last executing test programs: 16m17.818684711s ago: executing program 32 (id=2066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 16m8.547406771s ago: executing program 33 (id=2308): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x339c839, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x18010, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x60480) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') setns(r0, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m38.755206768s ago: executing program 4 (id=3044): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYBLOB="355464f40ae17d8ef71dd3c5dffaf53f3ea798a4fdc812cfb36d6b4920cafcd10e1feb57a3c80de0ed9e13a05e50ac7f1cfa3c", @ANYRES32], 0x0, 0x1505, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) rt_tgsigqueueinfo(r4, r0, 0x1a, &(0x7f0000000440)={0x30, 0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x111) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1b7) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r6, &(0x7f00000003c0)='(', 0x1) accept4$unix(r7, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) 12m37.088394752s ago: executing program 4 (id=3052): socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 12m36.690554927s ago: executing program 4 (id=3061): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x40, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0xfe, 0x124a, &(0x7f0000001900)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = open(&(0x7f0000000180)='./file1\x00', 0x20000, 0x30c) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004940)="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", 0x2000, &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000002680)={{}, "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"}) 12m36.645617227s ago: executing program 34 (id=3061): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x40, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0xfe, 0x124a, &(0x7f0000001900)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = open(&(0x7f0000000180)='./file1\x00', 0x20000, 0x30c) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004940)="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", 0x2000, &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000002680)={{}, "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"}) 10m50.344127176s ago: executing program 35 (id=3455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 9m30.593304282s ago: executing program 36 (id=3770): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002720000850000004300000095"], 0x0, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9}]}}, 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 9m3.791106077s ago: executing program 37 (id=3824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000280)={0x2, 0xab, &(0x7f0000000100)="8e931277f628acbec77b93c3deba36772884ffbb91bcdeb9e5a05f78b916be58b694075976bf723028bdf21dd8bcd0197d92dbcefb6ec8e395421c4c6d61ad6d0ce71f6d24de3d076f46d6cffa02b7c81c478813e8427c75f971a99bc684171bf33ecf1cd05c824d36db1a2ef09c47049968f491748e2c607b6ad6d706f37a177f12b1541120efad6ff25eb2f8d0184aeb9dea1748d32564cd53b6d4b2aee9a5b8edf38a3e880812f93a13"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@getchain={0x24, 0x66, 0x54344af52948ef07}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 8m54.651072936s ago: executing program 3 (id=3847): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x1, 0x80, 0x3, 0x121, {{0x3e, 0x4, 0x1, 0x6, 0xf8, 0x64, 0x0, 0x1b, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@timestamp_addr={0x44, 0x3c, 0xee, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdef6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xfe70}, {@private=0xa010102, 0x7}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@multicast2, 0x7f}]}, @timestamp={0x44, 0xc, 0x5f, 0x0, 0x7, [0x70d, 0x2]}, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x1, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0xfffffffe}, {@remote, 0x6}, {@local, 0x6b}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xdd, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x6b, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@loopback, 0x5afda50}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@empty}, {@remote, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x53, 0x3, 0x6, [{@private=0xa010102, 0x3}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@multicast1, 0x7}]}]}}}}}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/166, 0xa6}], 0x1, &(0x7f0000001fc0)=""/61, 0x3d}, 0x1}], 0x1, 0x40002002, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000540)="e8897c", 0x3}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') pread64(r3, &(0x7f0000002d00)=""/53, 0x35, 0xdc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x14c3}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x641}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x10000, 0xcf, &(0x7f0000000a40)=""/207, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000b80)=[{0x3, 0x1, 0x5, 0xc}, {0x1, 0x4, 0xb, 0x1}, {0x1, 0x1, 0x3, 0xa71c72e2df42c8aa}, {0x0, 0x1, 0x1, 0x5}, {0x2, 0x3, 0x7, 0x6}, {0x3, 0x2, 0x1, 0x9}, {0x4, 0x1, 0x3, 0x3}, {0x4, 0x2, 0x5, 0x587c1549d3c6d032}, {0x3, 0x4, 0xe, 0xa}], 0x10, 0x9}, 0x94) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x20000000000000, 0xffffffffffffff7f}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x181604, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0xf, &(0x7f0000000740)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000080)='GPL\x00', 0x8, 0x55, &(0x7f00000007c0)=""/85, 0x41100, 0x46, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x4, 0x200}, 0x10, 0x2699c, r4, 0x1, &(0x7f0000000e00)=[r5, r6, r7, r8], &(0x7f0000000e40)=[{0x3, 0x1, 0xe, 0xe}], 0x10, 0xab}, 0x94) r9 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 8m54.30032817s ago: executing program 3 (id=3850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000eeff85000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socket$inet6(0xa, 0x800, 0x80000000) r8 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000100)=0x9, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/8N'], 0x6a) 8m52.823568611s ago: executing program 7 (id=3854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000eeff85000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socket$inet6(0xa, 0x800, 0x80000000) r8 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000100)=0x9, 0x3) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/8N'], 0x6a) 8m52.359688568s ago: executing program 3 (id=3857): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30"], 0x122}}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) creat(&(0x7f0000000580)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) io_uring_setup(0x27c8, &(0x7f0000000180)={0x0, 0x57b8, 0x8, 0x1, 0x327, 0x0, r3}) 8m51.201509364s ago: executing program 3 (id=3861): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r1, &(0x7f0000000940)=""/5, 0x5) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r3}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="000000000000001e000400070000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x2000000000000286, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) pwrite64(r6, &(0x7f0000000600)="a4", 0x1, 0x10007) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147182, 0x8d) write$tun(r7, 0x0, 0x10) syz_clone(0xc3201300, &(0x7f00000002c0)="f0988e6d34622fc66ae372011b9c1b575bd69a758b8b7cbb0a9e8969bc73d6a5f2d2e84f3cf3737ed992eceb272145386a30ef26f6f1ad4e58e8f29957d4308491b0984c2e6d50b278b4119d7ce37a470631e688188f634b62fe5d8ce9f0845ecd145f4e07fac8b6a49478025d62ef244225a57a3399de6bb99cb6c56269f75aebea7bb89ecfe4f931d98e8b26c3a0d19f38f1e3bf946342075fdd264ebe97caae0fbddcb9866cc359b0e7fdad5fe8489458ec3387b7de63e168b4da229eec4b4bdc406b1cb203c890f275b57bfad96b83d6cfd70bae28de205272d1ef5f73ebdbbc53bd50599df5b312f3ded80ea1884732c440c230f1d5466dba", 0xfb, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)="036a35fdefb6d7a3f7cdd1a08a17bb3c74b44b56489c24bf8222c46ee6b67ac7c9c6ab5b9e6cb4eb84af3d") 8m50.881618568s ago: executing program 3 (id=3862): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 8m50.631324392s ago: executing program 3 (id=3865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="b9fffe316844268cb89e14f086dd47e0ffff26123a03631177fbac141416e000030a440a9f03fc80000000000000000000000000002e01070b038da188fe25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='[', 0x1001}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100d3", @ANYRES8=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x3, 0xd, 0x2, 0xfd, 0x6, 0x80, 0x9, 0x1}, {0x40b, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81, 0x1}, {0xe2a5, 0xd, 0x1, 0x9, 0x8, 0x6, 0x5, 0x8, 0x7f, 0xe, 0x56, 0x7, 0x100}], 0x4}) 8m50.586402322s ago: executing program 38 (id=3865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='[', 0x1001}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100d3", @ANYRES8=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x3, 0xd, 0x2, 0xfd, 0x6, 0x80, 0x9, 0x1}, {0x40b, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81, 0x1}, {0xe2a5, 0xd, 0x1, 0x9, 0x8, 0x6, 0x5, 0x8, 0x7f, 0xe, 0x56, 0x7, 0x100}], 0x4}) 8m50.496569844s ago: executing program 7 (id=3867): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "e96dc3", 0x61, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 8m49.548481567s ago: executing program 7 (id=3871): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xffff0000, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m49.466582538s ago: executing program 7 (id=3873): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r1, &(0x7f0000000940)=""/5, 0x5) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r3}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="000000000000001e000400070000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x2000000000000286, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIuHMyla+uPCV7MS9HhQG+8miE9K6PpMpp0rHXgduFuvJEheOFAvNd7L4f/gH/FQIdDRvHGm8hJT7quSdasy9rMfD5w2vfNe5L3PDnnefOenIQEMLQmsj+FiJcj4psk4nBEJHnbaOSNE2vrrT68Xs6WJBqNT/5KsvX2R0S59Vit+x3MKy9FxK9fRZwstPdbW16ZL1Uq6WJe3xsLVyZryyunLi2U5tK59PL0zMyZt2am333n7b7E2fhy7f/Hdz848/Xx1e9+vn/kdhJn41DensXVh25ubKxMxET+nIzF2U0rTvWhs0GS7PYGsC0jeZ6PRTYGHI6RPOuB/77sZbEBDKlE/sOQas0DWuf2fToPfmE8eH/tBKg9/tG190ZiX/Pc6MBq8tiZUXa+O96H/rM+fvnjzu1sif69DwGwpRs3I+L06Gj7+Jfk49/2ne5hnc19GP9g59zN5j9vdJr/FNbnP9Fh/nOwQ+5ux9b5X7jfh266yuZ/73Wc/65ftBofyWv/a875xpKLlyppNrb9PyJOxNjerP6k6zlnVu81urVtnP9lS9Z/ay6Yb8f90b2P32e2VC89S8wbPbgZ8UrH+W+yvv+TDvs/ez7O99jHsfTOa93ato7/+Wr8GPF6x/3/6IpWVpqsd70+Odk8HiZbR0W7v28d+61b/7sdf7b/Dzw5/vFk4/Xa2tP38cO+f9K8uG9z22PxR+/H/57k02Z5T37btVK9vjgVsSf5qP326Uf3bdVb62fxnzj+5PGv0/G/PyI+7zH+W0d/erVb2yDs/9mn2v9PX7j34Rffd+u/t/HvzWbpRH5LL+Nfrxv4LM8dAAAAAAAADJpCRByKpFBcLxcKxeLa5zuOxoFCpVqrn7xYXbo8G83vyo7HWKF1pfvwhs9DTOWfh23VpzfVZyLiSER8O7K/WS+Wq5XZ3Q4eAAAAAAAAAAAAAAAAAAAABsTBLt//z/w+0rb6Z3/u/CYCz5Of/IbhtWX+9+OXnoCB5PUfhpf8h+El/2F4yX8YXvIfhpf8h+El/2F4yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq/PnzmVLY/Xh9XJWn726vDRfvXpqNq3NFxeWysVydfFKca5anaukxXJ1YavHq1SrV6amY+naZD2t1SdryysXFqpLl+sXLi2U5tIL6diORAUAAAAAAAAAAAAAAAAAAAAvltryynypUkkXFRS2VRgdjM1Q6HNht0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//cHo1gQ==") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) pwrite64(r6, &(0x7f0000000600)="a4", 0x1, 0x10007) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147182, 0x8d) syz_clone(0xc3201300, &(0x7f00000002c0)="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", 0xfb, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)="036a35fdefb6d7a3f7cdd1a08a17bb3c74b44b56489c24bf8222c46ee6b67ac7c9c6ab5b9e6cb4eb84af3d") 8m49.124230263s ago: executing program 7 (id=3874): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000001020101"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='GPL\x00'}, 0x80) 8m44.718895885s ago: executing program 7 (id=3882): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "e96dc3", 0x61, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 8m44.579183477s ago: executing program 39 (id=3882): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "e96dc3", 0x61, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 8m41.754287096s ago: executing program 4 (id=3883): socket$inet6(0xa, 0x80002, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="7046000000100001040400000000000000000000000343ee59511c9c78dc34a039be790c401b43577e7ab56738f6d67f0d5c4b36fbba2e11094fece59d4db88a8d8441b13112017a6624276ec28bcf5aef27389e13a4e40e205a972fcdf5c1a822e21012f55cc3585c5902c14702b4dd9b529088abe62e", @ANYRES32=0x0, @ANYBLOB="03050000000000005000128009000100766c616e0000000040000280340004800c00010002000000000400000c00010000000100080000000c0001006be20cfd000000000c00010008000000000000000600010003000000"], 0x70}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 8m39.867315243s ago: executing program 4 (id=3899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='[', 0x1001}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100d3", @ANYRES8=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x3, 0xd, 0x2, 0xfd, 0x6, 0x80, 0x9, 0x1}, {0x40b, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81, 0x1}, {0xe2a5, 0xd, 0x1, 0x9, 0x8, 0x6, 0x5, 0x8, 0x7f, 0xe, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x40, 0xa0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc3}, &(0x7f00000006c0)={0x0, "7c47f447f3a0aaee6be3fb279a1c801144f6ebe0346cd24ec3f086843b9364184cc6b1b451b1bbe16c3fcd4c98e1ec072af65e56cf92bed83bb2fa70487c2bca", 0x2a}, 0x48, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3c0, 0x1d0, 0xe8, 0x1d0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff03, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 8m39.667201495s ago: executing program 4 (id=3903): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) getuid() syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 8m33.091625418s ago: executing program 0 (id=3907): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 8m32.985905989s ago: executing program 0 (id=3909): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x181042, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = dup(r1) openat$null(0xffffffffffffff9c, 0x0, 0xa0041, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) lseek(r0, 0x4, 0x3) 8m31.352064622s ago: executing program 0 (id=3911): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000001020101"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='GPL\x00'}, 0x80) 8m29.725017475s ago: executing program 0 (id=3913): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r1, &(0x7f0000000940)=""/5, 0x5) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r3}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="000000000000001e000400070000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x2000000000000286, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) syz_clone(0xc3201300, &(0x7f00000002c0)="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", 0xfb, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)="036a35fdefb6d7a3f7cdd1a08a17bb3c74b44b56489c24bf8222c46ee6b67ac7c9c6ab5b9e6cb4eb84af3d") 8m27.063305172s ago: executing program 0 (id=3919): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 8m24.970449231s ago: executing program 0 (id=3924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000280)={0x2, 0xab, &(0x7f0000000100)="8e931277f628acbec77b93c3deba36772884ffbb91bcdeb9e5a05f78b916be58b694075976bf723028bdf21dd8bcd0197d92dbcefb6ec8e395421c4c6d61ad6d0ce71f6d24de3d076f46d6cffa02b7c81c478813e8427c75f971a99bc684171bf33ecf1cd05c824d36db1a2ef09c47049968f491748e2c607b6ad6d706f37a177f12b1541120efad6ff25eb2f8d0184aeb9dea1748d32564cd53b6d4b2aee9a5b8edf38a3e880812f93a13"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@getchain={0x24, 0x66, 0x54344af52948ef07}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 8m24.290638591s ago: executing program 40 (id=3924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000280)={0x2, 0xab, &(0x7f0000000100)="8e931277f628acbec77b93c3deba36772884ffbb91bcdeb9e5a05f78b916be58b694075976bf723028bdf21dd8bcd0197d92dbcefb6ec8e395421c4c6d61ad6d0ce71f6d24de3d076f46d6cffa02b7c81c478813e8427c75f971a99bc684171bf33ecf1cd05c824d36db1a2ef09c47049968f491748e2c607b6ad6d706f37a177f12b1541120efad6ff25eb2f8d0184aeb9dea1748d32564cd53b6d4b2aee9a5b8edf38a3e880812f93a13"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@getchain={0x24, 0x66, 0x54344af52948ef07}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 8m23.733384348s ago: executing program 41 (id=3903): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) getuid() syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m51.695330247s ago: executing program 6 (id=5099): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x1, 0x80, 0x3, 0x121, {{0x3e, 0x4, 0x1, 0x6, 0xf8, 0x64, 0x0, 0x1b, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@timestamp_addr={0x44, 0x3c, 0xee, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdef6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xfe70}, {@private=0xa010102, 0x7}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@multicast2, 0x7f}]}, @timestamp={0x44, 0xc, 0x5f, 0x0, 0x7, [0x70d, 0x2]}, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x1, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0xfffffffe}, {@remote, 0x6}, {@local, 0x6b}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xdd, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x6b, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@loopback, 0x5afda50}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@empty}, {@remote, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x53, 0x3, 0x6, [{@private=0xa010102, 0x3}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@multicast1, 0x7}]}]}}}}}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/166, 0xa6}], 0x1, &(0x7f0000001fc0)=""/61, 0x3d}, 0x1}], 0x1, 0x40002002, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000540)="e8897c", 0x3}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') pread64(r3, &(0x7f0000002d00)=""/53, 0x35, 0xdc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x14c3}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x641}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x10000, 0xcf, &(0x7f0000000a40)=""/207, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000b80)=[{0x3, 0x1, 0x5, 0xc}, {0x1, 0x4, 0xb, 0x1}, {0x1, 0x1, 0x3, 0xa71c72e2df42c8aa}, {0x0, 0x1, 0x1, 0x5}, {0x2, 0x3, 0x7, 0x6}, {0x3, 0x2, 0x1, 0x9}, {0x4, 0x1, 0x3, 0x3}, {0x4, 0x2, 0x5, 0x587c1549d3c6d032}, {0x3, 0x4, 0xe, 0xa}], 0x10, 0x9}, 0x94) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x20000000000000, 0xffffffffffffff7f}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x181604, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0xf, &(0x7f0000000740)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000080)='GPL\x00', 0x8, 0x55, &(0x7f00000007c0)=""/85, 0x41100, 0x46, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x4, 0x200}, 0x10, 0x2699c, r4, 0x0, &(0x7f0000000e00)=[r5, r6, r7, r8], &(0x7f0000000e40), 0x10, 0xab}, 0x94) r9 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 2m51.608459718s ago: executing program 6 (id=5101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (fail_nth: 4) 2m49.38734837s ago: executing program 6 (id=5108): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001100)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x1, 0x0, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2]}}}, @hopopts_2292={{0x170, 0x29, 0x36, {0x1, 0x2a, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x43, 0xd4, "503ef1dd6ac1ee1ed7804465477e9327ee3919c12dfa217486e971d83c045576b13a3f5e1ccc346c15b9ae2c3745d70fcc950a956104298e303743762c1c38d8ae87ac5508c587c2be0539d6a7954a5b18e56ac3bb908428cbf78f06a37db9b59fde772b44bda4f699515b2d7763e3b325630fc40d910d42b2bfe1095b07938070fd77c12eca41291f2c390e712b8f651018b4f4bccfa18b2de295d6f295f5b8a54cd2292987c9dcca442eaff52be6590550f2e717c1e6f27abcce6e409cbb511745996d17a4317c1cba18106496061d808d5ef4"}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x94, 0x69, "c2f44651d04d1a9a7d9ee3dfaf7b685476322100bf9b78aced6c7ae0e7c884b1b08e7895f229692fa6e4401b4e14c0e8d38fc870a70f439ee0c0865dccf9ead3d7d41ba7187fa8a8458ed009125ba7b8b30d4cad16f247034fef702fe397b43a5c959ec0badff58e89"}]}}}], 0x200}}], 0x1, 0x4000084) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) fcntl$getflags(r1, 0x40a) openat$ashmem(0xffffffffffffff9c, 0x0, 0x2080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf6f39a3b0b53100ac3a29f5a3476c98a20000000000b2a990fb76c2b898ffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4041, &(0x7f0000000600), 0x60, 0x50e, &(0x7f0000000bc0)="$eJzs3c9rJFkdAPBvdbpnk5nMJqsedMF1dVcyg053snF3g4d1BfG2oKz3MSadENJJh3RndxIWzeAfIIio4EkvXgT/AEEWvHgUYUHPiooiOqMHDzol1V2dmcl0Jz0zPd2Z9OcDlXrv1Y/vewlVqVf1qApgbL0YEW9GxJ00Ta9GxExeXsinOGxP2Xq3b723kk1JpOnb/0giycs6+0ry+aV8s8k8/43kwbiN/YPN5VqtupvnK82tnUpj/+DaxtbyenW9ur24uPDa0utLry7ND6SdlyPijS/95fvf+emX3/jlZ9/94/W/XflmVq3pfPm97XhIxZMWtpteOvpddDbYfcRgZ1Gx1cLcVLc1Jh4oufmE6wQAQHfZNf6HIuJTEXE1ZmLi5MtZAAAA4CmUfmE6/ptEpN1d6FEOAAAAPEUKrTGwSaGcjwWYjkKhXG6P4f1IXCzU6o3mZ9bqe9ur7bGys1EqrG3UqvP5WOHZKCVZfqGVvpt/5Vh+MSKei4jvzUy18uWVem111Dc/AAAAYExcOtb///dMu/8PAAAAnDOzo64AAAAA8MTp/wMAAMD5p/8PAAAA59pX3norm9LO969X39nf26y/c2212tgsb+2tlFfquzvl9Xp9vfXOvq3T9ler13c+F9t7NyrNaqNZaewfXN+q7203r2/c9wlsAAAAYIie+8T7v08i4vDzU60pc6G/TftcDTirikepJJ93Oaz/8Gx7/uchVQoYiolRVwAYmeKoKwCMTGnUFQBGLjllec/BO7/J558cbH0AAIDBm/tY7+f/hRO3PDx5MXDmOYhhfHn+D+Or9fy/35G8LhbgXCm5AoCx99jP/0+Vpg9VIQAAYOCmW1NSKOe396ajUCiXIy63PgtQStY2atX5iHg2In43U3omyy+0tkxO7TMAAAAAAAAAAAAAAAAAAAAAAAAAAG1pmkQKAAAAnGsRhb8mv2q/y39u5uXp4/cHLiT/mYn8E6Hv/ujtH9xYbjZ3F7Lyfx6VN3+Yl78yijsYAAAAMBYe6gP+nX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIN0+9Z7K51pmHH//sWImO0WvxiTz2TzyShFxMV/JVG8Z7skIiYGEH8q+/HRbvGTrFpHIbvFnxpA/MObJ8aP2ZjsGf/SAOLDOHs/O/+82e34K8SLrXn3468YcV/+UfU+/3UiT7bOc92O/8t9xnj+g59Xesa/GfF8sfv5pxM/6RH/pT7jf/1rBwe9lqU/jpjr+v8nuS9Wpbm1U2nsH1zb2Fper65XtxcXF15ben3p1aX5ytpGrZr/7Brjux//xZ2T2n+xR/zZU9r/cp/t/98HN259uJ0sdYt/5aUu8X/9k3yNB+MX8v99n87T2fK5Tvqwnb7XCz/77QsntX+1R/tP+/tf6bP9V7/67T/1uSoAMASN/YPN5Vqtuju0xO2IGGbQrJc+1AZKPDWJbw10h2maptkx9Rj7SeIs/FpaiVGfmQAAgEG7e9E/6poAAAAAAAAAAAAAAAAAAADA+BrG68SOxzw8SiWDeIU2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBA/D8AAP//IY7X/w==") 2m48.374511065s ago: executing program 6 (id=5114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000023"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000023"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2m47.265097102s ago: executing program 6 (id=5120): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) 2m46.083720659s ago: executing program 6 (id=5126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) 2m46.075898749s ago: executing program 42 (id=5126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) 6.82105953s ago: executing program 9 (id=5830): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00', @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x583, &(0x7f0000001080)="$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") r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000}]) 5.399668301s ago: executing program 9 (id=5839): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x42}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbd6}]}, 0x38}, 0x1, 0x0, 0x0, 0xe80d9173d14c9f2e}, 0x4000800) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x18) r7 = geteuid() sendmmsg$unix(r5, &(0x7f0000000a80)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000000580)="db43b9894e70617f4164e8bd23eb6ec7677f17ba5c6819dbd828867c126e392932d8747b03d0fec116d69c7510a3d6d8df061c91dfee84fe91c54acaa87f5b03338d6815c8d64d6a1bc0f3628505171a8b0404f44b195d78", 0x58}, {&(0x7f0000000600)="c36cc6", 0x3}, {&(0x7f0000000640)="460ad88867f6e916f26a2e93ee8960bbe6e723ceb0dfe153cd8be0cd336926a349f9f1c4a9f4b8aa0132e780d983b834ff7e918bfcd114c2be761ea4b1d52c82569f9c25398d488db65fe6eeba3d06", 0x4f}, {&(0x7f00000007c0)="9b988b6a8526408ecdca97d2d29e44bb91b9f1f4d910ddf4a791532d30917fe80438140daf189992adb57bfee56d2e4dcd56777e6911fea74bb02a51e97ed862fe46e9e7edfd0c36319c591ee0ca0d1f2472eef75a269b448f3e803692093826fff8db11b7cd2bafd6ffcb914742a54f3a61fe9154c579a7b5a454ea7101984a6a351501096c596d101c779ef395a1b5968f91eef1e546101b021685bdd30a42c14b2cbc51515e9ff79edac2a2402a5d85041127c2de048e5985e45fd6d43aea33512d08d449c6b72059adcd94061c6eb66c9c19fe710ca174a666098705714f263e", 0xe2}, {&(0x7f00000006c0)="069470064bd8e1f911ff4b4150ca48835800776e0c590aeb130baca3f7151fc1590e040de25bfb89dacc0d1d2a3e5e1816", 0x31}, {&(0x7f00000008c0)="e711e71ed6148de9d5ddb1f907e0b78a7a5afecdfd7d3abf13761750419bcb3ab4625e76e9d63713696678e576029926fe716e7ef7dd10d8ba5a475f661573f9eefd8f7a880f91f79e3a37cb27ee651e13ec6b8fb5e7280bac76d3e0b3a87941e913261d877126d048b71d03d5383ef975c79ead8845d2e4b0b41fd439073e7fef8ae36249864e0cb6469bbaba6f511a70f36f61008c949132adacfeb53a1bc3e2", 0xa1}], 0x7, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r3, r7}}}], 0x38, 0x80}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r8 = dup2(r4, r0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x666d69bd, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r10, 0x5609, &(0x7f0000000180)={0x3, 0x400, 0x84b}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0xe7a7, 0x10001, 0x80000001}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000280)={'geneve0\x00', 0x4000}) 4.915279258s ago: executing program 5 (id=5842): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') getdents(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000240)={[{@orlov}, {@sysvgroups}]}, 0x43, 0x4e0, &(0x7f0000000300)="$eJzs3UFvHFcdAPD/jL2pk7pdl3JoK1GqtsipILt2TVuLQ1skBKdKQLkbY68ty2uvZa+T2IqQIz4AEkKAxIlTLkh8ACSUj4CQIsEdQQRCkMCBA7BoZ2eNY+/GG1jvBPv3kybz3rwZ//9vpX27s/MyE8CF9VpEfBgRYxHxVkSU8+1pviy0Kwed/R4+uLXUXpJotT7+cxJJvq37t5J8/WznkJiIiK9/JeJbSa/I++uL9XptO69Vmxtb1Z29/WtrG4urtdXa5tzc7Lvz782/Mz8zeGfS/k1TEfH+l+7/4Lt3vvz+Lz5347cLf7z67XZak3n70X4MU6frpey16BqPiO2zCFaQ8ayHAAD8P3gxIj4REa9n3//LMZZ9m7tUdFoAAADAELU+mIx/JBGtAb0eg+8LAAAAPB3SbA5sklby6bOTkaaVSmcO7yfjSlpv7DQ/u9LY3VzutE9FKV1Zq9dm8rnCU1FK2vXZfI5tt/72sfpcRLwQEd8vX87qlaVGfbnoHz8AAADggnj22Pn/38qd8/87j/6Hzq3CEgQAAACGY6roBAAAAIAz5/wfAAAAzj/n/wAAAHCuffWjj9pLq/v86+Xre7vrjevXlms765WN3aXKUmN7q7LaaKxm9+zbOO3v1RuNrc/H5u7NarO206zu7O0vbDR2N5sLa488AhsAAAAYoRc+ffc3SUQcfOFytrS9XHRSwEikT7Lz788uD2D0xopOACjMeNEJAIUpFZ0AULjklPbn+zX8cvi5AAAAZ2P65ZPX/8tFJwWMxBNd/wcAzgXX/+HiKpkBCBfe86eMA31v3nHi+v8HfXZstf6LtAAAgCGazJYkreTXAicjTSuViOeyxwKUkpW1em0mn//763LpmXZ9NjsyOXXOMAAAAAAAAAAAAAAAAAAAAAAAAADQ0Wol0QIAAADOtYj0D0l2N/+I6fKbk8d/H7iU/L2crSPixo8//uHNxWZze7a9/S+H25s/yre/XcQvGAAAAHBB3B/8SXzd8/TueTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNPDB7eWusso4/7pixEx1Sv+eExk64koRcSVvyYxfuS4JCLGhhD/4HZEvNQrftJOK6byLHrFvzzy+MnhcekQYsNFd7c9/nzY6/2XxmvZuvf7fzxf/lf9x7/0cPwb6zP+PDdgjFfu/azaN/7tiFfGe48/3fhJFu1k/DcGjP/Nb+zvH6k+c7St9ZOI6Z6fP8kjsarNja3qzt7+tbWNxdXaam1zbm723fn35t+Zn6murNVr+b8943/vUz//1+P6f6VP/KnD/vd+/d8csP//vHfzwYudYqlX/Ktv9P78falP/DT/7PtMXm63T3fLB53yUa/+9FevPq7/y336P3FK/68O2P+3vvad3w24KwAwAjt7++uL9XptW0GhgMKleCrSUDhRKHpkAgAAhu0/X/qLzgQAAAAAAAAAAAAAAAAAAAAurlHcTux4zINiugoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Fj/DgAA//83QNDI") 4.827140849s ago: executing program 5 (id=5845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='[', 0x1001}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100d3", @ANYRES8=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x3, 0xd, 0x2, 0xfd, 0x6, 0x80, 0x9, 0x1}, {0x40b, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81, 0x1}, {0xe2a5, 0xd, 0x1, 0x9, 0x8, 0x6, 0x5, 0x8, 0x7f, 0xe, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x40, 0xa0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc3}, &(0x7f00000006c0)={0x0, "7c47f447f3a0aaee6be3fb279a1c801144f6ebe0346cd24ec3f086843b9364184cc6b1b451b1bbe16c3fcd4c98e1ec072af65e56cf92bed83bb2fa70487c2bca", 0x2a}, 0x48, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3c0, 0x1d0, 0xe8, 0x1d0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff03, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 4.825168629s ago: executing program 1 (id=5846): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000001020101"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='GPL\x00'}, 0x80) 4.423897055s ago: executing program 5 (id=5847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000280)={0x2, 0xa9, &(0x7f0000000100)="8e931277f628acbec77b93c3deba36772884ffbb91bcdeb9e5a05f78b916be58b694075976bf723028bdf21dd8bcd0197d92dbcefb6ec8e395421c4c6d61ad6d0ce71f6d24de3d076f46d6cffa02b7c81c478813e8427c75f971a99bc684171bf33ecf1cd05c824d36db1a2ef09c47049968f491748e2c607b6ad6d706f37a177f12b1541120efad6ff25eb2f8d0184aeb9dea1748d32564cd53b6d4b2aee9a5b8edf38a3e880812f9"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@getchain={0x24, 0x66, 0x54344af52948ef07}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 4.118267559s ago: executing program 9 (id=5848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000280)={0x2, 0xa6, &(0x7f0000000100)="8e931277f628acbec77b93c3deba36772884ffbb91bcdeb9e5a05f78b916be58b694075976bf723028bdf21dd8bcd0197d92dbcefb6ec8e395421c4c6d61ad6d0ce71f6d24de3d076f46d6cffa02b7c81c478813e8427c75f971a99bc684171bf33ecf1cd05c824d36db1a2ef09c47049968f491748e2c607b6ad6d706f37a177f12b1541120efad6ff25eb2f8d0184aeb9dea1748d32564cd53b6d4b2aee9a5b8edf38a3e88"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@getchain={0x24, 0x66, 0x54344af52948ef07}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 3.339988801s ago: executing program 1 (id=5851): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x8, 0x88, 0x6, 0x9e9e, 0xcb, "0382aa400000000000e6ffffab5b00", 0x5, 0x1}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.988437476s ago: executing program 8 (id=5852): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.942874167s ago: executing program 8 (id=5855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 2.897301327s ago: executing program 8 (id=5856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) gettid() openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0xffff15a7, 0xfffffff9, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x35, 0x1}, {0x34, 0x6}, {0x0, 0x0, 0x6, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x1, 0x0, 0xfe, '\x00', 0x3}, {0x0, 0x0, 0x80}, {}, {}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0xfc, 0x0, 0xfa}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) 2.791615599s ago: executing program 8 (id=5858): sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$FUSE(0xffffffffffffffff, &(0x7f0000003880)={0x2020}, 0xffffffe4) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1520c1b, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0, 0x1e1, &(0x7f0000000540)="$eJzsmb2LE0EYxp+Z3XzcIYKNhY2CB55wt9ndqFxjcfaCcBc/OoNZQ3STSLJFErAINjb+Gf4LFqks7AQLWy1UECxMab0yu292x2TzBYkgvj/I7DMf77wzb5KnSMAwzH/Lt6+/vry6dXR6AOAM9lCg8R9GukZq6z8XSXx6/a519vloej8BIAxXz28CeHtsIKB+GP4ZvUfPU8hEVyBxlfQ9CFikH0LiLmkPAg9IP9F0e4eE71mP2n7tccP3bNU4qnFVU54+33goUANQpPMJbb7bHzyt+r7XmRa5cJJnZmpdsaR+5vhY4qZWP/V+3X/5Yqj6k9rYWv0cSDikyxA4IX2EAizLSkui3f+Cme5vrHL/tYWBzeyjiXOHi9YcbDTXcnE7jPmrSf85kcPWUwhtZEcJ9YVORs6PR+9no75v8+6XtntlkGfPTH3cXRJe+ZARlYo8mUBmeOqfynKvaP5kwkz8oxQ0n5W6/cFho1mte3Wv5brlG/Y1277uliIjitsF/leM/GlX2z83Z21e5NGrBkHH6QFBx0n6btxqjnvypv0zipGR/0nsX473UB+V6NqF7ByCXjJ6KrVvzD08wzAMwzAMwzAMwzAMwzDMWlyEAP3TIOgH0SzcO9Hq3wEAAP//IXFmNQ==") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x4}}], 0x18}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d0b27bd70000010000003000080e100000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_io_uring_setup(0x683a, &(0x7f0000000ac0)={0x0, 0x1d25, 0x400, 0x0, 0x96}, &(0x7f0000000500), &(0x7f0000001440)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.69447845s ago: executing program 5 (id=5859): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.643549851s ago: executing program 2 (id=5860): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpriority(0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x371d, &(0x7f00000007c0)={0x0, 0x0, 0x400, 0x180001, 0x210}, &(0x7f0000000380), &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) 2.550728683s ago: executing program 9 (id=5861): sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$FUSE(0xffffffffffffffff, &(0x7f0000003880)={0x2020}, 0xffffffe4) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1520c1b, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0, 0x1e1, &(0x7f0000000540)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x4}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x683a, &(0x7f0000000ac0)={0x0, 0x1d25, 0x400, 0x0, 0x96}, &(0x7f0000000500), &(0x7f0000001440)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.468320254s ago: executing program 1 (id=5862): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00', @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x583, &(0x7f0000001080)="$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") r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000}]) 2.428107074s ago: executing program 8 (id=5863): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000500), 0x9, 0x16080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0x358, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) 2.258361977s ago: executing program 9 (id=5864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000eeff85000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socket$inet6(0xa, 0x800, 0x80000000) r8 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000100)=0x9, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/8N'], 0x6a) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1.108403304s ago: executing program 1 (id=5865): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.107730424s ago: executing program 2 (id=5866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 1.107557364s ago: executing program 2 (id=5867): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.107225954s ago: executing program 2 (id=5868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) gettid() openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0xffff15a7, 0xfffffff9, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x35, 0x1}, {0x34, 0x6}, {0x0, 0x0, 0x6, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x1, 0x0, 0xfe, '\x00', 0x3}, {0x0, 0x0, 0x80}, {}, {}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0xfc, 0x0, 0xfa}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) 1.106688504s ago: executing program 9 (id=5869): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000280)={0x2, 0xab, &(0x7f0000000100)="8e931277f628acbec77b93c3deba36772884ffbb91bcdeb9e5a05f78b916be58b694075976bf723028bdf21dd8bcd0197d92dbcefb6ec8e395421c4c6d61ad6d0ce71f6d24de3d076f46d6cffa02b7c81c478813e8427c75f971a99bc684171bf33ecf1cd05c824d36db1a2ef09c47049968f491748e2c607b6ad6d706f37a177f12b1541120efad6ff25eb2f8d0184aeb9dea1748d32564cd53b6d4b2aee9a5b8edf38a3e880812f93a13"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@getchain={0x24, 0x66, 0x54344af52948ef07}, 0x24}}, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 1.053241505s ago: executing program 8 (id=5870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x24, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, 0xfffffff7, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}], 0x1, 0x3, &(0x7f00000003c0)={[0x6f]}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 1.042088175s ago: executing program 2 (id=5871): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRESOCT=0x0, @ANYRES16=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="74726156f56aafe1cb8ead645a12f46151b79757ea833495019b563076ffc3db3b18471bb7b51f0ee9f07d21d0671778399af48bd7a67177ad7168fd4107eb08c115d2", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRES64=r2, @ANYBLOB="06000c0cfca304653c203aa6492c5d77c934f29902c957a299fe548d57ecb04b47"]) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) setuid(0xee01) prctl$PR_CAPBSET_DROP(0x18, 0x4000001b) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r10}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)='O', 0x1}, {&(0x7f0000000100)="d9af5e788b0b5de84f7747964ea5efa574f3d9ee7e426e045aa404bcf69365d697253460e565031c6ed277e37c53ed6f48b653f9e793c6a582298b", 0x3b}], 0x2, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x20, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000280)) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x900c, &(0x7f00000001c0)=ANY=[@ANYRES8=r0]) 1.028417885s ago: executing program 1 (id=5872): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @ioapic={0x0, 0x8, 0x0, 0x9, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x7}, {0x1, 0x17, 0x10, '\x00', 0xcb}, {0x62, 0x3, 0x6, '\x00', 0xb3}, {0xd, 0x7, 0x9}, {0x7a, 0x83, 0x0, '\x00', 0x1}, {0xd, 0x6, 0x27, '\x00', 0x8}, {0x7c, 0x7, 0x7, '\x00', 0xb}, {0xd9, 0x2b, 0x5, '\x00', 0x9c}, {0x0, 0x8, 0x0, '\x00', 0x5}, {0x8, 0xfe, 0xff, '\x00', 0x8}, {0xaf, 0x7, 0x2, '\x00', 0x33}, {0x0, 0x21, 0x4, '\x00', 0x5}, {0xef, 0x32, 0xe7}, {0x0, 0x4, 0x40, '\x00', 0x5}, {0x5, 0xc4, 0x6, '\x00', 0x3}, {0x6, 0x0, 0xfd, '\x00', 0x60}, {0x3, 0x88, 0x1, '\x00', 0x4}, {0x4, 0x81, 0x3, '\x00', 0x4}, {0xce, 0xf9, 0x8, '\x00', 0x7}, {0x7, 0xe, 0xcd, '\x00', 0x9}, {0x9, 0x5, 0x8}, {0x80, 0x8, 0x1, '\x00', 0x5}, {0x6f, 0x9, 0x2, '\x00', 0x4}, {0x20, 0x5, 0xb, '\x00', 0xf}]}}) request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000005c0)='keyring\x00', r2) keyctl$unlink(0x9, r2, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000007c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@nobarrier}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x3}}, {@minixdf}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) 941.594116ms ago: executing program 2 (id=5873): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x8, 0x88, 0x6, 0x9e9e, 0xcb, "0382aa400000000000e6ffffab5b00", 0x5, 0x1}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 940.393886ms ago: executing program 5 (id=5874): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x3, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x380481d, &(0x7f0000000a40), 0x26, 0x762, &(0x7f0000000a80)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x80000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r7, 0x12}, 0x10) openat$tcp_mem(0xffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setrlimit(0x2, &(0x7f0000000380)={0x8, 0x1ff}) 136.486478ms ago: executing program 1 (id=5875): openat$ashmem(0xffffffffffffff9c, 0x0, 0x2080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ff00"/28], 0x48) process_vm_writev(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f0000000640)=""/90, 0x5a}], 0x5, &(0x7f0000001200)=[{&(0x7f0000000740)=""/148, 0x94}, {&(0x7f00000005c0)}, {&(0x7f0000000800)=""/39, 0x27}, {&(0x7f0000000840)=""/183, 0xb7}, {&(0x7f0000000900)=""/114, 0x72}, {&(0x7f0000000980)=""/88, 0x58}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/106, 0x6a}, {&(0x7f0000001100)=""/239, 0xef}], 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6a7dcb3c, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ldst={0x3, 0x0, 0x3, 0x7, 0x8, 0x18d, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4041, &(0x7f0000000600), 0x60, 0x50e, &(0x7f0000000bc0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x1, &(0x7f0000000340), 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) 0s ago: executing program 5 (id=5876): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) kernel console output (not intermixed with test programs): 67] ? kasan_save_alloc_info+0x25/0x30 [ 1174.680664][T17467] ? __kasan_kmalloc+0x95/0xb0 [ 1174.685472][T17467] ? v9fs_mount+0xaf/0xaa0 [ 1174.689927][T17467] ? kmalloc_trace+0x40/0xb0 [ 1174.694564][T17467] v9fs_mount+0xc5/0xaa0 [ 1174.698847][T17467] ? __cfi_v9fs_mount+0x10/0x10 [ 1174.703731][T17467] ? cap_capable+0x1aa/0x230 [ 1174.708356][T17467] legacy_get_tree+0xfe/0x1a0 [ 1174.713066][T17467] ? __cfi_v9fs_mount+0x10/0x10 [ 1174.717962][T17467] vfs_get_tree+0x9a/0x270 [ 1174.722468][T17467] do_new_mount+0x25a/0xa20 [ 1174.727010][T17467] path_mount+0x675/0x1010 [ 1174.731463][T17467] ? user_path_at_empty+0x161/0x1c0 [ 1174.736705][T17467] __se_sys_mount+0x318/0x380 [ 1174.741416][T17467] ? __x64_sys_mount+0xd0/0xd0 [ 1174.746215][T17467] ? __cfi_ksys_write+0x10/0x10 [ 1174.751118][T17467] __x64_sys_mount+0xbf/0xd0 [ 1174.755749][T17467] x64_sys_call+0x65d/0x9a0 [ 1174.760287][T17467] do_syscall_64+0x4c/0xa0 [ 1174.764997][T17467] ? clear_bhb_loop+0x30/0x80 [ 1174.769703][T17467] ? clear_bhb_loop+0x30/0x80 [ 1174.774410][T17467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.780332][T17467] RIP: 0033:0x7f3ff598e929 [ 1174.784773][T17467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.804413][T17467] RSP: 002b:00007f3ff68b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.812860][T17467] RAX: ffffffffffffffda RBX: 00007f3ff5bb5fa0 RCX: 00007f3ff598e929 [ 1174.820953][T17467] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1174.828952][T17467] RBP: 00007f3ff68b6090 R08: 0000200000000280 R09: 0000000000000000 [ 1174.836954][T17467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.844951][T17467] R13: 0000000000000000 R14: 00007f3ff5bb5fa0 R15: 00007ffd78105c28 [ 1174.852959][T17467] [ 1174.889375][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1174.948005][T17468] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1175.155463][ T353] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1176.149693][T12669] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1176.329571][T12669] usb 3-1: Using ep0 maxpacket: 16 [ 1176.337214][T12669] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1176.347840][T12669] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1176.357068][T12669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.365126][T12669] usb 3-1: Product: syz [ 1176.370490][T12669] usb 3-1: Manufacturer: syz [ 1176.375206][T12669] usb 3-1: SerialNumber: syz [ 1176.380701][T12669] usb 3-1: config 0 descriptor?? [ 1176.386804][T12669] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1176.394740][T12669] usb 3-1: Detected FT232R [ 1176.560508][ T353] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.570877][ T353] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1176.638053][ T28] audit: type=1400 audit(2000000022.690:4609): avc: denied { ioctl } for pid=17494 comm="syz.8.5254" path="socket:[84447]" dev="sockfs" ino=84447 ioctlcmd=0xae7b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1176.665409][ T353] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1176.674776][ T353] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1176.683141][ T353] usb 10-1: Product: syz [ 1176.687572][ T353] usb 10-1: Manufacturer: syz [ 1176.692439][ T353] usb 10-1: SerialNumber: syz [ 1176.698105][ T353] usb 10-1: config 0 descriptor?? [ 1176.826281][ T382] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1176.972335][T17459] binder: 17458:17459 ioctl 80104592 200000000280 returned -22 [ 1176.984509][T17459] binder_alloc: 17458: pid 17458 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1176.989782][T12669] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1176.997407][T17459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.010518][T17459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.022497][ T382] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.033495][ T353] usb 10-1: USB disconnect, device number 23 [ 1177.037437][T12669] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1177.040789][ T382] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1177.056448][ T382] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1177.056692][T12669] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1177.064747][ T382] usb 6-1: Product: syz [ 1177.074348][T12669] usb 3-1: USB disconnect, device number 41 [ 1177.081666][ T382] usb 6-1: Manufacturer: syz [ 1177.084130][T12669] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1177.087546][ T382] usb 6-1: SerialNumber: syz [ 1177.097209][T12669] ftdi_sio 3-1:0.0: device disconnected [ 1177.103014][ T382] usb 6-1: config 0 descriptor?? [ 1177.114163][ T382] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1177.325230][T17485] binder: 17484:17485 ioctl 80104592 200000000280 returned -22 [ 1177.334927][T17485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.343540][T17485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.352998][ T353] usb 6-1: USB disconnect, device number 28 [ 1177.429242][T17501] loop2: detected capacity change from 0 to 8192 [ 1177.436881][T17501] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1177.465743][T17503] kvm: apic: phys broadcast and lowest prio [ 1177.554000][T17510] fuse: Bad value for 'user_id' [ 1177.616315][T17514] loop9: detected capacity change from 0 to 2048 [ 1177.616391][T17517] loop1: detected capacity change from 0 to 16 [ 1177.666306][T17512] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1177.679817][T17514] loop9: p1 < > p4 [ 1177.684173][T17514] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1177.706078][T17514] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1177.793685][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5257'. [ 1178.102346][T17529] binder_alloc: 17528: pid 17528 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1178.399497][ T353] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1178.913864][T17535] loop5: detected capacity change from 0 to 512 [ 1179.527543][T17535] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1179.538361][T17535] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5264: bg 0: block 248: padding at end of block bitmap is not set [ 1179.555039][T17535] Quota error (device loop5): write_blk: dquota write failed [ 1179.562770][T17535] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1179.572820][T17535] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5264: Failed to acquire dquot type 1 [ 1179.587080][T17535] EXT4-fs (loop5): 1 truncate cleaned up [ 1179.593657][T17535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1179.645645][T17535] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.5264: deleted inode referenced: 12 [ 1180.250621][ T353] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.260914][ T353] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1180.272427][ T353] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1180.281669][ T353] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1180.389486][ T353] usb 10-1: Product: syz [ 1180.393783][ T353] usb 10-1: Manufacturer: syz [ 1180.398622][ T353] usb 10-1: SerialNumber: syz [ 1180.404362][ T353] usb 10-1: config 0 descriptor?? [ 1180.525193][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1180.656530][T17529] binder: 17528:17529 ioctl 80104592 200000000280 returned -22 [ 1180.700037][T17529] binder_alloc: 17528: pid 17528 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1180.751216][T17529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.759993][T17529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.770007][ T353] usb 10-1: USB disconnect, device number 24 [ 1180.777281][T17551] kvm: apic: phys broadcast and lowest prio [ 1180.916819][T17557] loop1: detected capacity change from 0 to 16 [ 1180.967615][T17557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1181.101468][T17560] loop1: detected capacity change from 0 to 16 [ 1181.115985][T17562] binder_alloc: 17561: pid 17561 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1181.146350][T17559] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1181.389534][ T353] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1181.681972][ T353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.692291][ T353] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1181.702768][ T353] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1181.711849][ T353] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1181.720047][ T353] usb 9-1: Product: syz [ 1181.724215][ T353] usb 9-1: Manufacturer: syz [ 1181.728799][ T353] usb 9-1: SerialNumber: syz [ 1182.420927][ T353] usb 9-1: config 0 descriptor?? [ 1182.533146][T17585] kvm: apic: phys broadcast and lowest prio [ 1182.618498][T17590] binder_alloc: 17589: pid 17589 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1182.641878][T17562] binder: 17561:17562 ioctl 80104592 200000000280 returned -22 [ 1182.650284][T17562] binder_alloc: 17561: pid 17561 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1182.662857][T17562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.671479][T17562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.680663][ T6914] usb 9-1: USB disconnect, device number 7 [ 1182.762276][T17592] loop9: detected capacity change from 0 to 2048 [ 1182.809994][T17592] loop9: p1 < > p4 [ 1182.814411][T17592] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1182.831214][T17592] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1182.899490][T12669] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1182.949281][T17595] loop5: detected capacity change from 0 to 16 [ 1183.039487][ T311] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1183.047843][T17595] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1183.100503][T12669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.110692][T12669] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1183.121804][T12669] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1183.131127][T12669] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1183.139325][T12669] usb 3-1: Product: syz [ 1183.143644][T12669] usb 3-1: Manufacturer: syz [ 1183.148259][T12669] usb 3-1: SerialNumber: syz [ 1183.154128][T12669] usb 3-1: config 0 descriptor?? [ 1183.686814][T17608] loop8: detected capacity change from 0 to 512 [ 1183.730600][T17590] binder: 17589:17590 ioctl 80104592 200000000280 returned -22 [ 1183.742049][T17608] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1183.751225][T17608] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5288: bg 0: block 248: padding at end of block bitmap is not set [ 1183.766676][T17608] Quota error (device loop8): write_blk: dquota write failed [ 1183.774304][T17608] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1183.784291][T17608] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.5288: Failed to acquire dquot type 1 [ 1183.798012][T17608] EXT4-fs (loop8): 1 truncate cleaned up [ 1183.805667][T17608] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1183.846980][T17608] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.5288: deleted inode referenced: 12 [ 1183.868517][T17610] binder_alloc: 17589: pid 17589 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1183.892157][T17590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.998412][T17590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.181355][T17105] usb 3-1: USB disconnect, device number 42 [ 1184.192035][T17613] binder: BINDER_SET_CONTEXT_MGR already set [ 1184.198740][T17613] binder: 17611:17613 ioctl 4018620d 200000000040 returned -16 [ 1184.493486][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1184.499741][ T6914] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1184.519476][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 1184.525772][ T311] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1184.548851][ T311] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1184.563132][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.575876][ T311] usb 2-1: Product: syz [ 1184.580118][ T311] usb 2-1: Manufacturer: syz [ 1184.584834][ T311] usb 2-1: SerialNumber: syz [ 1184.590281][ T311] usb 2-1: config 0 descriptor?? [ 1184.596113][ T311] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1184.603819][ T311] usb 2-1: Detected FT232R [ 1184.641432][T17623] syz.5.5290[17623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1184.641691][T17623] syz.5.5290[17623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1184.687666][T17625] loop8: detected capacity change from 0 to 512 [ 1184.712359][ T6914] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.723225][ T6914] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1184.736040][ T6914] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1184.764657][ T6914] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1184.786070][T17625] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1184.795228][T17625] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5294: bg 0: block 248: padding at end of block bitmap is not set [ 1184.810901][T17625] Quota error (device loop8): write_blk: dquota write failed [ 1184.818511][T17625] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1184.828539][T17625] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.5294: Failed to acquire dquot type 1 [ 1184.842144][T17625] EXT4-fs (loop8): 1 truncate cleaned up [ 1184.876219][ T6914] usb 10-1: Product: syz [ 1184.896635][ T6914] usb 10-1: Manufacturer: syz [ 1184.985429][ T6914] usb 10-1: SerialNumber: syz [ 1184.993424][T17625] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1185.019370][T17625] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.5294: deleted inode referenced: 12 [ 1191.245605][ T311] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1191.266223][ T311] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1191.286626][ T311] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1191.296703][ T6914] usb 10-1: config 0 descriptor?? [ 1191.298444][ T311] usb 2-1: USB disconnect, device number 31 [ 1191.308639][ T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1191.313300][ T6914] usb 10-1: can't set config #0, error -71 [ 1191.318340][ T311] ftdi_sio 2-1:0.0: device disconnected [ 1191.331813][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1191.359215][ T6914] usb 10-1: USB disconnect, device number 25 [ 1191.414758][T17633] loop1: detected capacity change from 0 to 2048 [ 1191.444288][T17635] loop9: detected capacity change from 0 to 16 [ 1191.491311][T17633] loop1: p1 < > p4 [ 1191.495753][T17633] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1191.512295][T17633] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1191.526735][T17635] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1191.967026][T17660] loop1: detected capacity change from 0 to 1024 [ 1191.968855][T17653] loop9: detected capacity change from 0 to 256 [ 1191.974099][T17660] EXT4-fs: Ignoring removed bh option [ 1191.980614][T17653] exfat: Unknown parameter '·' [ 1191.985821][T17660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1192.011641][T17660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1192.130267][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1192.155316][T17668] loop9: detected capacity change from 0 to 512 [ 1192.174546][T17668] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1192.182800][T17668] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1192.217159][T17668] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5306: deleted inode referenced: 12 [ 1193.271143][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1193.397640][T17688] loop2: detected capacity change from 0 to 512 [ 1193.423975][T17688] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1193.433437][T17688] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5310: bg 0: block 248: padding at end of block bitmap is not set [ 1193.605164][T17690] loop9: detected capacity change from 0 to 16 [ 1193.886916][T17691] loop8: detected capacity change from 0 to 16 [ 1194.651305][T17688] Quota error (device loop2): write_blk: dquota write failed [ 1194.658970][T17688] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1194.669115][T17688] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.5310: Failed to acquire dquot type 1 [ 1194.685184][T17688] EXT4-fs (loop2): 1 truncate cleaned up [ 1194.692516][T17688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1194.726876][T17688] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.5310: deleted inode referenced: 12 [ 1195.954719][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1195.976789][T17685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1195.990050][T17698] loop5: detected capacity change from 0 to 2048 [ 1195.997081][T17698] EXT4-fs: Ignoring removed mblk_io_submit option [ 1196.017240][T17702] loop1: detected capacity change from 0 to 1024 [ 1196.024009][T17702] EXT4-fs: Ignoring removed bh option [ 1196.029860][T17702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1196.070240][T17698] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1196.079627][T17702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1196.110113][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1196.137780][T17691] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1196.271597][T17716] loop5: detected capacity change from 0 to 512 [ 1196.304075][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1196.418827][T17716] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1196.428199][T17716] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5319: bg 0: block 248: padding at end of block bitmap is not set [ 1196.443542][T17716] Quota error (device loop5): write_blk: dquota write failed [ 1196.451111][T17716] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1196.461303][T17716] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5319: Failed to acquire dquot type 1 [ 1196.476013][T17716] EXT4-fs (loop5): 1 truncate cleaned up [ 1196.483303][T17716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1196.547454][T17716] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.5319: deleted inode referenced: 12 [ 1197.182778][T17722] fuse: Bad value for 'group_id' [ 1197.443647][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1197.453950][T17729] kvm: vcpu 0: requested 197696 ns lapic timer period limited to 200000 ns [ 1197.480631][T17725] loop8: detected capacity change from 0 to 2048 [ 1197.539866][T17725] loop8: p1 < > p4 [ 1197.544344][T17725] loop8: p4 size 8388608 extends beyond EOD, truncated [ 1197.580572][T17725] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1197.668384][T17739] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5325'. [ 1197.886610][T17741] kvm: apic: phys broadcast and lowest prio [ 1198.436628][T17750] loop9: detected capacity change from 0 to 2048 [ 1198.473452][T17755] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1198.490549][T17750] loop9: p1 < > p4 [ 1198.495033][T17750] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1198.610686][T17762] loop1: detected capacity change from 0 to 16 [ 1198.658589][T17761] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1198.710716][T17767] fuse: Bad value for 'group_id' [ 1198.782675][T17770] loop1: detected capacity change from 0 to 16 [ 1199.401317][T17777] syz.2.5336[17777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1199.401845][T17777] syz.2.5336[17777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1199.809157][T17797] fuse: Bad value for 'group_id' [ 1199.886869][T17794] loop8: detected capacity change from 0 to 8192 [ 1200.019930][T17804] loop2: detected capacity change from 0 to 1024 [ 1200.029434][T17804] EXT4-fs: Ignoring removed bh option [ 1200.038527][T17804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.092506][T17804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1200.657782][T17813] loop5: detected capacity change from 0 to 16 [ 1201.476389][T17794] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1201.658730][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1201.688519][T17824] fuse: Bad value for 'user_id' [ 1201.749820][T17825] loop2: detected capacity change from 0 to 16 [ 1201.799481][ T353] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1201.817386][T17823] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1201.989560][ T353] usb 10-1: Using ep0 maxpacket: 16 [ 1201.996763][ T353] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1202.022638][ T353] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1202.058874][ T353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.067407][T17105] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1202.104007][ T353] usb 10-1: Product: syz [ 1202.124106][ T353] usb 10-1: Manufacturer: syz [ 1202.147006][ T353] usb 10-1: SerialNumber: syz [ 1202.173934][ T353] usb 10-1: config 0 descriptor?? [ 1202.209815][ T353] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1202.217744][ T353] usb 10-1: Detected FT232R [ 1202.270506][T17105] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.282156][T17105] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1202.291300][T17105] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1202.299517][T17105] usb 6-1: Product: syz [ 1202.303748][T17105] usb 6-1: Manufacturer: syz [ 1202.306765][T17839] syz.2.5354[17839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.308402][T17105] usb 6-1: SerialNumber: syz [ 1202.309737][T17839] syz.2.5354[17839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.321089][T17105] usb 6-1: config 0 descriptor?? [ 1202.343924][T17105] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1202.469698][T17842] syz.8.5356[17842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.469779][T17842] syz.8.5356[17842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.548748][T17829] binder: 17827:17829 ioctl 80104592 200000000280 returned -22 [ 1202.569931][T17829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.578496][T17829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.588137][T12669] usb 6-1: USB disconnect, device number 29 [ 1202.596166][ T353] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1202.607587][ T353] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1202.616177][ T353] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1202.625381][ T353] usb 10-1: USB disconnect, device number 26 [ 1202.634923][ T353] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1202.645767][ T353] ftdi_sio 10-1:0.0: device disconnected [ 1202.799374][T17849] loop2: detected capacity change from 0 to 2048 [ 1202.806727][T17849] EXT4-fs: Ignoring removed mblk_io_submit option [ 1202.860261][T17849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1202.897565][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1203.040735][T17857] loop1: detected capacity change from 0 to 2048 [ 1203.062241][T17857] loop1: p1 < > p4 [ 1203.069952][T17857] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1203.116697][T17859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1203.358451][T17860] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1203.453653][T17868] loop9: detected capacity change from 0 to 16 [ 1203.536746][T17879] loop1: detected capacity change from 0 to 16 [ 1203.557924][T17881] binder_alloc: 17880: pid 17880 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1203.576512][T17876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1203.623262][T17885] loop1: detected capacity change from 0 to 2048 [ 1203.669882][T17885] loop1: p1 < > p4 [ 1203.674232][T17885] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1203.684925][T17885] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1203.739538][ T353] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1203.847173][T17888] FAULT_INJECTION: forcing a failure. [ 1203.847173][T17888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.860518][T12669] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1203.861355][T17888] CPU: 1 PID: 17888 Comm: syz.1.5371 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 1203.878064][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1203.888127][T17888] Call Trace: [ 1203.891419][T17888] [ 1203.894351][T17888] __dump_stack+0x21/0x24 [ 1203.898687][T17888] dump_stack_lvl+0xee/0x150 [ 1203.903281][T17888] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1203.908311][T17888] dump_stack+0x15/0x24 [ 1203.912565][T17888] should_fail_ex+0x3d4/0x520 [ 1203.917243][T17888] should_fail+0xb/0x10 [ 1203.921437][T17888] should_fail_usercopy+0x1a/0x20 [ 1203.926461][T17888] _copy_from_user+0x1e/0xc0 [ 1203.931056][T17888] restore_altstack+0x9a/0x4a0 [ 1203.935883][T17888] ? __kasan_check_write+0x14/0x20 [ 1203.941021][T17888] ? __cfi_restore_altstack+0x10/0x10 [ 1203.946416][T17888] ? __kasan_check_write+0x14/0x20 [ 1203.951637][T17888] __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 1203.957119][T17888] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 1203.963921][T17888] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1203.970013][T17888] x64_sys_call+0x832/0x9a0 [ 1203.974533][T17888] do_syscall_64+0x4c/0xa0 [ 1203.978961][T17888] ? clear_bhb_loop+0x30/0x80 [ 1203.983691][T17888] ? clear_bhb_loop+0x30/0x80 [ 1203.988461][T17888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.994394][T17888] RIP: 0033:0x7f1cf2f8e927 [ 1203.998851][T17888] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1204.018484][T17888] RSP: 002b:00007f1cf3da1038 EFLAGS: 00000246 [ 1204.024565][T17888] RAX: 0000000000000114 RBX: 00007f1cf31b5fa0 RCX: 00007f1cf2f8e929 [ 1204.032639][T17888] RDX: 0000060000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 1204.040620][T17888] RBP: 00007f1cf3da1090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.048619][T17888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.057047][T17888] R13: 0000000000000000 R14: 00007f1cf31b5fa0 R15: 00007fff965d4248 [ 1204.065495][T17888] [ 1204.090509][ T353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.103022][ T353] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1204.112266][ T353] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1204.120926][ T353] usb 9-1: Product: syz [ 1204.125358][ T353] usb 9-1: Manufacturer: syz [ 1204.130126][ T353] usb 9-1: SerialNumber: syz [ 1204.141398][ T353] usb 9-1: config 0 descriptor?? [ 1204.170658][T12669] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.182919][T12669] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1204.192421][T12669] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1204.200831][T12669] usb 10-1: Product: syz [ 1204.205262][T12669] usb 10-1: Manufacturer: syz [ 1204.208711][ T353] snd-usb-audio: probe of 9-1:0.0 failed with error -22 [ 1204.218563][T12669] usb 10-1: SerialNumber: syz [ 1204.224040][T12669] usb 10-1: config 0 descriptor?? [ 1204.231097][T12669] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1204.348342][T17874] binder: 17873:17874 ioctl 80104592 200000000280 returned -22 [ 1204.357329][T17874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.367068][T17874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.387655][T12669] usb 9-1: USB disconnect, device number 8 [ 1204.435853][T17881] binder: 17880:17881 ioctl 80104592 200000000280 returned -22 [ 1204.446438][T17881] binder_alloc: 17880: pid 17880 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1204.477659][T17881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.486270][T17881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.495913][ T6915] usb 10-1: USB disconnect, device number 27 [ 1204.535739][T17909] syz.5.5377[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.535832][T17909] syz.5.5377[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.569204][T17912] loop2: detected capacity change from 0 to 16 [ 1204.727259][T17916] loop2: detected capacity change from 0 to 16 [ 1204.784190][T17916] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1204.823109][T17920] kvm: apic: phys broadcast and lowest prio [ 1207.908065][T17934] loop9: detected capacity change from 0 to 1024 [ 1207.923774][T17934] /dev/loop9: Can't open blockdev [ 1208.037131][T17949] loop5: detected capacity change from 0 to 16 [ 1208.501631][T17955] kvm: apic: phys broadcast and lowest prio [ 1208.585723][T17961] loop8: detected capacity change from 0 to 16 [ 1208.607908][T17973] loop1: detected capacity change from 0 to 2048 [ 1208.681325][T17973] loop1: p1 < > p4 [ 1208.686060][T17973] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1208.700491][T17961] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1208.709840][T17973] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1208.760739][T17975] syz.2.5401[17975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1208.760820][T17975] syz.2.5401[17975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1208.789486][ T382] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1209.093012][ T382] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.107661][ T382] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1209.117837][ T382] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1209.126497][ T382] usb 6-1: Product: syz [ 1209.131468][ T382] usb 6-1: Manufacturer: syz [ 1209.136366][ T382] usb 6-1: SerialNumber: syz [ 1209.152840][ T382] usb 6-1: config 0 descriptor?? [ 1209.176675][ T382] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1209.394407][T17958] binder: 17956:17958 ioctl 80104592 200000000280 returned -22 [ 1209.410990][T17958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.424917][T17958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.441500][T17105] usb 6-1: USB disconnect, device number 30 [ 1212.369880][T17998] kvm: apic: phys broadcast and lowest prio [ 1212.421168][T18004] kvm: apic: phys broadcast and lowest prio [ 1212.475392][T17995] loop9: detected capacity change from 0 to 16 [ 1212.579286][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5413'. [ 1212.840433][T18020] loop1: detected capacity change from 0 to 2048 [ 1212.900024][T18020] loop1: p1 < > p4 [ 1212.909842][T18028] loop9: detected capacity change from 0 to 2048 [ 1212.916398][T18020] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1212.923756][T18028] EXT4-fs: Ignoring removed mblk_io_submit option [ 1212.941676][T18028] /dev/loop9: Can't open blockdev [ 1212.949004][T18018] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1213.316872][ T382] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1213.562019][T18043] syz.1.5422[18043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.564160][T18043] syz.1.5422[18043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.611389][ T382] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.775438][ T382] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1213.873467][ T382] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1214.233792][ T382] usb 10-1: Product: syz [ 1214.238135][ T382] usb 10-1: Manufacturer: syz [ 1214.242934][ T382] usb 10-1: SerialNumber: syz [ 1214.250621][ T382] usb 10-1: config 0 descriptor?? [ 1214.267251][ T382] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1214.295337][T18049] loop8: detected capacity change from 0 to 1024 [ 1214.403572][T18053] kvm: apic: phys broadcast and lowest prio [ 1214.439032][T18049] EXT4-fs (loop8): invalid first ino: 0 [ 1214.458654][T18031] binder: 18030:18031 ioctl 80104592 200000000280 returned -22 [ 1214.470281][T18031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.489051][T18031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.498194][ T382] usb 10-1: USB disconnect, device number 28 [ 1214.553849][T18059] kvm: vcpu 0: requested 197696 ns lapic timer period limited to 200000 ns [ 1214.566994][T18064] kvm: vcpu 0: requested 197696 ns lapic timer period limited to 200000 ns [ 1214.688367][T18068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5430'. [ 1215.183514][T18080] fuse: Unknown parameter 'grou00000000000000000000' [ 1215.593569][T18088] loop5: detected capacity change from 0 to 512 [ 1215.691192][T18088] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1215.712072][T18088] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5438: bg 0: block 248: padding at end of block bitmap is not set [ 1215.727435][T18088] Quota error (device loop5): write_blk: dquota write failed [ 1215.735164][T18088] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1215.745226][T18088] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5438: Failed to acquire dquot type 1 [ 1215.758486][T18088] EXT4-fs (loop5): 1 truncate cleaned up [ 1215.765130][T18088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1215.823271][T18088] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.5438: deleted inode referenced: 12 [ 1218.013708][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1218.058175][T18101] binder_alloc: 18100: pid 18100 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1218.085277][T18105] binder_alloc: 18104: binder_alloc_buf, no vma [ 1218.203721][T18111] syz.9.5441[18111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.203810][T18111] syz.9.5441[18111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.251622][T18109] kvm: vcpu 0: requested 197696 ns lapic timer period limited to 200000 ns [ 1218.339511][ T6915] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1218.349792][T18115] fuse: Unknown parameter 'grou00000000000000000000' [ 1218.359478][T12669] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1218.520514][ T6915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.532384][ T6915] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1218.542297][ T6915] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1218.550744][ T6915] usb 6-1: Product: syz [ 1218.555392][ T6915] usb 6-1: Manufacturer: syz [ 1218.561155][ T6915] usb 6-1: SerialNumber: syz [ 1218.561246][T12669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.579772][ T6915] usb 6-1: config 0 descriptor?? [ 1218.596862][T12669] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1218.606627][ T6915] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1218.614624][T12669] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1218.623204][T12669] usb 3-1: Product: syz [ 1218.627414][T12669] usb 3-1: Manufacturer: syz [ 1218.632074][T12669] usb 3-1: SerialNumber: syz [ 1218.637709][T18123] loop1: detected capacity change from 0 to 1024 [ 1218.644261][T12669] usb 3-1: config 0 descriptor?? [ 1218.645744][T18123] EXT4-fs (loop1): invalid first ino: 0 [ 1218.652471][T12669] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1218.786919][T18101] binder: 18100:18101 ioctl 80104592 200000000280 returned -22 [ 1218.794928][T18101] binder_alloc: 18100: pid 18100 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1218.807685][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.816421][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.827213][ T353] usb 6-1: USB disconnect, device number 31 [ 1218.851352][T18105] binder: 18104:18105 ioctl 80104592 200000000280 returned -22 [ 1218.860735][T18105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.869329][T18105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.877983][T12669] usb 3-1: USB disconnect, device number 43 [ 1218.920717][T18130] kvm: apic: phys broadcast and lowest prio [ 1219.110906][T18142] loop9: detected capacity change from 0 to 512 [ 1219.128127][T18142] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1219.136650][T18142] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1219.158521][T18142] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5458: deleted inode referenced: 12 [ 1219.529794][T18146] fuse: Unknown parameter 'group_i00000000000000000000' [ 1219.738933][T18151] loop5: detected capacity change from 0 to 16 [ 1219.920140][T18157] loop1: detected capacity change from 0 to 16 [ 1219.939209][T18151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1220.009128][T18159] loop2: detected capacity change from 0 to 1024 [ 1220.027961][T18159] EXT4-fs (loop2): invalid first ino: 0 [ 1220.081600][T18150] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1220.137048][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1220.217260][T18171] binder_alloc: 18170: binder_alloc_buf, no vma [ 1220.274281][T18174] binder_alloc: 18173: pid 18173 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1220.361337][T18175] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5466'. [ 1221.198703][T18178] syz.8.5465[18178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1221.198792][T18178] syz.8.5465[18178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1221.619472][ T6915] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1221.639025][ T6914] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1221.829852][T12669] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1221.838639][ T6914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.848917][ T6915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.862114][ T6915] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1221.871331][ T6914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1221.881665][ T6914] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1221.890235][ T6915] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1221.898740][ T6914] usb 3-1: Product: syz [ 1221.902981][ T6915] usb 2-1: Product: syz [ 1221.907200][ T6914] usb 3-1: Manufacturer: syz [ 1221.913151][ T6915] usb 2-1: Manufacturer: syz [ 1221.917885][ T6914] usb 3-1: SerialNumber: syz [ 1221.922568][ T6915] usb 2-1: SerialNumber: syz [ 1221.928335][ T6914] usb 3-1: config 0 descriptor?? [ 1221.933605][ T6915] usb 2-1: config 0 descriptor?? [ 1221.942121][ T6914] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1221.951894][ T6915] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1222.009519][T12669] usb 10-1: Using ep0 maxpacket: 16 [ 1222.016277][T12669] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1222.026763][T12669] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1222.035984][T12669] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.044151][T12669] usb 10-1: Product: syz [ 1222.048430][T12669] usb 10-1: Manufacturer: syz [ 1222.053164][T12669] usb 10-1: SerialNumber: syz [ 1222.058970][T12669] usb 10-1: config 0 descriptor?? [ 1222.064965][T12669] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1222.072975][T12669] usb 10-1: Detected FT232R [ 1222.140670][T18174] binder: 18173:18174 ioctl 80104592 200000000280 returned -22 [ 1222.140946][T18171] binder: 18170:18171 ioctl 80104592 200000000280 returned -22 [ 1222.148661][T18174] binder_alloc: 18173: pid 18173 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1222.167354][T18171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.175840][T18174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.177368][T18171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.184597][T18174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.194760][ T6915] usb 2-1: USB disconnect, device number 32 [ 1222.201953][T17105] usb 3-1: USB disconnect, device number 44 [ 1222.326114][T18196] loop8: detected capacity change from 0 to 2048 [ 1222.379820][T18196] loop8: p1 < > p4 [ 1222.384229][T18196] loop8: p4 size 8388608 extends beyond EOD, truncated [ 1222.395862][T18196] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1222.495931][T12669] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1222.503566][T12669] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1222.511032][T12669] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1222.521009][T12669] usb 10-1: USB disconnect, device number 29 [ 1222.528108][T12669] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1222.537738][T12669] ftdi_sio 10-1:0.0: device disconnected [ 1222.578240][T18200] loop8: detected capacity change from 0 to 16 [ 1222.656517][T18200] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1222.748443][T18207] binder_alloc: 18204: pid 18204 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1222.771053][T18205] kvm: apic: phys broadcast and lowest prio [ 1222.824760][T18215] loop8: detected capacity change from 0 to 1024 [ 1222.831477][T18215] EXT4-fs: Ignoring removed bh option [ 1222.837190][T18215] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1222.851103][T18215] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1222.864791][T18214] syz.2.5482[18214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1222.864879][T18214] syz.2.5482[18214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1223.460974][T18226] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5485'. [ 1223.889446][T12669] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1223.911221][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1223.920035][T18228] loop2: detected capacity change from 0 to 2048 [ 1224.010263][T18228] loop2: p1 < > p4 [ 1224.014700][T18228] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1224.033188][T18228] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1224.102007][T12669] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.113860][T12669] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1224.129983][T12669] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1224.140060][T12669] usb 6-1: Product: syz [ 1224.144323][T12669] usb 6-1: Manufacturer: syz [ 1224.149305][T12669] usb 6-1: SerialNumber: syz [ 1224.154872][T12669] usb 6-1: config 0 descriptor?? [ 1224.163001][T12669] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1224.556819][T18207] binder: 18204:18207 ioctl 80104592 200000000280 returned -22 [ 1224.577514][T18207] binder_alloc: 18204: pid 18204 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1224.678899][T18244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.720778][T18244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.503882][T17105] usb 6-1: USB disconnect, device number 32 [ 1225.516702][T18246] binder_alloc: 18245: binder_alloc_buf, no vma [ 1225.623149][T18251] binder_alloc: 18249: pid 18249 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1225.706029][T18253] kvm: apic: phys broadcast and lowest prio [ 1225.789450][ T382] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1225.899446][ T6914] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1225.980555][ T382] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.000610][ T382] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1226.009906][ T382] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1226.018194][ T382] usb 10-1: Product: syz [ 1226.022579][ T382] usb 10-1: Manufacturer: syz [ 1226.027281][ T382] usb 10-1: SerialNumber: syz [ 1226.039727][ T382] usb 10-1: config 0 descriptor?? [ 1226.051619][ T382] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1226.071802][T18261] loop5: detected capacity change from 0 to 1024 [ 1226.078921][T18261] EXT4-fs (loop5): invalid first ino: 0 [ 1226.100563][ T6914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.129465][ T6914] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1226.138553][ T6914] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1226.146793][ T6914] usb 2-1: Product: syz [ 1226.151280][ T6914] usb 2-1: Manufacturer: syz [ 1226.155911][ T6914] usb 2-1: SerialNumber: syz [ 1226.167083][ T6914] usb 2-1: config 0 descriptor?? [ 1226.175159][ T6914] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1226.219123][T18264] loop2: detected capacity change from 0 to 2048 [ 1226.246283][T18246] binder: 18245:18246 ioctl 80104592 200000000280 returned -22 [ 1226.254784][T18246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.263411][T18246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.263689][T18264] loop2: p1 < > p4 [ 1226.272343][ T382] usb 10-1: USB disconnect, device number 30 [ 1226.275657][T18264] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1226.292695][T18268] syz.5.5497[18268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.292788][T18268] syz.5.5497[18268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.293364][T18264] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1226.374355][T18251] binder: 18249:18251 ioctl 80104592 200000000280 returned -22 [ 1226.382243][T18251] binder_alloc: 18249: pid 18249 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1226.394063][T18251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.402718][T18251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.411270][T12669] usb 2-1: USB disconnect, device number 33 [ 1227.349823][T18281] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5502'. [ 1229.815907][T18296] loop9: detected capacity change from 0 to 1024 [ 1229.832318][T18296] /dev/loop9: Can't open blockdev [ 1229.838732][T18288] loop1: detected capacity change from 0 to 2048 [ 1229.856843][T18288] EXT4-fs: Ignoring removed mblk_io_submit option [ 1230.101223][T18288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1230.168642][T18305] loop9: detected capacity change from 0 to 2048 [ 1230.206267][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1230.229947][T18305] loop9: p1 < > p4 [ 1230.269645][T18305] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1230.300882][T18305] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1230.461739][T18316] loop5: detected capacity change from 0 to 512 [ 1230.578320][T18316] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1230.587568][T18316] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5512: bg 0: block 248: padding at end of block bitmap is not set [ 1230.603634][T18316] Quota error (device loop5): write_blk: dquota write failed [ 1230.611509][T18316] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1230.621560][T18316] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5512: Failed to acquire dquot type 1 [ 1230.635204][T18316] EXT4-fs (loop5): 1 truncate cleaned up [ 1230.641695][T18316] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1230.671764][T18316] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.5512: deleted inode referenced: 12 [ 1230.829532][T12669] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1231.029514][T12669] usb 3-1: Using ep0 maxpacket: 16 [ 1231.036796][T12669] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1231.153369][T12669] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1231.258414][T18311] loop1: detected capacity change from 0 to 2048 [ 1231.286426][T12669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.306602][T12669] usb 3-1: Product: syz [ 1231.316725][T12669] usb 3-1: Manufacturer: syz [ 1231.341335][T18326] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1231.348968][T12669] usb 3-1: SerialNumber: syz [ 1231.370068][T12669] usb 3-1: config 0 descriptor?? [ 1231.379776][T18311] loop1: p1 < > p4 [ 1231.390730][T12669] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1231.398538][T18311] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1231.419773][T12669] usb 3-1: Detected FT232R [ 1231.533031][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1231.618747][T18325] syz.9.5515[18325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.618852][T18325] syz.9.5515[18325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.678377][T18332] loop5: detected capacity change from 0 to 1024 [ 1231.730766][T18332] EXT4-fs (loop5): invalid first ino: 0 [ 1231.748778][T18337] loop1: detected capacity change from 0 to 16 [ 1231.798359][T12669] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1231.809912][T12669] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1231.826027][T12669] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1231.827246][T18337] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1231.844181][T12669] usb 3-1: USB disconnect, device number 45 [ 1231.858208][T12669] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1231.875876][T18339] loop5: detected capacity change from 0 to 2048 [ 1231.889406][T12669] ftdi_sio 3-1:0.0: device disconnected [ 1231.890270][T18339] EXT4-fs: Ignoring removed mblk_io_submit option [ 1231.975168][T18339] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1232.031263][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1232.159281][T18351] loop1: detected capacity change from 0 to 2048 [ 1232.166235][T18351] EXT4-fs: Ignoring removed mblk_io_submit option [ 1232.449556][ T382] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1232.495430][T18351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1232.719497][ T382] usb 10-1: Using ep0 maxpacket: 16 [ 1232.727045][ T382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1232.843500][ T382] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1233.030425][ T382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.049833][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1233.069197][ T382] usb 10-1: Product: syz [ 1233.077250][ T382] usb 10-1: Manufacturer: syz [ 1233.089510][ T382] usb 10-1: SerialNumber: syz [ 1233.109889][ T382] usb 10-1: config 0 descriptor?? [ 1233.130469][ T382] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1233.157227][ T382] usb 10-1: Detected FT232R [ 1233.397939][T18376] loop8: detected capacity change from 0 to 512 [ 1233.582063][T18376] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1233.592554][T18376] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5527: bg 0: block 248: padding at end of block bitmap is not set [ 1233.608831][T18376] Quota error (device loop8): write_blk: dquota write failed [ 1233.616446][T18376] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1233.626486][T18376] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.5527: Failed to acquire dquot type 1 [ 1233.640915][T18376] EXT4-fs (loop8): 1 truncate cleaned up [ 1233.648129][T18376] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1233.677474][T18376] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.5527: deleted inode referenced: 12 [ 1234.477477][ T382] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1234.486221][ T382] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1234.494679][ T382] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1234.503693][ T382] usb 10-1: USB disconnect, device number 31 [ 1234.510543][ T382] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1234.520093][ T382] ftdi_sio 10-1:0.0: device disconnected [ 1234.531758][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1234.586712][T18383] kvm: vcpu 0: requested 197696 ns lapic timer period limited to 200000 ns [ 1234.608104][T18381] loop9: detected capacity change from 0 to 8192 [ 1234.636953][T18389] loop2: detected capacity change from 0 to 8192 [ 1234.644504][T18389] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1234.769071][T18400] fuse: Bad value for 'user_id' [ 1234.879483][ T353] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1235.059472][ T353] usb 6-1: Using ep0 maxpacket: 16 [ 1235.066994][ T353] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1235.079657][ T353] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1235.089221][ T353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.097413][ T353] usb 6-1: Product: syz [ 1235.102030][ T353] usb 6-1: Manufacturer: syz [ 1235.107449][ T353] usb 6-1: SerialNumber: syz [ 1235.116146][ T353] usb 6-1: config 0 descriptor?? [ 1235.126066][ T353] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1235.135500][ T353] usb 6-1: Detected FT232R [ 1235.557863][ T353] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1235.674438][ T353] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1235.701573][ T353] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1235.740304][ T353] usb 6-1: USB disconnect, device number 33 [ 1235.754934][T18413] loop2: detected capacity change from 0 to 2048 [ 1235.762076][ T353] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1235.789845][T18413] EXT4-fs: Ignoring removed mblk_io_submit option [ 1235.798024][ T353] ftdi_sio 6-1:0.0: device disconnected [ 1235.828393][T18413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1235.899097][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1235.960028][T18432] loop9: detected capacity change from 0 to 16 [ 1236.021028][T18436] kvm: vcpu 0: requested 197696 ns lapic timer period limited to 200000 ns [ 1236.041069][T18428] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1236.087849][T18439] loop8: detected capacity change from 0 to 512 [ 1236.100786][T18439] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1236.107957][T18439] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5545: bg 0: block 248: padding at end of block bitmap is not set [ 1236.123107][T18439] Quota error (device loop8): write_blk: dquota write failed [ 1236.130589][T18439] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1236.140702][T18439] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.5545: Failed to acquire dquot type 1 [ 1236.141682][T18442] fuse: Bad value for 'user_id' [ 1236.157515][T18439] EXT4-fs (loop8): 1 truncate cleaned up [ 1236.169855][T18439] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1236.181407][T18439] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.5545: deleted inode referenced: 12 [ 1236.429477][ T6914] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1237.502660][T18469] syz.2.5561[18469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.502748][T18469] syz.2.5561[18469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.559421][ T6914] usb 10-1: Using ep0 maxpacket: 16 [ 1237.574593][T18475] fuse: Bad value for 'user_id' [ 1237.577778][ T6914] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1237.600856][ T6914] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1237.610293][ T6914] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.618636][ T6914] usb 10-1: Product: syz [ 1237.622949][ T6914] usb 10-1: Manufacturer: syz [ 1237.627679][ T6914] usb 10-1: SerialNumber: syz [ 1237.634469][ T6914] usb 10-1: config 0 descriptor?? [ 1237.650110][ T6914] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1237.657991][ T6914] usb 10-1: Detected FT232R [ 1238.262662][ T6914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1238.269895][ T6914] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1238.279786][ T6914] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1238.300857][ T6914] usb 10-1: USB disconnect, device number 32 [ 1238.308216][ T6914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1238.336155][ T6914] ftdi_sio 10-1:0.0: device disconnected [ 1238.376797][T18494] loop5: detected capacity change from 0 to 16 [ 1238.482256][T18489] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1239.346152][T18504] fuse: Bad value for 'fd' [ 1239.409316][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1239.807268][T18529] kvm: apic: phys broadcast and lowest prio [ 1239.818814][T18532] binder_alloc: 18531: pid 18531 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1239.835128][T18525] syz.2.5581[18525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1239.835208][T18525] syz.2.5581[18525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1239.887540][T18540] fuse: Bad value for 'fd' [ 1240.037034][T18544] loop9: detected capacity change from 0 to 512 [ 1240.175951][T18544] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1240.184202][T18544] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1240.205612][T18544] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5589: deleted inode referenced: 12 [ 1240.457001][T18551] kvm: apic: phys broadcast and lowest prio [ 1241.779322][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1241.999428][ T353] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1242.019646][T18569] fuse: Bad value for 'fd' [ 1242.242101][T18587] loop9: detected capacity change from 0 to 512 [ 1242.440215][ T353] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.672873][T18587] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1242.681604][T18587] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1243.281636][ T6914] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1243.306865][T18590] binder: 18531:18590 ioctl 80104592 200000000280 returned -22 [ 1243.318828][T18590] binder_alloc: 18531: pid 18531 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1243.348702][T18590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.358667][T18590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.380880][T18587] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5603: deleted inode referenced: 12 [ 1243.816427][ T353] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1243.828984][ T353] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1243.841601][ T353] usb 2-1: Product: syz [ 1243.857005][ T353] usb 2-1: Manufacturer: syz [ 1243.873877][ T353] usb 2-1: SerialNumber: syz [ 1243.906683][T18595] loop2: detected capacity change from 0 to 16 [ 1243.939744][ T353] usb 2-1: config 0 descriptor?? [ 1243.950611][T18596] loop5: detected capacity change from 0 to 16 [ 1243.957809][ T353] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1244.057144][T18596] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1244.072484][T18595] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1244.152790][ T353] usb 2-1: USB disconnect, device number 34 [ 1244.177705][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1244.199467][ T6914] usb 9-1: Using ep0 maxpacket: 16 [ 1244.229865][ T6914] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1244.297222][ T6914] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1244.319138][ T6914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.368489][T18600] loop9: detected capacity change from 0 to 512 [ 1244.388603][ T6914] usb 9-1: Product: syz [ 1244.448531][T18600] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1244.457216][T18600] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1244.477185][T18600] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5607: deleted inode referenced: 12 [ 1244.544565][ T6914] usb 9-1: Manufacturer: syz [ 1244.600165][ T6914] usb 9-1: SerialNumber: syz [ 1244.713564][ T6914] usb 9-1: config 0 descriptor?? [ 1244.793111][ T6914] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1244.907426][ T6914] usb 9-1: Detected FT232R [ 1246.153479][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1246.287943][T18613] fuse: Bad value for 'fd' [ 1246.487457][ T6914] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1246.494633][ T6914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1246.502010][ T6914] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 1246.514824][ T6914] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1246.538269][ T6914] usb 9-1: USB disconnect, device number 9 [ 1246.550081][ T6914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1246.579669][ T6914] ftdi_sio 9-1:0.0: device disconnected [ 1246.627703][T18629] syz.9.5609[18629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.627795][T18629] syz.9.5609[18629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.799487][ T353] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1247.011279][ T353] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.032121][ T353] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1247.049419][ T353] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1247.067867][ T353] usb 2-1: Product: syz [ 1247.072136][ T353] usb 2-1: Manufacturer: syz [ 1247.076752][ T353] usb 2-1: SerialNumber: syz [ 1247.100164][ T353] usb 2-1: config 0 descriptor?? [ 1247.120378][ T353] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1247.214791][T18639] kvm: apic: phys broadcast and lowest prio [ 1247.292241][T18642] loop2: detected capacity change from 0 to 512 [ 1247.493064][T18642] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1247.502489][T18642] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5620: bg 0: block 248: padding at end of block bitmap is not set [ 1247.517785][T18642] Quota error (device loop2): write_blk: dquota write failed [ 1247.525414][T18642] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1247.535602][T18642] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.5620: Failed to acquire dquot type 1 [ 1247.549440][T18642] EXT4-fs (loop2): 1 truncate cleaned up [ 1247.556455][T18642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1247.584389][T18642] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.5620: deleted inode referenced: 12 [ 1247.668219][T18628] binder: 18627:18628 ioctl 80104592 200000000280 returned -22 [ 1247.814890][T18628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.929057][T18628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.118846][ T6914] usb 2-1: USB disconnect, device number 35 [ 1248.160013][T18647] loop9: detected capacity change from 0 to 2048 [ 1248.177813][T18652] fuse: Bad value for 'fd' [ 1248.231371][T18647] loop9: p1 < > p4 [ 1248.235748][T18647] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1248.275703][T18647] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1248.421314][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1248.567678][T18663] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5625'. [ 1248.848575][T18665] kvm: apic: phys broadcast and lowest prio [ 1248.849587][T18668] binder_alloc: 18666: pid 18666 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1248.922721][T18674] binder_alloc: 18673: pid 18673 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1248.969662][ T6914] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1249.139448][ T6915] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1249.159460][ T6914] usb 3-1: Using ep0 maxpacket: 16 [ 1249.165684][ T6914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1249.176688][ T6914] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1249.185816][ T6914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.193827][ T6914] usb 3-1: Product: syz [ 1249.197989][ T6914] usb 3-1: Manufacturer: syz [ 1249.199463][ T382] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1249.202631][ T6914] usb 3-1: SerialNumber: syz [ 1249.215691][ T6914] usb 3-1: config 0 descriptor?? [ 1249.221728][ T6914] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1249.229461][ T6914] usb 3-1: Detected FT232R [ 1249.320452][ T6915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.332080][ T6915] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1249.341208][ T6915] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1249.349472][ T6915] usb 2-1: Product: syz [ 1249.353670][ T6915] usb 2-1: Manufacturer: syz [ 1249.358534][ T6915] usb 2-1: SerialNumber: syz [ 1249.363704][ T6915] usb 2-1: config 0 descriptor?? [ 1249.371056][ T6915] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1249.400572][ T382] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.412346][ T382] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1249.421695][ T382] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1249.430032][ T382] usb 10-1: Product: syz [ 1249.434327][ T382] usb 10-1: Manufacturer: syz [ 1249.439116][ T382] usb 10-1: SerialNumber: syz [ 1249.444555][ T382] usb 10-1: config 0 descriptor?? [ 1249.451899][ T382] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1249.574171][T18668] binder: 18666:18668 ioctl 80104592 200000000280 returned -22 [ 1249.582111][T18668] binder_alloc: 18666: pid 18666 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1249.594030][T18668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.602563][T18668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.611322][T18676] loop8: detected capacity change from 0 to 16 [ 1249.611652][ T6915] usb 2-1: USB disconnect, device number 36 [ 1249.624715][ T6914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1249.632254][ T6914] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1249.639258][ T6914] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1249.657128][T18676] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1249.690943][T18674] binder: 18673:18674 ioctl 80104592 200000000280 returned -22 [ 1249.692099][ T6914] usb 3-1: USB disconnect, device number 46 [ 1249.702749][T18678] loop5: detected capacity change from 0 to 1024 [ 1249.705659][T18674] binder_alloc: 18673: pid 18673 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1249.711951][T18678] EXT4-fs (loop5): invalid first ino: 0 [ 1249.721495][ T6914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1249.741951][ T6914] ftdi_sio 3-1:0.0: device disconnected [ 1249.748986][T18674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.767667][T18674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.777220][ T414] usb 10-1: USB disconnect, device number 33 [ 1249.971957][T18687] loop5: detected capacity change from 0 to 512 [ 1249.987907][T18687] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1249.998587][T18687] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5637: bg 0: block 248: padding at end of block bitmap is not set [ 1250.014865][T18687] Quota error (device loop5): write_blk: dquota write failed [ 1250.022555][T18687] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1250.032734][T18687] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5637: Failed to acquire dquot type 1 [ 1250.046980][T18687] EXT4-fs (loop5): 1 truncate cleaned up [ 1250.053700][T18687] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1250.087156][T18687] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.5637: deleted inode referenced: 12 [ 1254.169162][T18710] loop2: detected capacity change from 0 to 2048 [ 1254.176435][T18710] EXT4-fs: Ignoring removed mblk_io_submit option [ 1254.193867][T18710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1254.240107][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1254.331345][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1254.398538][T18717] loop5: detected capacity change from 0 to 1024 [ 1254.405704][T18717] EXT4-fs (loop5): invalid first ino: 0 [ 1254.459043][T18723] binder_alloc: 18719: pid 18719 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1255.059532][T18727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5648'. [ 1255.949877][T18736] loop8: detected capacity change from 0 to 2048 [ 1255.956848][T18736] EXT4-fs: Ignoring removed mblk_io_submit option [ 1255.971227][T18736] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1255.989457][ T6914] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1255.998039][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1256.037767][T18745] loop1: detected capacity change from 0 to 2048 [ 1256.043439][T18743] loop8: detected capacity change from 0 to 8192 [ 1256.051620][T18743] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1256.070223][T18745] loop1: p1 < > p4 [ 1256.074409][T18745] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1256.088188][T18745] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1256.095858][ T6915] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1256.168052][T18749] fuse: Bad value for 'user_id' [ 1256.180477][ T6914] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.192650][ T6914] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1256.201893][ T6914] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1256.210594][ T6914] usb 10-1: Product: syz [ 1256.214893][ T6914] usb 10-1: Manufacturer: syz [ 1256.219819][ T6914] usb 10-1: SerialNumber: syz [ 1256.225238][ T6914] usb 10-1: config 0 descriptor?? [ 1256.232146][ T6914] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1256.279481][ T6915] usb 3-1: Using ep0 maxpacket: 16 [ 1256.288958][ T6915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1256.300310][ T6915] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1256.309698][ T6915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.317762][ T6915] usb 3-1: Product: syz [ 1256.322366][ T6915] usb 3-1: Manufacturer: syz [ 1256.342583][T18753] loop1: detected capacity change from 0 to 512 [ 1256.353444][ T6915] usb 3-1: SerialNumber: syz [ 1256.361667][ T6915] usb 3-1: config 0 descriptor?? [ 1256.371598][ T6915] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1256.380620][ T6915] usb 3-1: Detected FT232R [ 1256.395507][T18753] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1256.405509][T18753] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5657: bg 0: block 248: padding at end of block bitmap is not set [ 1256.421081][T18753] Quota error (device loop1): write_blk: dquota write failed [ 1256.428666][T18753] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1256.438775][T18753] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.5657: Failed to acquire dquot type 1 [ 1256.454951][T18753] EXT4-fs (loop1): 1 truncate cleaned up [ 1256.462163][T18753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1256.492552][T18753] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.5657: deleted inode referenced: 12 [ 1256.520131][T18723] binder: 18719:18723 ioctl 80104592 200000000280 returned -22 [ 1256.529698][T18723] binder_alloc: 18719: pid 18719 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1256.549788][T18723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.559158][T18723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.584664][ T6914] usb 10-1: USB disconnect, device number 34 [ 1256.784389][ T6915] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1256.796435][ T6915] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1256.805724][ T6915] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1256.817091][ T6915] usb 3-1: USB disconnect, device number 47 [ 1256.826734][ T6915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1256.837285][ T6915] ftdi_sio 3-1:0.0: device disconnected [ 1257.237058][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1257.279329][T18764] loop1: detected capacity change from 0 to 1024 [ 1257.286492][T18764] EXT4-fs (loop1): invalid first ino: 0 [ 1259.934473][T18778] loop2: detected capacity change from 0 to 2048 [ 1259.942180][T18778] EXT4-fs: Ignoring removed mblk_io_submit option [ 1259.977580][T18778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1260.019531][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1260.062794][T18795] loop2: detected capacity change from 0 to 1024 [ 1260.070172][T18795] EXT4-fs (loop2): invalid first ino: 0 [ 1260.123807][T18799] binder_alloc: 18798: pid 18798 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1260.206325][T18801] loop1: detected capacity change from 0 to 512 [ 1260.362941][T18801] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1260.374794][T18801] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5670: bg 0: block 248: padding at end of block bitmap is not set [ 1260.390412][T18801] Quota error (device loop1): write_blk: dquota write failed [ 1260.398215][T18801] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1260.408414][T18801] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.5670: Failed to acquire dquot type 1 [ 1260.422355][T18801] EXT4-fs (loop1): 1 truncate cleaned up [ 1260.429438][T18801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1260.456486][ T414] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1260.464580][T18801] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.5670: deleted inode referenced: 12 [ 1260.691399][ T414] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.712377][ T414] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1260.739815][ T414] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1260.824400][ T414] usb 6-1: Product: syz [ 1260.846082][ T414] usb 6-1: Manufacturer: syz [ 1260.874886][ T414] usb 6-1: SerialNumber: syz [ 1261.227531][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1261.227556][ T414] usb 6-1: config 0 descriptor?? [ 1261.241983][ T414] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1261.441458][T18799] binder: 18798:18799 ioctl 80104592 200000000280 returned -22 [ 1261.451047][T18799] binder_alloc: 18798: pid 18798 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1261.467541][T18799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.476721][T18799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.488771][ T382] usb 6-1: USB disconnect, device number 34 [ 1261.554535][ T353] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1261.742302][ T353] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.774027][ T353] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1261.824830][ T353] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1261.868889][ T353] usb 2-1: Product: syz [ 1261.892074][ T353] usb 2-1: Manufacturer: syz [ 1261.918046][ T353] usb 2-1: SerialNumber: syz [ 1261.950426][ T353] usb 2-1: config 0 descriptor?? [ 1262.030238][ T353] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1262.494618][T18812] binder: 18811:18812 ioctl 80104592 200000000280 returned -22 [ 1262.507437][T18812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.516174][T18812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.525369][ T6914] usb 2-1: USB disconnect, device number 37 [ 1263.041361][T18826] loop2: detected capacity change from 0 to 1024 [ 1263.051715][T18826] EXT4-fs: Ignoring removed bh option [ 1263.078809][T18826] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1264.076961][ T414] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1264.142850][T18826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1265.056128][T18832] loop5: detected capacity change from 0 to 2048 [ 1265.063606][T18832] EXT4-fs: Ignoring removed mblk_io_submit option [ 1265.077378][ T414] usb 10-1: device descriptor read/all, error -71 [ 1265.087056][T18832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1265.107616][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1265.159515][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1265.203927][T18852] kvm: apic: phys broadcast and lowest prio [ 1265.229999][T18847] loop2: detected capacity change from 0 to 2048 [ 1265.312478][T18856] loop9: detected capacity change from 0 to 512 [ 1265.325132][T18847] loop2: p1 < > p4 [ 1265.331690][T18847] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1265.543174][T18856] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1265.551644][T18856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1265.573420][T18856] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5685: deleted inode referenced: 12 [ 1265.589287][T18847] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1271.289919][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1271.715575][T18873] loop1: detected capacity change from 0 to 1024 [ 1271.730839][T18873] EXT4-fs: Ignoring removed bh option [ 1271.749121][T18873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1271.988068][T18873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1272.881839][T18880] loop5: detected capacity change from 0 to 16 [ 1272.921381][T18884] loop8: detected capacity change from 0 to 1024 [ 1272.970149][T18884] EXT4-fs (loop8): invalid first ino: 0 [ 1273.178594][T18889] loop9: detected capacity change from 0 to 1024 [ 1273.185345][T18889] EXT4-fs: Ignoring removed bh option [ 1273.190819][T18889] /dev/loop9: Can't open blockdev [ 1274.181674][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1274.298935][T18891] loop1: detected capacity change from 0 to 2048 [ 1274.326113][T18891] EXT4-fs: Ignoring removed mblk_io_submit option [ 1274.389879][T18891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1274.399649][T18879] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1274.442147][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1274.469899][T18901] kvm: apic: phys broadcast and lowest prio [ 1274.487122][T18899] kvm: apic: phys broadcast and lowest prio [ 1274.813555][T18914] loop5: detected capacity change from 0 to 512 [ 1275.692636][T18912] loop1: detected capacity change from 0 to 1024 [ 1275.699440][T18912] EXT4-fs: Ignoring removed bh option [ 1275.711088][T18912] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1275.732437][T18914] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1275.743210][T18914] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5700: bg 0: block 248: padding at end of block bitmap is not set [ 1275.759853][T18914] Quota error (device loop5): write_blk: dquota write failed [ 1275.767548][T18914] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1275.777637][T18914] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5700: Failed to acquire dquot type 1 [ 1275.793591][T18914] EXT4-fs (loop5): 1 truncate cleaned up [ 1275.800555][T18914] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1275.846408][T18914] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.5700: deleted inode referenced: 12 [ 1275.967418][T18912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1276.109722][T18921] binder_alloc: 18920: pid 18920 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1276.565471][T18922] syz.9.5699[18922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.565562][T18922] syz.9.5699[18922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.581926][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1276.607168][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1276.990025][T18936] loop5: detected capacity change from 0 to 16 [ 1276.999488][T18930] loop9: detected capacity change from 0 to 2048 [ 1277.009526][ T414] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1277.053304][T18930] loop9: p1 < > p4 [ 1277.073532][T18930] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1277.105490][T18936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1277.211903][ T414] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.260969][T18930] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1277.264147][ T414] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1277.344697][ T414] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1277.374344][ T414] usb 3-1: Product: syz [ 1277.388307][ T414] usb 3-1: Manufacturer: syz [ 1277.403360][ T414] usb 3-1: SerialNumber: syz [ 1277.423772][ T414] usb 3-1: config 0 descriptor?? [ 1277.467969][ T414] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1277.736330][T18947] loop9: detected capacity change from 0 to 2048 [ 1277.753673][T18921] binder: 18920:18921 ioctl 80104592 200000000280 returned -22 [ 1277.762978][T18946] loop5: detected capacity change from 0 to 2048 [ 1277.763298][T18921] binder_alloc: 18920: pid 18920 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1277.779853][T18946] EXT4-fs: Ignoring removed mblk_io_submit option [ 1277.785570][T18921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.795742][T18921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.811334][T12927] usb 3-1: USB disconnect, device number 48 [ 1277.820655][T18947] loop9: p1 < > p4 [ 1277.826375][T18947] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1277.870576][T18946] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1277.879504][T18947] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1278.057373][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1278.146683][T18956] kvm: apic: phys broadcast and lowest prio [ 1279.755564][T18970] loop9: detected capacity change from 0 to 1024 [ 1279.762477][T18970] EXT4-fs: Ignoring removed bh option [ 1279.767987][T18970] /dev/loop9: Can't open blockdev [ 1279.948773][T18973] loop1: detected capacity change from 0 to 512 [ 1281.280350][T18972] loop5: detected capacity change from 0 to 1024 [ 1281.287108][T18972] EXT4-fs: Ignoring removed bh option [ 1281.851997][T18972] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1281.891821][T18973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1281.904799][T18973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5715: bg 0: block 248: padding at end of block bitmap is not set [ 1281.921507][T18973] Quota error (device loop1): write_blk: dquota write failed [ 1281.929283][T18973] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1281.939515][T18973] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.5715: Failed to acquire dquot type 1 [ 1282.175546][T18973] EXT4-fs (loop1): 1 truncate cleaned up [ 1282.220631][T18973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1282.569122][T18972] EXT4-fs: error -4 creating inode table initialization thread [ 1282.576956][T18972] EXT4-fs (loop5): mount failed [ 1282.581987][T18971] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.5715: deleted inode referenced: 12 [ 1282.622250][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1282.716888][T18989] loop1: detected capacity change from 0 to 16 [ 1282.801040][T18994] loop2: detected capacity change from 0 to 2048 [ 1282.818180][T18989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1282.859774][T18994] EXT4-fs: Ignoring removed mblk_io_submit option [ 1282.959916][T18994] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1283.049830][T19001] kvm: apic: phys broadcast and lowest prio [ 1283.066347][T19004] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5718'. [ 1283.081249][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1283.194254][T19009] loop5: detected capacity change from 0 to 8192 [ 1283.217664][T19009] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1283.229025][T19016] binder: BINDER_SET_CONTEXT_MGR already set [ 1283.241716][T19016] binder: 19015:19016 ioctl 4018620d 200000000040 returned -16 [ 1283.353122][T19024] fuse: Bad value for 'user_id' [ 1283.403138][T19022] loop2: detected capacity change from 0 to 2048 [ 1283.449851][T19022] loop2: p1 < > p4 [ 1283.456271][T19022] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1283.493289][T19022] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1283.529431][T12669] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1283.635129][T19026] syz.8.5716[19026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1283.635211][T19026] syz.8.5716[19026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1283.720564][T12669] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.750887][T12669] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1283.760985][T12669] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1283.769222][T12669] usb 2-1: Product: syz [ 1283.773470][T12669] usb 2-1: Manufacturer: syz [ 1283.778095][T12669] usb 2-1: SerialNumber: syz [ 1283.783268][T12669] usb 2-1: config 0 descriptor?? [ 1283.790201][T12669] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1284.151365][T19016] binder: 19015:19016 ioctl 80104592 200000000280 returned -22 [ 1284.299619][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.369498][T19034] binder_alloc: 19033: pid 19033 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1284.381770][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.453048][T12927] usb 2-1: USB disconnect, device number 38 [ 1284.750799][T19041] loop9: detected capacity change from 0 to 16 [ 1284.779538][ T353] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1284.970436][ T353] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.985419][T19043] loop8: detected capacity change from 0 to 2048 [ 1284.992584][T19043] EXT4-fs: Ignoring removed mblk_io_submit option [ 1284.999862][ T353] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1285.009221][ T353] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1285.018513][T19045] kvm: apic: phys broadcast and lowest prio [ 1285.039605][ T353] usb 6-1: Product: syz [ 1285.043823][ T353] usb 6-1: Manufacturer: syz [ 1285.058078][ T353] usb 6-1: SerialNumber: syz [ 1285.072116][ T353] usb 6-1: config 0 descriptor?? [ 1285.094896][ T353] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1285.128936][T19043] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1285.449943][T19034] binder: 19033:19034 ioctl 80104592 200000000280 returned -22 [ 1285.468896][T19034] binder_alloc: 19033: pid 19033 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1285.527238][T19035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.550318][T19035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.610055][ T353] usb 6-1: USB disconnect, device number 35 [ 1286.530003][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1286.589068][T19075] loop5: detected capacity change from 0 to 8192 [ 1286.618935][T19075] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1286.769009][T19084] fuse: Bad value for 'user_id' [ 1286.799632][T19074] syz.2.5747[19074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1286.799716][T19074] syz.2.5747[19074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1287.828768][T19092] loop5: detected capacity change from 0 to 16 [ 1288.062156][T19097] loop1: detected capacity change from 0 to 8192 [ 1288.075729][T19097] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1288.111709][T19107] binder_alloc: 19106: pid 19106 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1288.203995][T19111] fuse: Bad value for 'user_id' [ 1288.329464][ T353] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1288.389472][ T414] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1288.527851][ T353] usb 10-1: Using ep0 maxpacket: 16 [ 1288.591861][T19122] loop5: detected capacity change from 0 to 1024 [ 1288.600346][T19122] EXT4-fs: Ignoring removed bh option [ 1288.615505][T19122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1288.698306][T19122] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1288.961065][ T414] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.843348][ T353] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1289.862908][ T414] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1289.863870][ T353] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1289.876933][ T414] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1289.890369][ T414] usb 9-1: Product: syz [ 1289.891129][T19126] binder: BINDER_SET_CONTEXT_MGR already set [ 1289.894873][ T414] usb 9-1: Manufacturer: syz [ 1289.902494][ T353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.907113][ T414] usb 9-1: SerialNumber: syz [ 1289.915592][T19128] binder: BINDER_SET_CONTEXT_MGR already set [ 1289.918696][T19126] binder: 19125:19126 ioctl 4018620d 200000000040 returned -16 [ 1289.924567][ T353] usb 10-1: Product: syz [ 1289.936194][T19128] binder: 19127:19128 ioctl 4018620d 200000000040 returned -16 [ 1289.947377][ T353] usb 10-1: Manufacturer: syz [ 1289.952246][ T353] usb 10-1: SerialNumber: syz [ 1289.957847][ T353] usb 10-1: config 0 descriptor?? [ 1289.964174][ T353] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1289.964781][ T414] usb 9-1: config 0 descriptor?? [ 1289.973175][ T353] usb 10-1: Detected FT232R [ 1289.982500][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1289.989553][ T414] snd-usb-audio: probe of 9-1:0.0 failed with error -22 [ 1290.192780][T19107] binder: 19106:19107 ioctl 80104592 200000000280 returned -22 [ 1290.201019][T19107] binder_alloc: 19106: pid 19106 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1290.213303][T19107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.221838][T19107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.239444][T17105] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1290.247106][T12927] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1290.256232][ T311] usb 9-1: USB disconnect, device number 10 [ 1290.299429][ T382] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1290.366402][ T353] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1290.373666][ T353] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1290.380792][ T353] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1290.390242][ T353] usb 10-1: USB disconnect, device number 37 [ 1290.396710][ T353] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1290.406161][ T353] ftdi_sio 10-1:0.0: device disconnected [ 1290.449478][ T382] usb 6-1: device descriptor read/64, error -71 [ 1290.457155][T17105] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.467353][T12927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.483703][T12927] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1290.493118][T17105] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1290.502205][T17105] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1290.510428][T12927] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1290.518614][T12927] usb 2-1: Product: syz [ 1290.522869][T17105] usb 3-1: Product: syz [ 1290.527052][T17105] usb 3-1: Manufacturer: syz [ 1290.531677][T12927] usb 2-1: Manufacturer: syz [ 1290.536281][T12927] usb 2-1: SerialNumber: syz [ 1290.540933][T17105] usb 3-1: SerialNumber: syz [ 1290.546377][T17105] usb 3-1: config 0 descriptor?? [ 1290.551598][T12927] usb 2-1: config 0 descriptor?? [ 1290.559507][T17105] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1290.568167][T12927] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1290.719454][ T382] usb 6-1: device descriptor read/64, error -71 [ 1290.768747][T19128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.777408][T19128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.786747][T12669] usb 3-1: USB disconnect, device number 49 [ 1290.795072][T19126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.803724][T19126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.814476][ T353] usb 2-1: USB disconnect, device number 39 [ 1291.011445][ T382] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1291.919506][ T382] usb 6-1: device descriptor read/64, error -71 [ 1292.069622][T19144] kvm: apic: phys broadcast and lowest prio [ 1292.170922][T19150] loop1: detected capacity change from 0 to 16 [ 1292.399459][T12669] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1292.430638][T19157] loop8: detected capacity change from 0 to 2048 [ 1292.467699][T19157] loop8: p1 < > p4 [ 1292.474649][T19166] loop1: detected capacity change from 0 to 2048 [ 1292.481870][T19166] EXT4-fs: Ignoring removed mblk_io_submit option [ 1292.492703][T19157] loop8: p4 size 8388608 extends beyond EOD, truncated [ 1292.556747][T19171] loop9: detected capacity change from 0 to 512 [ 1292.589473][T12669] usb 3-1: Using ep0 maxpacket: 16 [ 1292.596280][T12669] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1292.618014][T12669] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1292.645485][T19166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1292.654569][T12669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.667408][T19171] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1292.675581][T19171] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1292.694866][T19171] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5773: deleted inode referenced: 12 [ 1292.723272][T12669] usb 3-1: Product: syz [ 1292.729960][T19170] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1292.759399][T12669] usb 3-1: Manufacturer: syz [ 1292.781538][T12669] usb 3-1: SerialNumber: syz [ 1292.788175][T19170] EXT4-fs (loop1): Remounting filesystem read-only [ 1292.817733][T12669] usb 3-1: config 0 descriptor?? [ 1292.850012][T12669] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1292.889177][T12669] usb 3-1: Detected FT232R [ 1292.933098][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1293.069452][T12669] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1293.091346][T12669] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1293.166074][T12669] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1293.224878][T12669] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1293.350818][T12669] usb 3-1: USB disconnect, device number 50 [ 1293.379326][T12669] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1293.409293][T12669] ftdi_sio 3-1:0.0: device disconnected [ 1293.548458][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1293.582862][T19157] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1293.609443][ T382] usb 6-1: device descriptor read/64, error -71 [ 1293.720925][T19190] kvm: apic: phys broadcast and lowest prio [ 1293.729517][ T382] usb usb6-port1: attempt power cycle [ 1293.788066][T19184] loop1: detected capacity change from 0 to 2048 [ 1293.849574][T12669] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1293.869846][T19184] loop1: p1 < > p4 [ 1293.874451][T19184] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1294.065810][T19184] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1294.144288][T12669] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.056794][T12669] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1295.069410][T12669] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1295.077751][T12669] usb 10-1: Product: syz [ 1295.082194][T12669] usb 10-1: Manufacturer: syz [ 1295.086953][T12669] usb 10-1: SerialNumber: syz [ 1295.095646][T12669] usb 10-1: config 0 descriptor?? [ 1295.110105][T12669] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1295.118122][T19201] loop2: detected capacity change from 0 to 16 [ 1295.303724][T19183] binder: 19181:19183 ioctl 80104592 200000000280 returned -22 [ 1295.322984][T19183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.341127][T19183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.360532][T12669] usb 10-1: USB disconnect, device number 38 [ 1295.367973][T19210] loop2: detected capacity change from 0 to 2048 [ 1295.390565][T19211] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5786'. [ 1295.409952][T19210] EXT4-fs: Ignoring removed mblk_io_submit option [ 1295.472409][T19210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1295.497612][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1295.576164][ T28] audit: type=1400 audit(2000000141.630:4610): avc: denied { execute_no_trans } for pid=19212 comm="syz.1.5789" path="/386/file0" dev="tmpfs" ino=2230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1295.993867][T19227] loop9: detected capacity change from 0 to 512 [ 1296.010714][T19227] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 1296.019022][T19227] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1296.038483][T19227] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5792: deleted inode referenced: 12 [ 1297.841652][T12199] EXT4-fs (loop9): unmounting filesystem. [ 1298.121943][T19241] syz.2.5791[19241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1298.122332][T19241] syz.2.5791[19241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1298.258254][T19245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5796'. [ 1298.943345][T19249] loop5: detected capacity change from 0 to 2048 [ 1299.020069][T19249] loop5: p1 < > p4 [ 1299.024534][T19249] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1299.068657][T19249] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1299.091759][T19253] loop2: detected capacity change from 0 to 16 [ 1299.267463][T19255] loop9: detected capacity change from 0 to 2048 [ 1299.390407][T19255] loop9: p1 < > p4 [ 1299.394816][T19255] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1299.456806][T19255] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1299.520788][T19265] loop2: detected capacity change from 0 to 1024 [ 1299.530308][T19265] EXT4-fs: Ignoring removed bh option [ 1299.538747][T19265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1299.709549][ T305] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1299.746899][T19265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1299.921752][ T305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.967291][ T305] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1300.006689][ T305] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1300.060609][ T305] usb 6-1: Product: syz [ 1300.090633][ T305] usb 6-1: Manufacturer: syz [ 1300.123814][ T305] usb 6-1: SerialNumber: syz [ 1300.165011][ T305] usb 6-1: config 0 descriptor?? [ 1300.343423][ T305] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1300.491446][T19273] loop9: detected capacity change from 0 to 16 [ 1300.542091][T19262] binder: 19260:19262 ioctl 80104592 200000000280 returned -22 [ 1300.576769][T19273] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1301.352402][T19282] loop1: detected capacity change from 0 to 512 [ 1301.439852][T10447] EXT4-fs (loop2): unmounting filesystem. [ 1301.461052][T19282] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1301.470894][T19282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5806: bg 0: block 248: padding at end of block bitmap is not set [ 1301.486419][T19282] Quota error (device loop1): write_blk: dquota write failed [ 1301.494049][T19282] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1301.504093][T19282] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.5806: Failed to acquire dquot type 1 [ 1301.517814][T19282] EXT4-fs (loop1): 1 truncate cleaned up [ 1301.524438][T19282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1301.596767][T19282] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.5806: deleted inode referenced: 12 [ 1301.624926][T19262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.694665][T19262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.079654][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1302.109314][ T305] usb 6-1: USB disconnect, device number 39 [ 1302.115302][T19290] binder_alloc: 19288: pid 19288 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1302.382614][T19294] syz.9.5810[19294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1302.382714][T19294] syz.9.5810[19294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1302.439402][ T414] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1302.660501][ T414] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.677693][ T414] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1302.696831][ T414] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1302.721992][ T414] usb 2-1: Product: syz [ 1302.731735][ T414] usb 2-1: Manufacturer: syz [ 1302.740762][ T414] usb 2-1: SerialNumber: syz [ 1302.751499][ T414] usb 2-1: config 0 descriptor?? [ 1303.012101][T19290] binder: 19288:19290 ioctl 80104592 200000000280 returned -22 [ 1303.088845][T19292] binder_alloc: 19288: pid 19288 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1303.314691][T19290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.425995][T19290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.789927][ T414] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1303.799774][ T414] usb 2-1: USB disconnect, device number 40 [ 1303.841708][T19303] loop9: detected capacity change from 0 to 2048 [ 1303.889851][T19303] loop9: p1 < > p4 [ 1303.894625][T19303] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1303.932491][T19303] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1304.448159][T19327] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5817'. [ 1305.340545][ T414] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1305.413728][T19332] kvm: apic: phys broadcast and lowest prio [ 1305.539416][ T414] usb 2-1: Using ep0 maxpacket: 16 [ 1305.545712][ T414] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1305.557227][ T414] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1305.567902][T19337] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.579362][T19337] binder: 19336:19337 ioctl 4018620d 200000000040 returned -16 [ 1305.589394][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.597410][ T414] usb 2-1: Product: syz [ 1305.619383][ T414] usb 2-1: Manufacturer: syz [ 1305.624044][ T414] usb 2-1: SerialNumber: syz [ 1305.629510][ T414] usb 2-1: config 0 descriptor?? [ 1305.650065][ T414] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1305.657841][ T414] usb 2-1: Detected FT232R [ 1305.837824][ T414] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1305.845618][ T414] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1305.859807][ T414] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1305.866966][ T414] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1305.877747][ T414] usb 2-1: USB disconnect, device number 41 [ 1305.884384][ T414] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1305.894083][ T414] ftdi_sio 2-1:0.0: device disconnected [ 1305.899820][ T305] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1305.955459][T19338] syz.8.5822[19338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1305.955546][T19338] syz.8.5822[19338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1307.168617][T19352] loop1: detected capacity change from 0 to 2048 [ 1307.190562][ T305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.299986][T19352] loop1: p1 < > p4 [ 1307.304455][T19352] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1307.310617][ T305] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1307.320805][ T305] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1307.329098][ T305] usb 6-1: Product: syz [ 1307.333586][ T305] usb 6-1: Manufacturer: syz [ 1307.338203][ T305] usb 6-1: SerialNumber: syz [ 1307.344405][ T305] usb 6-1: config 0 descriptor?? [ 1307.489476][ T28] audit: type=1400 audit(2000000153.460:4611): avc: denied { bind } for pid=19349 comm="syz.2.5827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1307.633394][ T305] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1307.718963][T19352] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1307.775838][T19372] loop9: detected capacity change from 0 to 1024 [ 1307.782619][T19372] EXT4-fs: Ignoring removed bh option [ 1307.788098][T19372] /dev/loop9: Can't open blockdev [ 1307.833957][T19337] binder: 19336:19337 ioctl 80104592 200000000280 returned -22 [ 1307.842655][T19337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.863727][T19337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.880108][ T305] usb 6-1: USB disconnect, device number 40 [ 1307.894826][T19370] kvm: apic: phys broadcast and lowest prio [ 1308.065869][T19378] loop2: detected capacity change from 0 to 16 [ 1309.547931][T19399] loop5: detected capacity change from 0 to 512 [ 1309.559149][T19399] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1309.569100][T19399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 1309.577900][T19399] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.5842: corrupted in-inode xattr [ 1309.590776][T19399] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.5842: couldn't read orphan inode 15 (err -117) [ 1309.603236][T19399] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1309.614182][ T28] audit: type=1326 audit(2000000155.670:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.638692][T12779] EXT4-fs (loop5): unmounting filesystem. [ 1309.645096][ T28] audit: type=1326 audit(2000000155.670:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.668885][ T28] audit: type=1326 audit(2000000155.670:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.693575][ T28] audit: type=1326 audit(2000000155.670:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.731575][ T28] audit: type=1326 audit(2000000155.670:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.758261][ T28] audit: type=1326 audit(2000000155.670:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.782343][ T28] audit: type=1326 audit(2000000155.670:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.806382][ T28] audit: type=1326 audit(2000000155.670:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.830154][ T28] audit: type=1326 audit(2000000155.670:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cf038e929 code=0x7ffc0000 [ 1309.857337][T19410] syz.8.5841[19410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1309.857420][T19410] syz.8.5841[19410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1309.888663][T19409] loop5: detected capacity change from 0 to 2048 [ 1309.959948][T19409] loop5: p1 < > p4 [ 1309.964360][T19409] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1309.976841][T19409] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1310.089237][T19416] binder_alloc: 19415: pid 19415 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1310.339520][T19418] binder_alloc: 19417: pid 19417 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1310.369442][ T353] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1310.460071][T19423] loop8: detected capacity change from 0 to 1024 [ 1310.470210][T19423] EXT4-fs: Ignoring removed bh option [ 1310.476370][T19423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1310.491137][T19423] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1310.572500][ T353] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.586566][ T353] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1310.632173][T12927] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1310.640568][ T353] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1310.649980][ T353] usb 6-1: Product: syz [ 1310.654535][ T353] usb 6-1: Manufacturer: syz [ 1310.659467][ T353] usb 6-1: SerialNumber: syz [ 1310.683664][ T353] usb 6-1: config 0 descriptor?? [ 1310.708132][ T353] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1310.842320][T12927] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.857289][T12927] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1310.867606][T12927] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1310.876168][T12927] usb 10-1: Product: syz [ 1310.881253][T12927] usb 10-1: Manufacturer: syz [ 1310.886231][T12927] usb 10-1: SerialNumber: syz [ 1310.924232][T12927] usb 10-1: config 0 descriptor?? [ 1310.941111][T19416] binder: 19415:19416 ioctl 80104592 200000000280 returned -22 [ 1310.952447][T19416] binder_alloc: 19415: pid 19415 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1311.040434][T12927] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1311.075792][T19416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.114535][T19416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.160283][T12927] usb 6-1: USB disconnect, device number 41 [ 1311.348626][T19418] binder: 19417:19418 ioctl 80104592 200000000280 returned -22 [ 1311.357555][T19418] binder_alloc: 19417: pid 19417 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1311.370519][T19418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.379280][T19418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.388728][ T353] usb 10-1: USB disconnect, device number 39 [ 1311.403663][T17084] EXT4-fs (loop8): unmounting filesystem. [ 1311.589255][T19444] loop2: detected capacity change from 0 to 2048 [ 1311.599566][T19441] kvm: apic: phys broadcast and lowest prio [ 1311.629807][T19444] loop2: p1 < > p4 [ 1311.636853][T19444] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1311.672427][T19444] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1311.731080][T19450] loop8: detected capacity change from 0 to 16 [ 1311.966741][T19458] loop9: detected capacity change from 0 to 16 [ 1311.990828][T19457] syz.2.5860[19457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1311.990911][T19457] syz.2.5860[19457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1312.029456][ T353] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1312.056277][T19463] loop1: detected capacity change from 0 to 1024 [ 1312.063262][T19463] EXT4-fs: Ignoring removed bh option [ 1312.069014][T19463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1312.100554][T19463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1312.289418][ T353] usb 6-1: Using ep0 maxpacket: 16 [ 1312.295866][ T353] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1312.306683][ T353] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1312.315921][ T353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.324617][ T353] usb 6-1: Product: syz [ 1312.329379][ T353] usb 6-1: Manufacturer: syz [ 1312.334642][ T353] usb 6-1: SerialNumber: syz [ 1312.345621][ T353] usb 6-1: config 0 descriptor?? [ 1312.358246][ T353] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1312.368483][ T353] usb 6-1: Detected FT232R [ 1312.671430][ T353] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1312.704002][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1312.719167][ T353] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 1312.762193][ T353] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1312.797154][ T353] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1312.856914][ T353] usb 6-1: USB disconnect, device number 42 [ 1312.900121][ T353] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1313.025115][T12531] EXT4-fs (loop1): unmounting filesystem. [ 1313.168074][ T353] ftdi_sio 6-1:0.0: device disconnected [ 1313.373090][T19485] binder_alloc: 19482: pid 19482 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1313.537497][T19497] loop5: detected capacity change from 0 to 2048 [ 1313.544715][T19497] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1313.669559][ T353] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1313.880517][ T353] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.901665][ T353] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1313.916143][ T353] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1313.924723][ T353] usb 10-1: Product: syz [ 1313.929061][ T353] usb 10-1: Manufacturer: syz [ 1313.933849][ T353] usb 10-1: SerialNumber: syz [ 1313.939403][ T353] usb 10-1: config 0 descriptor?? [ 1313.946807][ T353] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 1314.146593][T19485] binder: 19482:19485 ioctl 80104592 200000000280 returned -22 [ 1314.154439][T19485] binder_alloc: 19482: pid 19482 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1314.166011][T19485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.174529][T19485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.183617][ T353] usb 10-1: USB disconnect, device number 40 [ 1314.269132][T12531] ------------[ cut here ]------------ [ 1314.274684][T12531] WARNING: CPU: 0 PID: 12531 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 1314.282837][T12531] Modules linked in: [ 1314.286936][T12531] CPU: 0 PID: 12531 Comm: syz-executor Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 1314.297276][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1314.307366][T12531] RIP: 0010:drop_nlink+0xc5/0x110 [ 1314.312576][T12531] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 eb f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b 8f ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1314.332501][T12531] RSP: 0018:ffffc90001e67c38 EFLAGS: 00010293 [ 1314.338622][T12531] RAX: ffffffff81c367d5 RBX: ffff8881958d5368 RCX: ffff888130cb2880 [ 1314.346626][T12531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1314.354758][T12531] RBP: ffffc90001e67c60 R08: 0000000000000004 R09: 0000000000000003 [ 1314.362880][T12531] R10: fffff520003ccf78 R11: 1ffff920003ccf78 R12: dffffc0000000000 [ 1314.371000][T12531] R13: 1ffff11032b1aa76 R14: ffff8881958d53b0 R15: 0000000000000000 [ 1314.378992][T12531] FS: 000055556e2bb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1314.387980][T12531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1314.394598][T12531] CR2: 000055556e2de4e8 CR3: 000000012ffaa000 CR4: 00000000003506b0 [ 1314.403003][T12531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1314.411062][T12531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1314.419451][T12531] Call Trace: [ 1314.422754][T12531] [ 1314.425703][T12531] shmem_rmdir+0x5b/0x90 [ 1314.430002][T12531] vfs_rmdir+0x393/0x500 [ 1314.434277][T12531] incfs_kill_sb+0x105/0x220 [ 1314.438886][T12531] deactivate_locked_super+0xb5/0x120 [ 1314.444316][T12531] deactivate_super+0xaf/0xe0 [ 1314.449232][T12531] cleanup_mnt+0x45f/0x4e0 [ 1314.453884][T12531] __cleanup_mnt+0x19/0x20 [ 1314.458357][T12531] task_work_run+0x1db/0x240 [ 1314.462969][T12531] ? __cfi_task_work_run+0x10/0x10 [ 1314.468085][T12531] ? __x64_sys_umount+0x125/0x160 [ 1314.473156][T12531] ? __cfi___x64_sys_umount+0x10/0x10 [ 1314.478548][T12531] exit_to_user_mode_loop+0x9b/0xb0 [ 1314.483936][T12531] exit_to_user_mode_prepare+0x5a/0xa0 [ 1314.489443][T12531] syscall_exit_to_user_mode+0x1a/0x30 [ 1314.494917][T12531] do_syscall_64+0x58/0xa0 [ 1314.499393][T12531] ? clear_bhb_loop+0x30/0x80 [ 1314.504078][T12531] ? clear_bhb_loop+0x30/0x80 [ 1314.508780][T12531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1314.514721][T12531] RIP: 0033:0x7f1cf2f8fc57 [ 1314.519140][T12531] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1314.538766][T12531] RSP: 002b:00007fff965d34d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1314.547217][T12531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1cf2f8fc57 [ 1314.555236][T12531] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff965d3590 [ 1314.563232][T12531] RBP: 00007fff965d3590 R08: 0000000000000000 R09: 0000000000000000 [ 1314.571231][T12531] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff965d4620 [ 1314.579212][T12531] R13: 00007f1cf3010925 R14: 0000000000140dba R15: 00007fff965d4660 [ 1314.587213][T12531] [ 1314.590246][T12531] ---[ end trace 0000000000000000 ]--- [ 1314.595916][T12531] ================================================================== [ 1314.604000][T12531] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1314.610243][T12531] Write of size 4 at addr 0000000000000170 by task syz-executor/12531 [ 1314.618384][T12531] [ 1314.620701][T12531] CPU: 1 PID: 12531 Comm: syz-executor Tainted: G W 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 1314.632238][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1314.642298][T12531] Call Trace: [ 1314.645577][T12531] [ 1314.648505][T12531] __dump_stack+0x21/0x24 [ 1314.652846][T12531] dump_stack_lvl+0xee/0x150 [ 1314.657884][T12531] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1314.662921][T12531] ? ihold+0x20/0x60 [ 1314.666815][T12531] ? ihold+0x20/0x60 [ 1314.670705][T12531] print_report+0x3d/0x60 [ 1314.675038][T12531] kasan_report+0x122/0x150 [ 1314.679543][T12531] ? ihold+0x20/0x60 [ 1314.683444][T12531] kasan_check_range+0x280/0x290 [ 1314.688391][T12531] __kasan_check_write+0x14/0x20 [ 1314.693426][T12531] ihold+0x20/0x60 [ 1314.697162][T12531] vfs_rmdir+0x25f/0x500 [ 1314.701408][T12531] incfs_kill_sb+0x105/0x220 [ 1314.705999][T12531] deactivate_locked_super+0xb5/0x120 [ 1314.711376][T12531] deactivate_super+0xaf/0xe0 [ 1314.716074][T12531] cleanup_mnt+0x45f/0x4e0 [ 1314.720500][T12531] __cleanup_mnt+0x19/0x20 [ 1314.724926][T12531] task_work_run+0x1db/0x240 [ 1314.729524][T12531] ? __cfi_task_work_run+0x10/0x10 [ 1314.734635][T12531] ? __x64_sys_umount+0x125/0x160 [ 1314.739662][T12531] ? __cfi___x64_sys_umount+0x10/0x10 [ 1314.745039][T12531] exit_to_user_mode_loop+0x9b/0xb0 [ 1314.750247][T12531] exit_to_user_mode_prepare+0x5a/0xa0 [ 1314.755806][T12531] syscall_exit_to_user_mode+0x1a/0x30 [ 1314.761275][T12531] do_syscall_64+0x58/0xa0 [ 1314.765706][T12531] ? clear_bhb_loop+0x30/0x80 [ 1314.770386][T12531] ? clear_bhb_loop+0x30/0x80 [ 1314.775060][T12531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1314.780959][T12531] RIP: 0033:0x7f1cf2f8fc57 [ 1314.785396][T12531] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1314.805000][T12531] RSP: 002b:00007fff965d34d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1314.813413][T12531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1cf2f8fc57 [ 1314.821384][T12531] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff965d3590 [ 1314.829356][T12531] RBP: 00007fff965d3590 R08: 0000000000000000 R09: 0000000000000000 [ 1314.837338][T12531] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff965d4620 [ 1314.845399][T12531] R13: 00007f1cf3010925 R14: 0000000000140dba R15: 00007fff965d4660 [ 1314.853382][T12531] [ 1314.856412][T12531] ================================================================== [ 1314.872008][T12531] Disabling lock debugging due to kernel taint [ 1314.878374][T12531] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1314.886199][T12531] #PF: supervisor write access in kernel mode [ 1314.892371][T12531] #PF: error_code(0x0002) - not-present page [ 1314.898373][T12531] PGD 12077c067 P4D 12077c067 PUD 0 [ 1314.903731][T12531] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1314.908956][T12531] CPU: 0 PID: 12531 Comm: syz-executor Tainted: G B W 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 1314.920525][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1314.930611][T12531] RIP: 0010:ihold+0x26/0x60 [ 1314.935120][T12531] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 86 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 e3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 1314.954898][T12531] RSP: 0018:ffffc90001e67c78 EFLAGS: 00010246 [ 1314.960971][T12531] RAX: ffff888130cb2800 RBX: 0000000000000000 RCX: ffff888130cb2880 [ 1314.968945][T12531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1314.976929][T12531] RBP: ffffc90001e67c88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 1314.984903][T12531] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff8881958d5374 [ 1314.992883][T12531] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1315.000860][T12531] FS: 000055556e2bb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1315.009798][T12531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1315.016382][T12531] CR2: 0000000000000170 CR3: 000000012ffaa000 CR4: 00000000003506b0 [ 1315.024349][T12531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1315.032406][T12531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1315.040380][T12531] Call Trace: [ 1315.043653][T12531] [ 1315.046582][T12531] vfs_rmdir+0x25f/0x500 [ 1315.050832][T12531] incfs_kill_sb+0x105/0x220 [ 1315.055420][T12531] deactivate_locked_super+0xb5/0x120 [ 1315.060792][T12531] deactivate_super+0xaf/0xe0 [ 1315.065468][T12531] cleanup_mnt+0x45f/0x4e0 [ 1315.069895][T12531] __cleanup_mnt+0x19/0x20 [ 1315.074330][T12531] task_work_run+0x1db/0x240 [ 1315.078934][T12531] ? __cfi_task_work_run+0x10/0x10 [ 1315.084080][T12531] ? __x64_sys_umount+0x125/0x160 [ 1315.089131][T12531] ? __cfi___x64_sys_umount+0x10/0x10 [ 1315.094520][T12531] exit_to_user_mode_loop+0x9b/0xb0 [ 1315.099721][T12531] exit_to_user_mode_prepare+0x5a/0xa0 [ 1315.105176][T12531] syscall_exit_to_user_mode+0x1a/0x30 [ 1315.110636][T12531] do_syscall_64+0x58/0xa0 [ 1315.115047][T12531] ? clear_bhb_loop+0x30/0x80 [ 1315.119807][T12531] ? clear_bhb_loop+0x30/0x80 [ 1315.124485][T12531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1315.130387][T12531] RIP: 0033:0x7f1cf2f8fc57 [ 1315.134904][T12531] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1315.154857][T12531] RSP: 002b:00007fff965d34d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1315.163368][T12531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1cf2f8fc57 [ 1315.171541][T12531] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff965d3590 [ 1315.179515][T12531] RBP: 00007fff965d3590 R08: 0000000000000000 R09: 0000000000000000 [ 1315.187488][T12531] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff965d4620 [ 1315.195494][T12531] R13: 00007f1cf3010925 R14: 0000000000140dba R15: 00007fff965d4660 [ 1315.203479][T12531] [ 1315.206502][T12531] Modules linked in: [ 1315.210414][T12531] CR2: 0000000000000170 [ 1315.214577][T12531] ---[ end trace 0000000000000000 ]--- [ 1315.220034][T12531] RIP: 0010:ihold+0x26/0x60 [ 1315.224543][T12531] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 86 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 e3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 1315.244178][T12531] RSP: 0018:ffffc90001e67c78 EFLAGS: 00010246 [ 1315.250251][T12531] RAX: ffff888130cb2800 RBX: 0000000000000000 RCX: ffff888130cb2880 [ 1315.258249][T12531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.266264][T12531] RBP: ffffc90001e67c88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 1315.274237][T12531] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff8881958d5374 [ 1315.282210][T12531] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1315.290180][T12531] FS: 000055556e2bb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1315.299108][T12531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1315.305690][T12531] CR2: 0000000000000170 CR3: 000000012ffaa000 CR4: 00000000003506b0 [ 1315.313668][T12531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1315.321647][T12531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1315.329670][T12531] Kernel panic - not syncing: Fatal exception [ 1315.336203][T12531] Kernel Offset: disabled [ 1315.340532][T12531] Rebooting in 86400 seconds..