme+0xb2/0x200 [ 2045.855109][ C0] kthread+0x421/0x510 [ 2045.858985][ C0] ? rcu_barrier_callback+0x50/0x50 [ 2045.864185][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2045.869339][ C0] ret_from_fork+0x1f/0x30 [ 2045.873645][ C0] [ 2045.876502][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2045.882951][ C0] NMI backtrace for cpu 0 [ 2045.887236][ C0] CPU: 0 PID: 10332 Comm: kworker/u4:1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2045.899623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 2045.909744][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2045.916362][ C0] Call Trace: [ 2045.919705][ C0] [ 2045.922540][ C0] dump_stack_lvl+0x151/0x1b7 [ 2045.927061][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2045.932641][ C0] dump_stack+0x15/0x17 [ 2045.936622][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 2045.941405][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 2045.947716][ C0] ? panic+0x751/0x751 [ 2045.951868][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2045.958012][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 2045.964000][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2045.969920][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2045.975747][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 2045.981711][ C0] print_other_cpu_stall+0x112d/0x1340 [ 2045.987021][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 2045.991790][ C0] rcu_sched_clock_irq+0xaec/0x12f0 [ 2045.996937][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 2046.003025][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 2046.008051][ C0] update_process_times+0x198/0x200 [ 2046.013172][ C0] tick_sched_timer+0x188/0x240 [ 2046.018030][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 2046.023533][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 2046.028581][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 2046.033613][ C0] ? clockevents_program_event+0x22f/0x300 [ 2046.039387][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 2046.045306][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 2046.050220][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 2046.056107][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 2046.061732][ C0] [ 2046.064486][ C0] [ 2046.067270][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2046.073111][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x60 [ 2046.079079][ C0] Code: 0b 00 00 83 fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 3c 0b 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d 66 90 55 48 89 e5 4c 8b 45 08 65 48 8b 15 90 4b 92 7e 65 8b 05 [ 2046.099606][ C0] RSP: 0000:ffffc90001aff878 EFLAGS: 00000293 [ 2046.106090][ C0] RAX: ffffffff81657d2b RBX: 1ffff1103ee276cd RCX: ffff88811ef3a780 [ 2046.113963][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2046.121768][ C0] RBP: ffffc90001aff998 R08: ffffffff81657cfa R09: ffffed103ee07053 [ 2046.129998][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 2046.138109][ C0] R13: ffff8881f713b668 R14: ffff8881f7038280 R15: dffffc0000000000 [ 2046.145929][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 2046.151728][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 2046.157812][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 2046.163617][ C0] ? text_poke_sync+0x30/0x30 [ 2046.168122][ C0] ? smp_call_function_many+0x40/0x40 [ 2046.173342][ C0] ? text_poke_loc_init+0x2c5/0x540 [ 2046.178371][ C0] ? text_poke_sync+0x30/0x30 [ 2046.182883][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 2046.187997][ C0] ? __kmalloc_track_caller+0x74/0x260 [ 2046.193235][ C0] text_poke_bp_batch+0x1c4/0x5d0 [ 2046.198321][ C0] ? text_poke_loc_init+0x540/0x540 [ 2046.203304][ C0] ? mutex_lock+0xb6/0x1e0 [ 2046.207553][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 2046.212671][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2046.219195][ C0] ? text_poke_queue+0xe4/0x1a0 [ 2046.223933][ C0] text_poke_finish+0x1a/0x30 [ 2046.228442][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 2046.234798][ C0] __jump_label_update+0x36a/0x380 [ 2046.239922][ C0] jump_label_update+0x3af/0x450 [ 2046.245125][ C0] static_key_disable_cpuslocked+0xcd/0x1b0 [ 2046.250977][ C0] static_key_disable+0x1a/0x30 [ 2046.255927][ C0] toggle_allocation_gate+0x3be/0x460 [ 2046.261143][ C0] ? kfence_protect+0x270/0x270 [ 2046.265820][ C0] ? io_schedule+0x120/0x120 [ 2046.270524][ C0] ? __kasan_check_read+0x11/0x20 [ 2046.275531][ C0] ? read_word_at_a_time+0x12/0x20 [ 2046.280452][ C0] ? strscpy+0x9c/0x260 [ 2046.285067][ C0] process_one_work+0x6bb/0xc10 [ 2046.290291][ C0] worker_thread+0xad5/0x12a0 [ 2046.294792][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 2046.299863][ C0] kthread+0x421/0x510 [ 2046.303704][ C0] ? worker_clr_flags+0x180/0x180 [ 2046.308817][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2046.313533][ C0] ret_from_fork+0x1f/0x30 [ 2046.318060][ C0] [ 2179.185746][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [kworker/u4:1:10332] [ 2179.194222][ C0] Modules linked in: [ 2179.197955][ C0] CPU: 0 PID: 10332 Comm: kworker/u4:1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2179.210067][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 2179.219961][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2179.226443][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x60 [ 2179.232432][ C0] Code: 0b 00 00 83 fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 3c 0b 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d 66 90 55 48 89 e5 4c 8b 45 08 65 48 8b 15 90 4b 92 7e 65 8b 05 [ 2179.252727][ C0] RSP: 0000:ffffc90001aff878 EFLAGS: 00000293 [ 2179.258624][ C0] RAX: ffffffff81657d2b RBX: 1ffff1103ee276cd RCX: ffff88811ef3a780 [ 2179.266460][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2179.274339][ C0] RBP: ffffc90001aff998 R08: ffffffff81657cfa R09: ffffed103ee07053 [ 2179.282187][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 2179.289968][ C0] R13: ffff8881f713b668 R14: ffff8881f7038280 R15: dffffc0000000000 [ 2179.297936][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2179.306702][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2179.313127][ C0] CR2: 0000000000000000 CR3: 000000000680f000 CR4: 00000000003506b0 [ 2179.320938][ C0] Call Trace: [ 2179.324119][ C0] [ 2179.326761][ C0] ? show_regs+0x58/0x60 [ 2179.330856][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 2179.335774][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 2179.340905][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 2179.346116][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 2179.351052][ C0] ? clockevents_program_event+0x22f/0x300 [ 2179.356695][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 2179.362602][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 2179.367559][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 2179.373449][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 2179.379109][ C0] [ 2179.381884][ C0] [ 2179.384645][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2179.390635][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 2179.396451][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 2179.402268][ C0] ? __sanitizer_cov_trace_pc+0x5d/0x60 [ 2179.407652][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 2179.413483][ C0] ? text_poke_sync+0x30/0x30 [ 2179.417985][ C0] ? smp_call_function_many+0x40/0x40 [ 2179.423279][ C0] ? text_poke_loc_init+0x2c5/0x540 [ 2179.428329][ C0] ? text_poke_sync+0x30/0x30 [ 2179.432836][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 2179.437768][ C0] ? __kmalloc_track_caller+0x74/0x260 [ 2179.443060][ C0] text_poke_bp_batch+0x1c4/0x5d0 [ 2179.448030][ C0] ? text_poke_loc_init+0x540/0x540 [ 2179.453055][ C0] ? mutex_lock+0xb6/0x1e0 [ 2179.457338][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 2179.462444][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2179.469246][ C0] ? text_poke_queue+0xe4/0x1a0 [ 2179.473924][ C0] text_poke_finish+0x1a/0x30 [ 2179.478429][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 2179.484250][ C0] __jump_label_update+0x36a/0x380 [ 2179.489371][ C0] jump_label_update+0x3af/0x450 [ 2179.494487][ C0] static_key_disable_cpuslocked+0xcd/0x1b0 [ 2179.500214][ C0] static_key_disable+0x1a/0x30 [ 2179.504899][ C0] toggle_allocation_gate+0x3be/0x460 [ 2179.510109][ C0] ? kfence_protect+0x270/0x270 [ 2179.514841][ C0] ? io_schedule+0x120/0x120 [ 2179.519323][ C0] ? __kasan_check_read+0x11/0x20 [ 2179.524174][ C0] ? read_word_at_a_time+0x12/0x20 [ 2179.529119][ C0] ? strscpy+0x9c/0x260 [ 2179.533124][ C0] process_one_work+0x6bb/0xc10 [ 2179.537929][ C0] worker_thread+0xad5/0x12a0 [ 2179.542537][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 2179.547217][ C0] kthread+0x421/0x510 [ 2179.551107][ C0] ? worker_clr_flags+0x180/0x180 [ 2179.555965][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2179.560400][ C0] ret_from_fork+0x1f/0x30 [ 2179.564765][ C0] [ 2179.567599][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2179.572680][ C1] NMI backtrace for cpu 1 [ 2179.572702][ C1] CPU: 1 PID: 292 Comm: syz-fuzzer Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2179.572755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 2179.572783][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 2179.572835][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 8a 03 f3 03 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 2179.572877][ C1] RSP: 0018:ffffc900001d09a0 EFLAGS: 00000046 [ 2179.572916][ C1] RAX: 0000000000000003 RBX: 1ffff9200003a138 RCX: ffffffff8154f88f [ 2179.572952][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888118f33d40 [ 2179.572988][ C1] RBP: ffffc900001d0a50 R08: dffffc0000000000 R09: ffffed10231e67a9 [ 2179.573026][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2179.573062][ C1] R13: ffff888118f33d40 R14: 0000000000000003 R15: 1ffff9200003a13c [ 2179.573098][ C1] FS: 000000c000efe090(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2179.573143][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2179.573178][ C1] CR2: 0000000000000000 CR3: 000000011e5a2000 CR4: 00000000003506a0 [ 2179.573216][ C1] Call Trace: [ 2179.573230][ C1] [ 2179.573247][ C1] ? show_regs+0x58/0x60 [ 2179.573305][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 2179.573363][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 2179.573426][ C1] ? kvm_wait+0x117/0x180 [ 2179.573470][ C1] ? kvm_wait+0x117/0x180 [ 2179.573517][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2179.573569][ C1] ? nmi_handle+0xa8/0x280 [ 2179.573623][ C1] ? kvm_wait+0x117/0x180 [ 2179.573666][ C1] ? kvm_wait+0x117/0x180 [ 2179.573712][ C1] ? default_do_nmi+0x69/0x160 [ 2179.573763][ C1] ? exc_nmi+0xaf/0x120 [ 2179.573810][ C1] ? end_repeat_nmi+0x16/0x31 [ 2179.573861][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 2179.573923][ C1] ? kvm_wait+0x117/0x180 [ 2179.573970][ C1] ? kvm_wait+0x117/0x180 [ 2179.574017][ C1] ? kvm_wait+0x117/0x180 [ 2179.574063][ C1] [ 2179.574078][ C1] [ 2179.574092][ C1] ? sock_map_delete_elem+0xcb/0x130 [ 2179.574160][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 2179.574213][ C1] ? pv_hash+0x86/0x150 [ 2179.574265][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 2179.574345][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 2179.574412][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 2179.574471][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 2179.574536][ C1] ? sched_group_set_idle+0x640/0x640 [ 2179.574591][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 2179.574644][ C1] do_send_sig_info+0x7e/0x230 [ 2179.574698][ C1] group_send_sig_info+0x113/0x460 [ 2179.574748][ C1] ? __kasan_check_read+0x11/0x20 [ 2179.574800][ C1] ? __lock_task_sighand+0x100/0x100 [ 2179.574861][ C1] do_bpf_send_signal+0x8c/0x150 [ 2179.574927][ C1] irq_work_run_list+0x1c2/0x290 [ 2179.574986][ C1] ? irq_work_run+0xf0/0xf0 [ 2179.575044][ C1] irq_work_run+0x69/0xf0 [ 2179.575094][ C1] __sysvec_irq_work+0x63/0x1b0 [ 2179.575149][ C1] sysvec_irq_work+0x41/0xb0 [ 2179.575197][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 2179.575241][ C1] RIP: 0010:__do_softirq+0x10e/0x5bf [ 2179.575289][ C1] Code: a0 21 28 85 e8 83 cd c2 ff 65 66 c7 05 09 63 03 7b 00 00 48 c7 c7 a0 21 28 85 e8 6d cd c2 ff 65 89 1d ee 70 02 7b fb 89 5d b8 ff ff ff ff 0f bc 45 b8 41 89 c4 41 ff c4 0f 85 c5 00 00 00 48 [ 2179.575338][ C1] RSP: 0018:ffffc900001d0f70 EFLAGS: 00000286 [ 2179.575375][ C1] RAX: 0000000000000001 RBX: 0000000000000200 RCX: ffff88811e6ce2c0 [ 2179.575409][ C1] RDX: 1ffffffff0e51e08 RSI: ffffffff852821a0 RDI: ffffffff8582ffa0 [ 2179.575447][ C1] RBP: ffffc900001d0fe8 R08: ffffffff8728f040 R09: ffffffff8728f048 [ 2179.575486][ C1] R10: ffffffff8728f058 R11: ffffffff8728f050 R12: ffff88811e6ce2c0 [ 2179.575523][ C1] R13: ffff888151516500 R14: 0000000000400040 R15: dffffc0000000000 [ 2179.575588][ C1] do_softirq+0xf6/0x150 [ 2179.575639][ C1] [ 2179.575653][ C1] [ 2179.575669][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 2179.575721][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 2179.575791][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 2179.575844][ C1] ? bpf_send_signal_common+0x2ba/0x420 [ 2179.575906][ C1] __local_bh_enable_ip+0x75/0x80 [ 2179.575958][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 2179.576011][ C1] sock_map_delete_elem+0xcb/0x130 [ 2179.576067][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x660 [ 2179.576109][ C1] bpf_trace_run3+0x11e/0x250 [ 2179.576163][ C1] ? bpf_trace_run2+0x210/0x210 [ 2179.576215][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2179.576265][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2179.576325][ C1] ? kasan_quarantine_put+0x34/0x1a0 [ 2179.576377][ C1] ? kmem_cache_free+0x116/0x2e0 [ 2179.576430][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2179.576477][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2179.576528][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 2179.576578][ C1] ? __dequeue_signal+0x4f8/0x600 [ 2179.576629][ C1] __traceiter_kmem_cache_free+0x32/0x50 [ 2179.576677][ C1] kmem_cache_free+0x2c3/0x2e0 [ 2179.576736][ C1] __dequeue_signal+0x4f8/0x600 [ 2179.576791][ C1] dequeue_signal+0x10c/0x520 [ 2179.576841][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2179.576894][ C1] ? unhandled_signal+0x150/0x150 [ 2179.576946][ C1] ? cgroup_freezing+0x88/0xb0 [ 2179.576998][ C1] ? freezing_slow_path+0x141/0x190 [ 2179.577050][ C1] get_signal+0x7cf/0x1630 [ 2179.577114][ C1] arch_do_signal_or_restart+0xbd/0x1680 [ 2179.577174][ C1] ? __check_object_size+0x73/0x3d0 [ 2179.577229][ C1] ? copy_user_enhanced_fast_string+0x29/0x40 [ 2179.577287][ C1] ? strncpy_from_kernel_nofault+0x169/0x1e0 [ 2179.577357][ C1] ? ktime_get_boot_fast_ns+0x1bf/0x1f0 [ 2179.577407][ C1] ? get_sigframe_size+0x10/0x10 [ 2179.577455][ C1] ? __se_sys_futex+0x37b/0x3e0 [ 2179.577525][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 2179.577576][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 2179.577627][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 2179.577682][ C1] do_syscall_64+0x49/0xb0 [ 2179.577725][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2179.577779][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2179.577836][ C1] RIP: 0033:0x472463 [ 2179.577889][ C1] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 2179.577930][ C1] RSP: 002b:000000c0006f9ef0 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 2179.577976][ C1] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 0000000000472463 [ 2179.578011][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000244b7f8 [ 2179.578043][ C1] RBP: 000000c0006f9f38 R08: 0000000000000000 R09: 0000000000000000 [ 2179.578074][ C1] R10: 0000000000000000 R11: 0000000000000286 R12: 000000000046e720 [ 2179.578106][ C1] R13: 000000c000efe000 R14: 000000c0004489c0 R15: 0000000000000006 [ 2179.578154][ C1]