last executing test programs: 3m37.051891458s ago: executing program 32 (id=174): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd1, 0xaf, 0xb6, 0x40, 0x24cf, 0x59e4, 0x943, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109025c0002010050060904000001020d0000052406000105240003000d240f0101000000ce0107000006241a000430090581030800"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @multicast2}, &(0x7f0000000280)=0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x11, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x87}, @jmp={0x5, 0x1, 0xc, 0x3, 0xa, 0x2, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0xa5ed1c10ec516cf6, 0x0, 0x5, 0x1, 0x3, 0x1, 0x4}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @exit], &(0x7f00000003c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000400)=""/4096, 0x40f00, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001440)={0x2, 0x7fffffff, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001480)=[0x1, 0xffffffffffffffff], &(0x7f00000014c0)=[{0x3, 0x1, 0xd, 0x4}, {0x0, 0x5, 0xa}, {0x1, 0x3, 0xa, 0x8}, {0x0, 0x1, 0x9, 0x2}, {0x1, 0x2, 0x2, 0xa}, {0x0, 0x4, 0xb, 0xa}, {0x0, 0x2, 0x10, 0x6}, {0x1, 0x2, 0x5, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001600)={0x0, 0xa5}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001640)='./file0\x00', 0x0, 0x18}, 0x18) pipe(&(0x7f00000016c0)={0xffffffffffffffff}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xdc, &(0x7f0000000140)=""/220, 0x41000, 0x4, '\x00', r3, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xb, 0x8, 0xfff}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000001780)=[r5, r6, r7, r8], 0x0, 0x10, 0xeb71, @void, @value}, 0x94) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) 3m26.846958594s ago: executing program 33 (id=255): r0 = socket(0xf, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80a00, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000000)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async, rerun: 32) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async, rerun: 32) listen(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x4e20, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async, rerun: 32) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000029001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) unshare(0x60600) (async, rerun: 32) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (rerun: 32) 3m19.2948965s ago: executing program 34 (id=315): socket$nl_audit(0x10, 0x3, 0x9) fspick(0xffffffffffffffff, 0x0, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='ata_eh_link_autopsy_qc\x00'}, 0xfffffffffffffe81) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000000000e58700000000000004000000005838d8"]) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x880, 0x2, 0x20}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) 3m11.554485589s ago: executing program 35 (id=378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0xff7ffff7) r4 = eventfd(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x33, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3, 0x2, 0x2, r4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3m9.883522265s ago: executing program 36 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c78e0466f257a82f9a32e3f8d5a208b1b8ebe09e3ca3c00d1126478934df3a3d620b1ba6930f94ba25040b16fd227ed30d184583f9050717191486878f5a11049e41976ab438adb036fdaf33ce77e5195b4b6845f3ff85aa2e0f985705493a7994c60c86a6a4f17bf24e6d44f67570359e0bbf10fb0dd15cc3a040fa760ad0173f309cf30a159a603a364d72ee605b532da662abf50a5da7d5db527b1d4aadad5a0c7740c4fcae5e04", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 3m6.562999206s ago: executing program 37 (id=408): setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_pidfd_open(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x11, r2, 0xcfc74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x0, 0x0, 0x0) alarm(0x4000000000002) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000280)=[{0x4, 0x3, 0x5, 0x1}]}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x100, 0x6) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = gettid() syz_open_procfs$namespace(r5, 0xfffffffffffffffe) pipe2$9p(&(0x7f00000000c0), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e000000000000000900240003801c0003800c0001800800010000000000ff0f0000000000000000000004000100"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="17c7050000000008000069111200fbfeffff84100000020000000000950000000000c88496b6105f4918"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m3.909328217s ago: executing program 38 (id=434): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xd, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x620, 0x48c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB='read_timeout_ms=01000000000000']) 2m43.015567968s ago: executing program 39 (id=472): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) (async) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0xfffffe75, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2m11.984720644s ago: executing program 8 (id=783): getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x2004, 0xfff, 0x4, 0x12000, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @value=r1}, 0x50) r3 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)="6d1095", 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 2m10.99684542s ago: executing program 8 (id=798): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00001977000000d7c9779701cf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) socket$packet(0x11, 0xa, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r9, 0x0, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) bind$packet(r12, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r13 = syz_clone3(&(0x7f0000001880)={0x101000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) tgkill(r13, r13, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) 2m10.743782233s ago: executing program 8 (id=801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095", @ANYRES8=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=default,uni_xlate=0,uni_xlate=1,codepage=862,shortname=lower,allow_utime=00777777777777777777777,iocharset=maccyrillic,uni_xlate=0,iocharset=cp1251,rodir,shortname=mixed,nnonumtail=1,shortname=lower,unieuid<\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x25, 0x36e, &(0x7f00000009c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x22}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0xffffff45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000340)=""/43, &(0x7f0000000380)=0x2b) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000ec13b27c528c736a2a4dab106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r4, &(0x7f0000000040)="008cda", 0x3, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) shutdown(r4, 0x1) 2m7.640965811s ago: executing program 8 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x65c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x912, 0x18}}}}, [@NL80211_ATTR_TID_CONFIG={0x98, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x7364, 0x2, 0x4, 0x7aa, 0x9, 0x73f2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x9, 0x101, 0x81, 0x8, 0xf98, 0x8, 0x59ef]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6b}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa16}]}]}, @NL80211_ATTR_TID_CONFIG={0x5a0, 0x11d, 0x0, 0x1, [{0x438, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x4, 0x3, 0x401, 0x1, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0xb399, 0x189, 0x8000, 0x0, 0xb, 0x9]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x1, 0x7, 0x4, 0xb3b0, 0x9, 0x8, 0xfff7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x9, 0x4, 0xac4, 0xff, 0x8000, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x7, 0x423, 0xfc24, 0x19e, 0x9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0xd, 0x3daa, 0x4, 0x6, 0xc20f, 0x5704]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x2}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x5, 0x8}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0xa}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff7, 0x81, 0x4, 0x9, 0x8d, 0x8539, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf9d8, 0x100, 0x9, 0x2, 0x9, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5a, 0x18, 0x12, 0x3, 0x14, 0x48, 0x30, 0x60]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x5}, {0x7, 0xa}, {0x3, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x4}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x1f}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x7, 0x4}, {0x6}, {0x3, 0x2}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x4, 0x8}, {0x4, 0x2}, {0x6, 0x5}, {}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x7, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9c, 0x1, 0x0, 0x4, 0x10, 0x10, 0x7ff]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x4}, {0x7, 0x4}, {0x6, 0x7}, {0x6}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x2, 0x1, 0x5, 0x9, 0x2, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x5, 0x3, 0x6, 0x52, 0x6, 0x64]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x21c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x5a}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x958, 0x400, 0x3, 0x1, 0xa59, 0x1000, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x6}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1f97, 0x0, 0x9, 0x4, 0x9, 0x7, 0x10, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x2, 0x6}, {0x6, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x1}, {0x7, 0x1}, {0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x5}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x7}, {0x4, 0x6}, {0x7, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xbbf, 0xffc0, 0x7, 0x8, 0x3, 0x80, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x8}, {0x6, 0x2}, {0x4}, {0x3, 0x4}, {0x2, 0x4}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x4}, {0x4, 0x6}, {0x7, 0x5}, {0x3, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x35, 0x1, 0x80, 0x5, 0xa, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x100, 0x2eca, 0x2, 0x8, 0x401, 0x1cc, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x8, 0x800, 0x6, 0x4, 0xc, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x5, 0x2, 0x60, 0x2, 0x16, 0x0, 0x48, 0x60, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0x7}, {0x5, 0xa}, {0x1}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x5, 0x3}, {0x3, 0x3}, {0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x5, 0x6}, {}, {0x2, 0x8}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x3f, 0x7, 0x0, 0x3, 0xfff, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x2}, {0x0, 0x3}, {0x6}, {0x2, 0x5}, {0x6, 0x11}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x1}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x60}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x5, 0x5, 0x60, 0x30, 0x48, 0x30, 0x77, 0x1b, 0x48, 0x18, 0x18, 0x5, 0x1b, 0x34, 0x36, 0x30, 0x48, 0x48, 0x1, 0x5, 0x60, 0xc, 0x1b, 0x6c, 0x2]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x18, 0xc, 0x36, 0x18, 0x5, 0x16, 0x16, 0x4, 0x0, 0x48, 0x65, 0x1, 0x5, 0x4, 0x2, 0x16, 0xc, 0x30, 0x12, 0x1, 0x4, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x5, 0x35, 0x24, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x0, 0x48, 0x3, 0xc, 0x36, 0xc, 0xc, 0x3d, 0x24, 0x48, 0x36, 0x18, 0x36, 0x1, 0xb, 0x60, 0x9, 0xb, 0x18, 0x0, 0x30, 0x5, 0x9, 0x6, 0x4, 0x6, 0x5, 0x1, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x0, 0x6, 0x9, 0x9, 0x2, 0xeaa, 0xbb06]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x4, 0x6, 0x2, 0xfff7, 0x3, 0x5, 0x533e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x35, 0x2, 0xff4f, 0x0, 0x9, 0x2]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x7, 0x5}, {0x1, 0x6}, {0x4}, {0x3, 0x3}, {0x7, 0x8}, {0x2, 0x9}, {0x3, 0x8}, {0x5, 0x7}, {0x2, 0xa}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x65c}}, 0x4840) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m7.372492435s ago: executing program 8 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setfsgid(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) umount2(&(0x7f0000000000)='./mnt\x00', 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x1000000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"c23b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) syz_clone(0x41b08000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m7.252804467s ago: executing program 8 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 1m56.438856613s ago: executing program 3 (id=857): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffd, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002380)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x8, 0x0, 0xff5c, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000006c40)="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", 0x2000, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006880)={0x78, 0x0, 0x8001, {0x6, 0x8, 0x0, {0x0, 0x7, 0x7ab8e24f, 0x7, 0x9, 0x337, 0xfff, 0x2, 0x4, 0x6000, 0x6, r5, 0x0, 0xfffffffe, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20080, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x308a}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0xffffffff7fffffff}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfstransmute}, {@euid_lt={'euid<', r7}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@dont_appraise}]}}, 0x0, 0x0, &(0x7f00000005c0)="3227431d395f8a8b7d7d96d4202816719682d5ba84f463f89540b2b75fa6701a8dcc18d912ae98e05b6d652c00c97942f0f463721fcd8aef40806337ac1e4a5c5d3144350ef00bc03b96abd0b0c3c4667ac1020f40a5862ca7bbd053adf83d9077e503424cdfa710256c387c202a6497cc3f53146994bffeb37b5652655551aefe4e58e0b2") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r12}, 0x10) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0xfff) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) 1m56.300221945s ago: executing program 3 (id=858): newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', r0, 0xee01) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) getdents64(r7, 0xffffffffffffffff, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r2}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e010000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 1m56.082324878s ago: executing program 7 (id=861): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2404084, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000100)='./file0\x00') r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m55.644785915s ago: executing program 7 (id=863): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2}, 0x10, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2401c0d1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) readv(r4, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000001840)=""/39, 0x27}], 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xf) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) 1m53.824844793s ago: executing program 7 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m53.748416594s ago: executing program 3 (id=867): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}}, 0xf0}, 0x1, 0xe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x23) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0xffffffff) (async) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) (async) unshare(0x64000600) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x0, 0x2, 0x6, 0xd, 0x2000000000, 0x2000000000002, 0x95, 0x80000001, 0x7ffd}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0xb) lsetxattr$trusted_overlay_redirect(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f00000002c0)=@file={0x1}, 0x6e) (async) connect$unix(r5, &(0x7f00000002c0)=@file={0x1}, 0x6e) 1m53.120567214s ago: executing program 3 (id=869): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1a7080, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r3}, 0x10) lookup_dcookie(0x9, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900"], 0xd8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x50}}, 0x20004800) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES8], 0x0, 0x11dc, &(0x7f0000001280)="$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") mount$incfs(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x10, 0x0) chdir(&(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0xfe, 0x6, @multicast}, 0x14) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x3}}, 0x30) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) 1m52.940625637s ago: executing program 3 (id=873): syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x3, {0xb, 0x6, "59beba", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@fragment={0x2b, 0x0, 0x6, 0x0, 0x0, 0x1a, 0x68}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x2000000000000041, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000080)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 1m52.76469397s ago: executing program 3 (id=874): socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000006, 0x30, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040100002152c11efd0f000007000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r4], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r8, @ANYRESDEC=r7], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x10) (async, rerun: 32) r9 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (rerun: 32) rmdir(&(0x7f0000000300)='./cgroup/../file0\x00') (async) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="600100001000130700000002000000000c0000006ef300000000000000000000ac14143f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @dev={0xac, 0x14, 0x14, 0xa}}, 0xb) 1m52.74107514s ago: executing program 40 (id=874): socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000006, 0x30, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040100002152c11efd0f000007000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r4], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r8, @ANYRESDEC=r7], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x10) (async, rerun: 32) r9 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (rerun: 32) rmdir(&(0x7f0000000300)='./cgroup/../file0\x00') (async) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="600100001000130700000002000000000c0000006ef300000000000000000000ac14143f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001fffffffc32000000ff02000000000000000000000000000100000000000000000000000000000000fffffeffffffffff0000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ff0000002dbd70000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00f1fc000020001700010000002abd700027bd70002dbd70002bbd70000400000003000000"], 0x160}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @dev={0xac, 0x14, 0x14, 0xa}}, 0xb) 1m52.73315113s ago: executing program 7 (id=875): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e0001006970366772657461700000004000028006000f000000000005000b00ff000000080005000400000014000600fe8000000000000000000000000000aa060010004e23"], 0x7c}, 0x1, 0xb00}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) 1m52.044004391s ago: executing program 41 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 1m51.490722179s ago: executing program 7 (id=880): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='lgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="d32b63707520"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001c71414120100000002000000ac141413ac14141e"], 0x18) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000400)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000340)=""/72, 0x48}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getdents(r0, 0xfffffffffffffffd, 0x3b) 1m50.661016462s ago: executing program 7 (id=882): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x5f]}}, &(0x7f0000001f00)=""/4096, 0x53, 0x1000, 0x3, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080037c000000001", 0x1c, 0x0, 0x0, 0x0) 1m50.609047122s ago: executing program 42 (id=882): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x5f]}}, &(0x7f0000001f00)=""/4096, 0x53, 0x1000, 0x3, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080037c000000001", 0x1c, 0x0, 0x0, 0x0) 1m25.906889602s ago: executing program 2 (id=1045): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) msync(&(0x7f0000558000/0x1000)=nil, 0x1000, 0x4) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x2940, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) lseek(0xffffffffffffffff, 0xffffeffffffffffe, 0x0) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r8, 0x300, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r10, 0x0, r9, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m25.819880333s ago: executing program 2 (id=1046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x208}}, 0x4) 1m25.764541774s ago: executing program 2 (id=1048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800200000e7057b8af8ff00000000bfa200000000020000f8ffffffb703000008000000b704000006000016850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000800b70300000000a5df"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001980)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000039c0)={0xa0, 0x0, r4, {{0x3, 0x1, 0x8000000000000000, 0x8, 0x6, 0x6, {0x1, 0x400, 0x6, 0xfffffffffffff923, 0xffffffffffffffff, 0x200, 0x1, 0x7, 0x6, 0x8000, 0x9, r5, 0x0, 0xa4, 0x7ff}}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc50e, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=remount-ro,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000002000022,iocharset=cp857,errors=remount-ro,\x00'], 0x3, 0x151b, &(0x7f0000006180)="$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") timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_delete(r7) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, 0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x5}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) chdir(&(0x7f00000001c0)='./file0\x00') 1m25.498821508s ago: executing program 2 (id=1049): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@secondary) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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") r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) read$hiddev(r4, &(0x7f0000000080)=""/39, 0x27) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfa, 0x2}}}}}]}}]}}, 0x0) sendfile(r5, r4, 0x0, 0x3a) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000880)={{r0}, 0x0, 0x4, @unused=[0x4, 0x6, 0x100000001, 0x5], @subvolid}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0x1c, 0x0, 0x2000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 1m22.12339132s ago: executing program 2 (id=1085): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000001d0001042abd7000bbaecccf42e111d55cd6d44f1ac488d398cecbb1b8eb9c31154c8fb49f526c5ae39522bcfcc434c6ed303b04e7353be8becbd9d7e3a267f8f4b2dc828082ce660ccfd5b9cc472c80b381088e396f49a227ba28e9d6c281a27a739c95cb878e3de5396f3fb37f88718c938570aa2b", @ANYRES8, @ANYBLOB="02009407"], 0x1c}, 0x1, 0x0, 0x0, 0x240008c0}, 0x44000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0092d930e35104febcc4c12402000000070000000000009d4204aba7115eb3ba872ccaeb05b5a99ecd000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r5) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) write(r6, &(0x7f0000000000)="9275770b057af401977682d6673492454699ffd059be5b76127629045021af0946295d740a089a77a28975b571503d5b3ededa36d218f7110a85b64cc31a1aeb11af5a8ccf8b73", 0x47) (async) write(r6, &(0x7f0000000000)="9275770b057af401977682d6673492454699ffd059be5b76127629045021af0946295d740a089a77a28975b571503d5b3ededa36d218f7110a85b64cc31a1aeb11af5a8ccf8b73", 0x47) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="0000000000000000d8ac0000000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="0000000000000000d8ac0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x40, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x40, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r11) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r8}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010001fff0000000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010001fff0000000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r13}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0de8dd55adae4602992fa1f669bb08004500002800000000000690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) socket(0x10, 0x80003, 0x0) (async) socket(0x10, 0x80003, 0x0) 1m21.405307891s ago: executing program 2 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x0, 0x20040004, 0x1, 0x0, 0x100, 0x0, 0x0, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$AUDIT_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x48, 0x0, 0x3, r4, 0x80000001, 0xffffffff, 0x5d2, 0x40, 0x0, 0x5, 0x4}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) (async) sendmsg$AUDIT_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x48, 0x0, 0x3, r4, 0x80000001, 0xffffffff, 0x5d2, 0x40, 0x0, 0x5, 0x4}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2, @ANYBLOB="00efffffff000000140016"], 0x34}}, 0x0) 1m20.609697193s ago: executing program 43 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x0, 0x20040004, 0x1, 0x0, 0x100, 0x0, 0x0, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$AUDIT_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x48, 0x0, 0x3, r4, 0x80000001, 0xffffffff, 0x5d2, 0x40, 0x0, 0x5, 0x4}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) (async) sendmsg$AUDIT_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x48, 0x0, 0x3, r4, 0x80000001, 0xffffffff, 0x5d2, 0x40, 0x0, 0x5, 0x4}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2, @ANYBLOB="00efffffff000000140016"], 0x34}}, 0x0) 1m5.83896151s ago: executing program 6 (id=1170): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (fail_nth: 4) 1m4.573253859s ago: executing program 6 (id=1174): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v2={0x2000000, [{0x6, 0xd62e}, {0x5, 0x1}]}, 0x14, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setregid(0xffffffffffffffff, 0x0) 1m4.447853311s ago: executing program 6 (id=1176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000004d00)="09b1b2be39ed5253490591528d6220f12345a792864e63b5dc6e4229f74e390f9b9ae89a9f450d356ee9c10134c317413acee2471850553a2b3d7f45caf5dbd21bcca7f489b5dea987931f3a5beca73ac3335dad17ef2d80909f60e9f54e6aeac839ed4f51a45fc98e35e3308a55352e3a5b769e68bb7fa187bff91d38f2837db4899d37489eec08dfdd1018cf59cf11ac7d7aa2873244d76b0b4a80764b14a3ac5be2e969f5478879c4613617849b7c12b994774de4ec42cef5485eb886b684c9b67175df63e5a26b285854ac4849caae", &(0x7f00000005c0)=""/141}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x4e) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000003c0)={0x2000000e, 0xfffffffffffffff9, 0x3, 0x200, 0x83, 0x920}) (rerun: 64) shutdown(r1, 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00), 0x0, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffffff, 0x0, 0x10, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000580)='skip_task_reaping\x00'}, 0x18) (async) capset(&(0x7f0000000c00)={0x20080522, r3}, &(0x7f0000000280)={0x1, 0x3, 0x7, 0x4, 0x10040, 0x8f}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000300)={0x200d}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 1m4.206385195s ago: executing program 6 (id=1178): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x21044e, &(0x7f00000003c0)={[{@noacl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@resuid}, {@noblock_validity}, {@sb={'sb', 0x3d, 0x1404}}]}, 0x3, 0x45a, &(0x7f0000001400)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20071026, r0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='tracefs\x00', 0x800, &(0x7f0000000840)='@\\+I,\x00') process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000003"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r5}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) 1m2.59753617s ago: executing program 6 (id=1187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/31], 0xb8}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "01ff"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/95) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r10, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x5, 0x2}}, 0x50) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x46d, 0x5c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x54, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xb6b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x7, 0x4}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x0, 0x8, 0x10, 0x4}, 0x3c, &(0x7f0000000140)={0x5, 0xf, 0x3c, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x7, 0xe, 0x9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x2, 0x1, 0x7cfa}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x2, 0xf00, 0x2, [0x14f, 0xff0000, 0xc000]}]}, 0x8, [{0x8, &(0x7f0000000180)=@string={0x8, 0x3, "6302e7337f4f"}}, {0xaa, &(0x7f0000000200)=@string={0xaa, 0x3, "c30766095a6f4d6e1e2325f00ac015bed33ffff669669caa5e219c961fc8645a0e7d5f12501495df4288ee5d5e75086c950ef18e2b71b68d4c7c3f85282a2d32015635525ce44f4a1b758a05aa2a9811cdb2808061560d2070835408d9176c7f8a4b8fe8e03f0260bb26a47a32111fcb49ed2a74e0e2afb9f651cc3eaff255c1075676b6a81f5757c173b7ccd90587fb85fc1302e9e0ca3b6609d4401ac12b75e36ee372c9e6afb1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x430}}, {0x13, &(0x7f0000000300)=@string={0x13, 0x3, "d35b26513b09222eaa9de988aae0f8a31f"}}, {0x86, &(0x7f0000000340)=@string={0x86, 0x3, "9228f0619dd3bd2538bb4b25917c83a074e12dda6969b9c53d0c2826a8602f4b0a236911b1b436c9f2d90817904869e426c52e14fdc35d32ab5f3a15a55ada51a6026dc20e3a358038a7f5f3a7f326bad1534397aa82e68937d28b4bd8df4d35438ea32b86e877d575d411018faa84e0416a09c6625925d4e1b022446d780bfefc6c7614"}}, {0xc9, &(0x7f0000000400)=@string={0xc9, 0x3, "06cea3fe0f741f7616f028038c3441170db8b4fd71018f10727ea8a1ee8e74c3d3ac01589042ae0c034bdf531abfca84429e04abe221252eb7d08799a2b07f1eace891ebdc18b9b27fc3451d1996c13643f3029b95e9718db1fd498469ff9d08e6b9a4e6f44f45114748bb2a635ebc55ad18df78f8a50233314eb5ecbe6e8a56e9d508163e0100b809c989070214bde5f7ca940ec8e5d713e107701e0ec3230feeeacd8758b503c2f0f36d13645a948cf25ad3c8f135c6fb2aac697406d607475602c2e5e4edcc"}}, {0xa9, &(0x7f0000000500)=@string={0xa9, 0x3, "5bab313651790897ceaba5202cefac3c08f3ae2520650382f1c733cbb337fe4b05bdb04a3a3b274ffe62e263fa14190952a99f00f74f864654ab8a4eac0ebf0096220cdac2613df06c2e97456720b03ec16073400e771e50a8cf232ca692470dfcfd0bd4d624c09638d2ca9d6a61c0e8bfb0cdbb136e10ba382f9e64b4dffab4cba306b47109cce135f88e44b82aeedd2ee64941b7a54a10bb066dc6958b15b603f34b2df1c6f8"}}, {0xf9, &(0x7f00000005c0)=@string={0xf9, 0x3, "8b7a59dbf6ac4ce7c98dfb8e31eff7cf72e0400badc6c4010c91f5606e0075b884e3ce11028711d1e7e1ab5f492eefac54fcc89b94f2310782b7d07c390b382771b66d05b8ff9d9f604d812403fa58f4a5c896f11fe6cfab67484655966780f4fb8750480b81e3ed82770a841b6e1f874e075815f6ce30bb4d460d64b13cd15734c4e9b381cfaf895251cc6fb9e389a7920e12dd668554ff3b0cf4e021a6528cbb6f1df935165bb4cfb508311627ffeb88fecb33244a9746cc5a4ffe9edd13b1d0d1182f84d173e0e5d7b36b1b181434a630c4190e94927dde57db88c5372b0adbc9e95ab93f5c0d821407dc55556fa434e12d7b1170fe"}}]}) socket$nl_route(0x10, 0x3, 0x0) 1m2.186243956s ago: executing program 6 (id=1194): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000ac0)="893c5b0838450972c229f07a09d843c95d64e91c93", &(0x7f0000000900), 0x2, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x4, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) 1m1.575357225s ago: executing program 44 (id=1194): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000ac0)="893c5b0838450972c229f07a09d843c95d64e91c93", &(0x7f0000000900), 0x2, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x4, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) 7.648708193s ago: executing program 0 (id=1600): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 7.611194254s ago: executing program 9 (id=1601): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@noload}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0x4ee, &(0x7f0000000740)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./control\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 5.959147619s ago: executing program 0 (id=1606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x1e, 0x10, 0x200, &(0x7f0000000880)="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"}) 5.958543049s ago: executing program 9 (id=1607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74"], 0xb4}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = open(&(0x7f0000000040)='./file1/../file0\x00', 0xa440, 0x34) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0x3, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1403fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0xfe, 0x3, 0x7a, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.87659003s ago: executing program 4 (id=1611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x2, 0xc}, 0xc) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0xa, 0x5e, &(0x7f0000000340)=""/94, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x6, 0x0, 0xa1}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f0000000200)=ANY=[@ANYBLOB='allow_utime=00000000000000000000377,shortname=lower,shortname=winnt,uni_xlate=0,check=strict,uni_xlate=0,iocharset=iso8859-9,dmask=0100000L000000000000000,utf8=0,shortname=wortname=mixed,uni_xlate=0,shortname=mixed,uni_xlAte=1,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x80, 0x364, &(0x7f0000000400)="$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") sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) 5.567232285s ago: executing program 0 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) keyctl$link(0x8, 0x0, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000200)=""/205, 0xcd) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000540)="4d14", 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 4.062021148s ago: executing program 4 (id=1617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.916566311s ago: executing program 1 (id=1619): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 3.916297091s ago: executing program 9 (id=1620): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0xecf86c37d53049c2) 3.91595072s ago: executing program 1 (id=1621): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r1 = getpgrp(0x0) timer_gettime(0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.159879232s ago: executing program 0 (id=1625): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a"], 0x40}, 0x2000c0c4) 3.126277022s ago: executing program 0 (id=1626): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0xf9, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5d4cf2ae"}, {0x5, 0x24, 0x0, 0x4572}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x3, 0xffff, 0x2b}, {0x6, 0x24, 0x1a, 0x0, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x9, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x9f8972dfbd07a5a, 0x7, 0x5, 0x3}}}}}}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, &(0x7f0000006800), 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.980568375s ago: executing program 9 (id=1627): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48d}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) 2.916584346s ago: executing program 1 (id=1628): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 2.127635128s ago: executing program 9 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) alarm(0x8) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) 1.96447094s ago: executing program 1 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) 1.861992002s ago: executing program 5 (id=1633): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x15, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 1.776171163s ago: executing program 5 (id=1634): bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000002240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$fuseblk(0x0, &(0x7f0000004240)='./file0\x00', 0x0, 0x8104a9, 0x0) 1.761663563s ago: executing program 5 (id=1635): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) shutdown(r0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 1.741849954s ago: executing program 1 (id=1636): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 1.680729025s ago: executing program 4 (id=1637): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) open(0x0, 0x0, 0xb) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000004c0)=""/4096, &(0x7f0000000240)=0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$TCSETSF2(0xffffffffffffffff, 0x5434, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 1.680221965s ago: executing program 5 (id=1638): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.680001855s ago: executing program 5 (id=1639): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, 0x0) 1.679784735s ago: executing program 4 (id=1640): socket(0xf, 0x1, 0x0) 1.668530455s ago: executing program 4 (id=1641): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) open(0x0, 0x121342, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x2, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xf, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xfff, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x5, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30f, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0xd, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x4, 0x408, 0x8000, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xb25, 0x20000008, 0x4, 0x6d01, 0x5, 0x2, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x8005, 0x9, 0xac8, 0xa, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x5, 0xfffffff9, 0xffff, 0x2000a620, 0x8, 0x5, 0x4, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000007, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x4a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @func={0xd, 0x0, 0x0, 0xc, 0x2}]}}, &(0x7f0000000680)=""/229, 0x32, 0xe5, 0x1, 0x0, 0x0, @void, @value}, 0x28) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='./binderfs/binder0\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigaction(0x3d, &(0x7f0000000180)={0x0, 0x50000000, 0x0, {[0x7]}}, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) 857.935367ms ago: executing program 9 (id=1642): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="01010000000000001d200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x80000000}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}], [{@appraise}]}, 0x25, 0x365, &(0x7f0000000640)="$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") 764.607609ms ago: executing program 1 (id=1643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 731.662989ms ago: executing program 4 (id=1644): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10}}) socket$inet6(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r4, &(0x7f0000001c80)={0x2020}, 0x2020) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x2d, 0xb, 0x0, 0x25dfdbff, {0x5}}, 0x14}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 363.293455ms ago: executing program 5 (id=1645): mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="3eaa00000000000079103800000000009500000000000000bcb83f2ba18a57b2b88ac76ef9b35310b27f795d90b8429f4e37fc12dcf8b4939dae5e333d089b2a24be4c65cc4bd3190ac046902350de3675933beb52870ce15893b3c4d891685f28d5350c6c87052012c0d7f595a2fd7d10b4b4a8ec685bac71c808db0e8083725c6dc1df995c31bc3ed9b0eab25bc1"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=1646): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xc, 0xa8202) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xd, 0x13, r0, 0x268ae000) 0s ago: executing program 0 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x24d417d6, 0x1, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) kernel console output (not intermixed with test programs): 175.470218][ T4297] F2FS-fs (loop9): Start checkpoint disabled! [ 175.477545][ T4297] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 175.507525][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:9' failed: Read-only file system [ 176.389845][ T4336] EXT4-fs (loop4): orphan cleanup on readonly fs [ 176.512589][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 176.524572][ T4336] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1005: bg 0: block 248: padding at end of block bitmap is not set [ 176.540013][ T4336] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1005: Failed to acquire dquot type 1 [ 176.553040][ T4336] EXT4-fs (loop4): 1 truncate cleaned up [ 176.559773][ T4336] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,dioread_nolock,abort,noload,nodiscard,,errors=continue [ 177.348217][ T4346] FAT-fs (loop2): Unrecognized mount option "00000000000000000004Áhña“CiŽLÄ%è [ 177.348217][ T4346] ¥s îß«²2á¦öÖa¶:¯mW2ÝòW [ 177.348217][ T4346] ‰E." or missing value [ 177.421909][ T2706] udevd[2706]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 177.446273][ T2706] udevd[2706]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:2' failed: Read-only file system [ 177.530237][ T2708] udevd[2708]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 177.543439][ T4363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'. [ 177.553880][ T2708] udevd[2708]: symlink '../../loop3' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:2' failed: Read-only file system [ 177.753663][ T4366] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1014'. [ 177.763006][ T4366] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1014'. [ 178.070569][ T4373] futex_wake_op: syz.9.1012 tries to shift op by -1; fix this program [ 178.098356][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 178.110392][ T4373] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 178.110392][ T4373] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 178.110392][ T4373] [ 178.225455][ T826] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 178.302404][ T4373] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 178.416661][ T4373] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 178.523352][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 178.548494][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 178.735592][ T826] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.786324][ T826] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 178.836428][ T826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.005117][ T826] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 179.024331][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.046791][ T826] usb 5-1: config 0 descriptor?? [ 179.065740][ T4371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.348325][ T331] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.368417][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 179.380631][ T4371] EXT4-fs (loop4): orphan cleanup on readonly fs [ 179.387504][ T4371] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.1015: bad orphan inode 13 [ 179.401682][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 179.717833][ T4371] ext4_test_bit(bit=12, block=18) = 1 [ 179.731976][ T4371] is_bad_inode(inode)=0 [ 179.736471][ T4371] NEXT_ORPHAN(inode)=2130706432 [ 179.741379][ T4371] max_ino=32 [ 179.744656][ T4371] i_nlink=1 [ 179.749254][ T4371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 179.764096][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 179.766375][ T24] kauditd_printk_skb: 167 callbacks suppressed [ 179.766389][ T24] audit: type=1400 audit(2000000070.427:3702): avc: denied { execute } for pid=4368 comm="syz.4.1015" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.804755][ T4371] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 179.835424][ T4371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1015: bg 0: block 248: padding at end of block bitmap is not set [ 179.859129][ T4371] Quota error (device loop4): write_blk: dquota write failed [ 179.867196][ T4371] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 179.877787][ T24] audit: type=1400 audit(2000000070.537:3703): avc: denied { map } for pid=4414 comm="syz.1.1027" path="/dev/vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 179.908197][ T4371] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1015: Failed to acquire dquot type 1 [ 179.919885][ T24] audit: type=1400 audit(2000000070.537:3704): avc: denied { create } for pid=4414 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 179.943722][ T4371] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 179.986632][ T4426] EXT4-fs (loop1): Ignoring removed nobh option [ 179.992964][ T4426] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 179.992964][ T4426] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 179.992964][ T4426] [ 180.018015][ T4426] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 180.026531][ T4426] EXT4-fs (loop1): Remounting filesystem read-only [ 180.033044][ T4426] EXT4-fs error (device loop1): ext4_dirty_inode:6142: inode #16: comm syz.1.1029: mark_inode_dirty error [ 180.044600][ T4426] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 180.055190][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.058600][ T466] udevd[466]: symlink '../../loop9' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:9' failed: Read-only file system [ 180.066116][ T2706] udevd[2706]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 180.085606][ T4426] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.1029: mark_inode_dirty error [ 180.091222][ T331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.102120][ T4426] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 180.119042][ T4426] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 180.127045][ T4426] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 180.135470][ T4426] EXT4-fs error (device loop1): ext4_truncate:4390: inode #16: comm syz.1.1029: mark_inode_dirty error [ 180.146747][ T4426] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 180.162515][ T4426] EXT4-fs (loop1): 1 truncate cleaned up [ 180.168576][ T4426] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x0000000000000008,nobh,lazytime,auto_da_alloc=0x0000000000000008,noacl, [ 180.186180][ T4426] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.200926][ T826] holtek_mouse 0003:04D9:A067.000F: unbalanced delimiter at end of report description [ 180.235321][ T826] holtek_mouse 0003:04D9:A067.000F: hid parse failed: -22 [ 180.242689][ T826] holtek_mouse: probe of 0003:04D9:A067.000F failed with error -22 [ 180.250250][ T4434] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1030'. [ 180.259771][ T331] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.285565][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.293590][ T331] usb 3-1: SerialNumber: syz [ 180.299535][ T4410] F2FS-fs (loop9): Found nat_bits in checkpoint [ 180.344441][ T4410] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 180.367373][ T24] audit: type=1400 audit(2000000071.037:3705): avc: denied { connect } for pid=4441 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.368264][ T4442] tipc: Started in network mode [ 180.392144][ T2061] usb 5-1: USB disconnect, device number 24 [ 180.410256][ T4442] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 180.420357][ T4442] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 180.435703][ T4442] tipc: Enabled bearer , priority 10 [ 180.436353][ T24] audit: type=1400 audit(2000000071.107:3706): avc: denied { setopt } for pid=4441 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.495281][ T24] audit: type=1400 audit(2000000071.107:3707): avc: denied { name_bind } for pid=4441 comm="syz.5.1031" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 180.698281][ T4389] FAT-fs (loop2): Unrecognized mount option "shor5" or missing value [ 180.855883][ T331] usb 3-1: 0:2 : does not exist [ 180.871939][ T331] usb 3-1: USB disconnect, device number 8 [ 180.925106][ T821] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 181.036708][ T4455] xt_hashlimit: max too large, truncated to 1048576 [ 181.044249][ T24] audit: type=1400 audit(2000000071.707:3708): avc: denied { ioctl } for pid=4448 comm="syz.1.1032" path="socket:[32304]" dev="sockfs" ino=32304 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.082997][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 181.092272][ T4452] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.413508][ T4468] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4468 comm=syz.2.1036 [ 181.433728][ T4466] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.448811][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x0000000000000006,,errors=continue [ 181.462100][ T4466] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.492411][ T826] tipc: 32-bit node address hash set to 1000000 [ 182.525233][ T821] usb 10-1: not running at top speed; connect to a high speed hub [ 182.541140][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 182.553390][ T4478] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 182.561065][ T4478] EXT4-fs (loop2): Ignoring removed bh option [ 182.568621][ T4478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.580728][ T4478] EXT4-fs (loop2): 1 truncate cleaned up [ 182.586653][ T4478] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue [ 182.615519][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 182.729955][ T824] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 182.771666][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 182.815828][ T821] usb 10-1: unable to read config index 0 descriptor/all [ 182.816182][ T24] audit: type=1326 audit(2000000073.487:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.5.1040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f047300c969 code=0x0 [ 182.822908][ T821] usb 10-1: can't read configurations, error -71 [ 182.985275][ T824] usb 5-1: Using ep0 maxpacket: 16 [ 183.041335][ T4486] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 183.053025][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 183.064792][ T4486] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 183.075014][ T4486] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 183.076462][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 183.085235][ T4486] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 183.107259][ T4486] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 183.115435][ T4486] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 183.115457][ T824] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 183.123337][ T4486] EXT4-fs (loop2): too many log groups per flexible block group [ 183.131580][ T824] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 183.139713][ T4486] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 183.149401][ T824] usb 5-1: config 0 has no interface number 0 [ 183.156924][ T4486] EXT4-fs (loop2): mount failed [ 183.261036][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 183.315235][ T824] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 183.324473][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.333230][ T824] usb 5-1: Product: syz [ 183.337836][ T824] usb 5-1: Manufacturer: syz [ 183.342499][ T824] usb 5-1: SerialNumber: syz [ 183.348138][ T824] usb 5-1: config 0 descriptor?? [ 183.385888][ T824] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 183.392687][ T824] uvcvideo: No valid video chain found. [ 183.435178][ T831] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.517837][ T4507] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x111910d0, checksum : 0x1119abd0) [ 183.528210][ T4507] exFAT-fs (loop2): invalid boot region [ 183.533748][ T4507] exFAT-fs (loop2): failed to recognize exfat type [ 183.667067][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 183.735148][ T831] usb 2-1: Using ep0 maxpacket: 16 [ 183.855189][ T831] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 183.929336][ T831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.940000][ T831] usb 2-1: config 0 has no interface number 0 [ 183.958352][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 183.974201][ T4515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.039260][ T4515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.060911][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 184.105180][ T831] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 184.118121][ T831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.174350][ T831] usb 2-1: Product: syz [ 184.188847][ T831] usb 2-1: Manufacturer: syz [ 184.203804][ T831] usb 2-1: SerialNumber: syz [ 184.255491][ T498] usb 5-1: USB disconnect, device number 25 [ 184.264374][ T831] usb 2-1: config 0 descriptor?? [ 184.305863][ T831] uvcvideo: Found UVC 0.00 device syz (046c:14e8) [ 184.313688][ T831] uvcvideo: No valid video chain found. [ 184.410850][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xc6df [ 184.429682][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xa60c [ 184.446334][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:4' failed: Read-only file system [ 184.480843][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:4' failed: Read-only file system [ 184.501452][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5176 [ 184.518647][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x79aa [ 184.531733][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xdb06 [ 184.541519][ T4515] attempt to access beyond end of device [ 184.541519][ T4515] loop2: rw=2049, want=79880, limit=40427 [ 184.552035][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xba78 [ 184.598071][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5176 [ 184.619766][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x79aa [ 184.633818][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xdb06 [ 184.644647][ T4533] kvm [4526]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xba78 [ 184.661207][ T4515] attempt to access beyond end of device [ 184.661207][ T4515] loop2: rw=2049, want=81920, limit=40427 [ 184.713268][ T4515] attempt to access beyond end of device [ 184.713268][ T4515] loop2: rw=2049, want=51128, limit=40427 [ 184.878779][ T4560] EXT4-fs (loop4): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [ 184.931230][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 184.931244][ T24] audit: type=1400 audit(2000000075.597:3713): avc: denied { read } for pid=4567 comm="syz.5.1060" path="socket:[31713]" dev="sockfs" ino=31713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.030227][ T24] audit: type=1326 audit(2000000075.697:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.062814][ T24] audit: type=1326 audit(2000000075.697:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.087572][ T24] audit: type=1326 audit(2000000075.697:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.112936][ T24] audit: type=1326 audit(2000000075.697:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.136914][ T24] audit: type=1326 audit(2000000075.697:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.160576][ T24] audit: type=1326 audit(2000000075.697:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.184175][ T331] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 185.191851][ T24] audit: type=1326 audit(2000000075.727:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.215551][ T24] audit: type=1326 audit(2000000075.727:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.239337][ T24] audit: type=1326 audit(2000000075.727:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 185.325824][ T831] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 185.341646][ T831] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.815210][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 185.832285][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 185.898931][ T331] usb 3-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 185.908428][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.920278][ T331] usb 3-1: config 0 descriptor?? [ 186.206649][ T4515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 186.295773][ T433] usb 2-1: USB disconnect, device number 12 [ 186.447938][ T4600] syz.5.1071[4600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.447994][ T4600] syz.5.1071[4600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.555168][ T831] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 186.557807][ T4614] fuse: Unknown parameter '000000000000000000000030x00000000000000030000000000000000000000300000000000000000000' [ 186.685145][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 186.692506][ T331] usbhid: probe of 3-1:0.0 failed with error -71 [ 186.717693][ T331] usb 3-1: USB disconnect, device number 9 [ 186.825077][ T831] usb 10-1: Using ep0 maxpacket: 16 [ 186.910537][ T4628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1080'. [ 186.995785][ T831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.090754][ T831] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 187.115853][ T3831] F2FS-fs (loop2): access invalid blkaddr:2048 [ 187.125096][ T3831] CPU: 0 PID: 3831 Comm: syz-executor Tainted: G W 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 187.131022][ T831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.136572][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.136578][ T3831] Call Trace: [ 187.136600][ T3831] __dump_stack+0x21/0x24 [ 187.136612][ T3831] dump_stack_lvl+0x169/0x1d8 [ 187.136625][ T3831] ? f2fs_get_next_page_offset+0x760/0x760 [ 187.136646][ T3831] ? show_regs_print_info+0x18/0x18 [ 187.177975][ T3831] dump_stack+0x15/0x1c [ 187.182126][ T3831] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 187.187490][ T3831] f2fs_map_blocks+0xc76/0x35c0 [ 187.192340][ T3831] ? kmem_cache_alloc+0x165/0x2e0 [ 187.197366][ T3831] ? f2fs_do_map_lock+0x290/0x290 [ 187.202384][ T3831] ? __bio_add_page+0x271/0x430 [ 187.207227][ T3831] ? xa_load+0x479/0x490 [ 187.211464][ T3831] f2fs_mpage_readpages+0xbf2/0x1e60 [ 187.216748][ T3831] ? has_enough_free_blks+0x2e0/0x2e0 [ 187.222114][ T3831] ? __mod_memcg_state+0xbc/0x230 [ 187.227144][ T3831] ? xas_nomem+0x6b/0x1d0 [ 187.231469][ T3831] f2fs_readahead+0xfc/0x240 [ 187.236072][ T3831] ? f2fs_set_data_page_dirty+0x6f0/0x6f0 [ 187.241787][ T3831] read_pages+0x16e/0xb50 [ 187.246110][ T3831] ? workingset_activation+0x250/0x250 [ 187.251586][ T3831] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 187.257135][ T3831] ? page_cache_ra_unbounded+0x7d0/0x7d0 [ 187.262766][ T3831] ? add_to_page_cache_lru+0x186/0x210 [ 187.268227][ T3831] page_cache_ra_unbounded+0x67f/0x7d0 [ 187.273683][ T3831] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 187.280286][ T3831] ? do_wp_page+0x8de/0xc80 [ 187.284785][ T3831] ondemand_readahead+0x7b5/0xc00 [ 187.289891][ T3831] page_cache_sync_ra+0x250/0x2a0 [ 187.294909][ T3831] f2fs_readdir+0x42a/0x940 [ 187.299409][ T3831] ? f2fs_fill_dentries+0xca0/0xca0 [ 187.304604][ T3831] ? fsnotify_perm+0x31b/0x4b0 [ 187.309361][ T3831] ? __kasan_check_write+0x14/0x20 [ 187.314466][ T3831] iterate_dir+0x260/0x570 [ 187.318877][ T3831] ? f2fs_fill_dentries+0xca0/0xca0 [ 187.324065][ T3831] __se_sys_getdents64+0xe5/0x240 [ 187.329083][ T3831] ? __x64_sys_getdents64+0x90/0x90 [ 187.334277][ T3831] ? filldir+0x690/0x690 [ 187.338515][ T3831] ? debug_smp_processor_id+0x17/0x20 [ 187.343882][ T3831] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 187.349944][ T3831] __x64_sys_getdents64+0x7b/0x90 [ 187.354960][ T3831] do_syscall_64+0x31/0x40 [ 187.359368][ T3831] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 187.365252][ T3831] RIP: 0033:0x7f65b41182d3 [ 187.369665][ T3831] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 187.389265][ T3831] RSP: 002b:00007fff704f8d28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 187.397679][ T3831] RAX: ffffffffffffffda RBX: 000055558ae204e0 RCX: 00007f65b41182d3 [ 187.405645][ T3831] RDX: 0000000000008000 RSI: 000055558ae204e0 RDI: 0000000000000005 [ 187.413610][ T3831] RBP: 000055558ae204b4 R08: 0000000000000000 R09: 0000000000000000 [ 187.421577][ T3831] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 187.429541][ T3831] R13: 0000000000000010 R14: 000055558ae204b0 R15: 00007fff704fafe0 [ 187.444637][ T831] usb 10-1: config 0 descriptor?? [ 187.592624][ T3831] attempt to access beyond end of device [ 187.592624][ T3831] loop2: rw=524288, want=45072, limit=40427 [ 187.624613][ T3831] attempt to access beyond end of device [ 187.624613][ T3831] loop2: rw=0, want=45072, limit=40427 [ 187.776444][ T4650] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 187.776444][ T4650] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 187.776444][ T4650] [ 187.802459][ T4650] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 187.811829][ T4650] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 187.821832][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 187.906913][ T4656] syz.5.1091[4656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.907443][ T4656] syz.5.1091[4656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.977118][ T4658] 9pnet: p9_fd_create_tcp (4658): problem connecting socket to 127.0.0.1 [ 188.077266][ T831] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 188.124456][ T831] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 188.218976][ T831] hid-steam 0003:28DE:1102.0011: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0 [ 188.456480][ T831] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 188.646192][ T831] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 188.684254][ T831] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0 [ 188.887128][ T831] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected [ 188.898543][ T831] input: Steam Controller as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28DE:1102.0011/input/input17 [ 188.919696][ T831] usb 10-1: USB disconnect, device number 9 [ 188.934194][ T831] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected [ 189.005534][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.013524][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.021158][ T4665] device bridge_slave_0 entered promiscuous mode [ 189.035936][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.043507][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.051521][ T4665] device bridge_slave_1 entered promiscuous mode [ 189.111571][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.118687][ T4665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.126015][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.133050][ T4665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.146369][ T7] tipc: Disabling bearer [ 189.151714][ T7] tipc: Left network mode [ 189.173196][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.180631][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.188272][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.195853][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.205088][ T2062] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 189.213264][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.222010][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.229097][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.236811][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.245127][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.252169][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.271747][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.296503][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.305910][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.315998][ T831] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 189.325374][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.339314][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.352442][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.361852][ T4665] device veth0_vlan entered promiscuous mode [ 189.392521][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.403657][ T4665] device veth1_macvtap entered promiscuous mode [ 189.418211][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.430829][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.485171][ T2062] usb 5-1: device descriptor read/64, error -71 [ 189.715189][ T831] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.731934][ T831] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.746330][ T7] device vlan1 left promiscuous mode [ 189.751965][ T7] bridge0: port 3(vlan1) entered disabled state [ 189.759284][ T7] device bridge_slave_1 left promiscuous mode [ 189.765602][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.773605][ T7] device bridge_slave_0 left promiscuous mode [ 189.780340][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.789442][ T7] device veth1_macvtap left promiscuous mode [ 189.795971][ T7] device veth0_vlan left promiscuous mode [ 189.814806][ T831] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.833024][ T831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.895987][ T831] hub 10-1:4.0: USB hub found [ 190.127911][ T2062] usb 5-1: device descriptor read/64, error -71 [ 190.138290][ T831] hub 10-1:4.0: 12 ports detected [ 190.145548][ T831] usb 10-1: selecting invalid altsetting 1 [ 190.153549][ T831] hub 10-1:4.0: Using single TT (err -22) [ 190.177172][ T2061] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 190.185147][ T831] hub 10-1:4.0: insufficient power available to use all downstream ports [ 190.194183][ T2061] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.204833][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 190.204844][ T24] audit: type=1400 audit(2000000080.867:3733): avc: denied { remount } for pid=4689 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 190.204875][ T4690] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 190.258306][ T4687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1099'. [ 190.279882][ T24] audit: type=1326 audit(2000000080.947:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f4200969 code=0x7ffc0000 [ 190.304605][ T24] audit: type=1326 audit(2000000080.967:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f4200969 code=0x7ffc0000 [ 190.355395][ T24] audit: type=1326 audit(2000000080.997:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03f4200969 code=0x7ffc0000 [ 190.380719][ T24] audit: type=1326 audit(2000000080.997:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f4200969 code=0x7ffc0000 [ 190.405941][ T24] audit: type=1326 audit(2000000080.997:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f03f4200969 code=0x7ffc0000 [ 190.432230][ T2062] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 190.445502][ T24] audit: type=1326 audit(2000000080.997:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f4200969 code=0x7ffc0000 [ 190.473733][ T24] audit: type=1326 audit(2000000080.997:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f03f4200969 code=0x7ffc0000 [ 190.499606][ T24] audit: type=1326 audit(2000000081.167:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a0385969 code=0x7ffc0000 [ 190.523943][ T24] audit: type=1326 audit(2000000081.167:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.6.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a0385969 code=0x7ffc0000 [ 190.861329][ T831] usb 10-1: USB disconnect, device number 10 [ 191.145197][ T2062] usb 5-1: device descriptor read/64, error -71 [ 191.223812][ T4721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1109'. [ 191.230243][ T4709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.245307][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 191.245688][ T4709] EXT4-fs (loop1): 1 truncate cleaned up [ 191.262878][ T4709] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue [ 191.278037][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 191.318660][ T289] attempt to access beyond end of device [ 191.318660][ T289] loop2: rw=1, want=45104, limit=40427 [ 191.346238][ T4730] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 191.360231][ T831] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 191.368275][ T831] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.378788][ T111] attempt to access beyond end of device [ 191.378788][ T111] loop2: rw=2049, want=45120, limit=40427 [ 191.525434][ T4745] 9pnet: Insufficient options for proto=fd [ 191.531785][ T4745] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 191.555107][ T2062] usb 5-1: device descriptor read/64, error -71 [ 191.814762][ T4742] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1112'. [ 192.271913][ T2062] usb usb5-port1: attempt power cycle [ 192.353960][ T4760] EXT4-fs (loop9): Test dummy encryption mode enabled [ 192.413499][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:9' failed: Read-only file system [ 192.465981][ T4760] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 192.486275][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:9' failed: Read-only file system [ 192.560533][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:9' failed: Read-only file system [ 192.574624][ T4760] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.602287][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:9' failed: Read-only file system [ 192.624804][ T15] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 192.634655][ T4777] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 192.648682][ T15] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.407735][ T2708] udevd[2708]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 193.445910][ T4782] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 195.356165][ T4806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1130'. [ 195.620269][ T2708] udevd[2708]: symlink '../../loop6' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:6' failed: Read-only file system [ 195.646493][ T4815] EXT4-fs (loop6): Test dummy encryption mode enabled [ 195.660641][ T4815] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 195.671658][ T4815] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.694555][ T2708] udevd[2708]: symlink '../../loop6' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:6' failed: Read-only file system [ 195.711081][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 195.711204][ T24] audit: type=1400 audit(2000000086.377:3814): avc: denied { map } for pid=4814 comm="syz.6.1133" path="/dev/net/tun" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 195.799004][ T4808] F2FS-fs (loop9): Unrecognized mount option "nodi" or missing value [ 195.841332][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:9' failed: Read-only file system [ 195.934093][ T24] audit: type=1400 audit(2000000086.597:3815): avc: denied { write } for pid=4826 comm="syz.6.1135" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.958231][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:9' failed: Read-only file system [ 196.282484][ T4835] 9pnet: Insufficient options for proto=fd [ 196.364831][ T4835] EXT4-fs (loop1): Test dummy encryption mode enabled [ 196.393060][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 196.456446][ T4835] EXT4-fs error (device loop1): __ext4_iget:5007: inode #11: block 1: comm syz.1.1137: invalid block [ 196.468299][ T4835] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1137: couldn't read orphan inode 11 (err -117) [ 196.480924][ T4835] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 196.514710][ T498] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 196.610711][ T4840] EXT4-fs (loop9): Ignoring removed oldalloc option [ 196.617889][ T4840] EXT4-fs (loop9): Ignoring removed nobh option [ 196.624331][ T4840] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.649518][ T2706] udevd[2706]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 196.672502][ T4840] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,grpjquota=,oldalloc,data_err=ignore,grpquota,nobh,user_xattr,init_itable,dioread_nolock,,errors=continue [ 196.994000][ T4845] netlink: 'syz.5.1139': attribute type 282 has an invalid length. [ 197.039498][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 197.069629][ T4840] EXT4-fs (loop9): Unrecognized mount option "0000000000000000000000501777777777777777777777" or missing value [ 197.081649][ T24] audit: type=1400 audit(2000000087.737:3816): avc: denied { remount } for pid=4839 comm="syz.9.1138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 197.124777][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 197.145639][ T4840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4840 comm=syz.9.1138 [ 197.172641][ T24] audit: type=1326 audit(2000000087.837:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03f4200969 code=0x0 [ 197.203344][ T24] audit: type=1326 audit(2000000087.867:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.9.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d0267969 code=0x7ffc0000 [ 197.238418][ T24] audit: type=1326 audit(2000000087.867:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.9.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb1d0267969 code=0x7ffc0000 [ 197.265063][ T24] audit: type=1326 audit(2000000087.867:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.9.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d0267969 code=0x7ffc0000 [ 197.289211][ T24] audit: type=1326 audit(2000000087.867:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.9.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1d0267969 code=0x7ffc0000 [ 197.312788][ T24] audit: type=1326 audit(2000000087.867:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.9.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d0267969 code=0x7ffc0000 [ 197.342332][ T24] audit: type=1326 audit(2000000087.867:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.9.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1d0267969 code=0x7ffc0000 [ 197.485221][ T498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.496301][ T498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.513268][ T498] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 197.532538][ T498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.553423][ T498] usb 7-1: config 0 descriptor?? [ 197.579418][ T4861] overlayfs: failed to resolve './file0': -2 [ 198.130695][ T4873] FAULT_INJECTION: forcing a failure. [ 198.130695][ T4873] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.158942][ T4873] CPU: 1 PID: 4873 Comm: syz.4.1147 Tainted: G W 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 198.170309][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.180376][ T4873] Call Trace: [ 198.183685][ T4873] __dump_stack+0x21/0x24 [ 198.188035][ T4873] dump_stack_lvl+0x169/0x1d8 [ 198.192729][ T4873] ? show_regs_print_info+0x18/0x18 [ 198.197933][ T4873] dump_stack+0x15/0x1c [ 198.202087][ T4873] should_fail+0x3c1/0x510 [ 198.206498][ T4873] should_fail_usercopy+0x1a/0x20 [ 198.211516][ T4873] _copy_from_user+0x20/0xd0 [ 198.216102][ T4873] strndup_user+0xb1/0x150 [ 198.220512][ T4873] __se_sys_mount+0x9c/0x380 [ 198.225094][ T4873] ? fput+0x1a/0x20 [ 198.228898][ T4873] ? __x64_sys_mount+0xd0/0xd0 [ 198.233652][ T4873] ? fpu__clear_all+0x20/0x20 [ 198.238327][ T4873] __x64_sys_mount+0xbf/0xd0 [ 198.242905][ T4873] do_syscall_64+0x31/0x40 [ 198.247314][ T4873] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 198.253193][ T4873] RIP: 0033:0x7f094bee9969 [ 198.257605][ T4873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.277200][ T4873] RSP: 002b:00007f094a552038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.285606][ T4873] RAX: ffffffffffffffda RBX: 00007f094c110fa0 RCX: 00007f094bee9969 [ 198.293568][ T4873] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 198.301532][ T4873] RBP: 00007f094a552090 R08: 0000200000000600 R09: 0000000000000000 [ 198.309498][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.317461][ T4873] R13: 0000000000000000 R14: 00007f094c110fa0 R15: 00007ffc93458268 [ 198.345227][ T498] usb 7-1: string descriptor 0 read error: -22 [ 198.489320][ T2706] udevd[2706]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 198.524383][ T4866] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.530887][ T2706] udevd[2706]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 198.585368][ T4866] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.605171][ T498] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 198.608571][ T2706] udevd[2706]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 198.749472][ T4866] attempt to access beyond end of device [ 198.749472][ T4866] loop1: rw=2049, want=81920, limit=40427 [ 198.764674][ T4866] attempt to access beyond end of device [ 198.764674][ T4866] loop1: rw=2049, want=49576, limit=40427 [ 198.823057][ T4866] attempt to access beyond end of device [ 198.823057][ T4866] loop1: rw=524288, want=78080, limit=40427 [ 198.849201][ T4866] attempt to access beyond end of device [ 198.849201][ T4866] loop1: rw=0, want=77832, limit=40427 [ 198.872831][ T4865] attempt to access beyond end of device [ 198.872831][ T4865] loop1: rw=0, want=77832, limit=40427 [ 198.885356][ T2062] usb 7-1: USB disconnect, device number 4 [ 198.895540][ T4866] attempt to access beyond end of device [ 198.895540][ T4866] loop1: rw=0, want=77832, limit=40427 [ 198.906682][ T4866] attempt to access beyond end of device [ 198.906682][ T4866] loop1: rw=0, want=77832, limit=40427 [ 198.917854][ T4866] attempt to access beyond end of device [ 198.917854][ T4866] loop1: rw=0, want=77832, limit=40427 [ 198.929510][ T4866] attempt to access beyond end of device [ 198.929510][ T4866] loop1: rw=0, want=77832, limit=40427 [ 198.942264][ T4866] attempt to access beyond end of device [ 198.942264][ T4866] loop1: rw=0, want=77832, limit=40427 [ 199.110351][ T4892] EXT4-fs (loop4): Test dummy encryption mode enabled [ 199.117714][ T4892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.144764][ T4892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c018, mo2=0002] [ 199.153094][ T4892] System zones: 1-12 [ 199.162315][ T4892] EXT4-fs (loop4): 1 truncate cleaned up [ 199.168067][ T4892] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug,lazytime,discard,max_batch_time=0x0000000000000008,nolazytime,bsddf,max_batch_time=0x0000000000000995,sb=0x0000000000000010,,errors=continue [ 199.334392][ T4889] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 199.388708][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 199.403309][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 199.433302][ T4889] EXT4-fs (loop9): Test dummy encryption mode enabled [ 199.497124][ T4889] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 199.981801][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 200.027964][ T4889] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 200.070478][ T4889] EXT4-fs (loop9): 1 truncate cleaned up [ 200.105303][ T4889] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 200.149580][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 200.166144][ T2706] udevd[2706]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 200.431616][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 200.602947][ T4910] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 200.605478][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 200.612872][ T4910] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 200.634687][ T4910] EXT4-fs error (device loop1): __ext4_iget:5007: inode #8: block 1803188595: comm syz.1.1155: invalid block [ 200.647056][ T4910] EXT4-fs (loop1): no journal found [ 200.652661][ T4914] binfmt_misc: register: failed to install interpreter file ./file2 [ 200.655271][ T2062] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 200.935097][ T2058] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 200.965169][ T15] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.985414][ T24] kauditd_printk_skb: 92 callbacks suppressed [ 200.985428][ T24] audit: type=1326 audit(2000000003.780:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.014957][ T24] audit: type=1326 audit(2000000003.800:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.075122][ T2062] usb 7-1: unable to get BOS descriptor or descriptor too short [ 201.155216][ T2062] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.164414][ T2062] usb 7-1: config 1 has no interface number 1 [ 201.170716][ T2062] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 201.205074][ T15] usb 2-1: Using ep0 maxpacket: 8 [ 201.225304][ T24] audit: type=1326 audit(2000000004.020:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.249152][ T24] audit: type=1326 audit(2000000004.040:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.273122][ T24] audit: type=1326 audit(2000000004.060:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.296981][ T24] audit: type=1326 audit(2000000004.090:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.320827][ T2058] usb 10-1: config 0 has an invalid interface number: 241 but max is 0 [ 201.329274][ T24] audit: type=1326 audit(2000000004.110:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.353080][ T15] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 201.362220][ T2058] usb 10-1: config 0 has no interface number 0 [ 201.368774][ T2062] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.377875][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.386160][ T2062] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.394958][ T15] usb 2-1: config 0 descriptor?? [ 201.395303][ T24] audit: type=1326 audit(2000000004.140:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.400659][ T2062] usb 7-1: Product: syz [ 201.428062][ T2062] usb 7-1: Manufacturer: syz [ 201.432791][ T2062] usb 7-1: SerialNumber: syz [ 201.455598][ T24] audit: type=1326 audit(2000000004.250:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.480239][ T24] audit: type=1326 audit(2000000004.250:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f420056b code=0x7ffc0000 [ 201.522257][ T4922] FAULT_INJECTION: forcing a failure. [ 201.522257][ T4922] name failslab, interval 1, probability 0, space 0, times 1 [ 201.535230][ T4922] CPU: 0 PID: 4922 Comm: syz.4.1159 Tainted: G W 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 201.546509][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.556554][ T4922] Call Trace: [ 201.559838][ T4922] __dump_stack+0x21/0x24 [ 201.564158][ T4922] dump_stack_lvl+0x169/0x1d8 [ 201.568825][ T4922] ? show_regs_print_info+0x18/0x18 [ 201.574009][ T4922] ? vfs_write+0xac8/0xd60 [ 201.578419][ T4922] dump_stack+0x15/0x1c [ 201.582650][ T4922] should_fail+0x3c1/0x510 [ 201.587055][ T4922] ? __se_sys_mount+0x153/0x380 [ 201.591899][ T4922] __should_failslab+0xa4/0xe0 [ 201.596655][ T4922] should_failslab+0x9/0x20 [ 201.601151][ T4922] kmem_cache_alloc_trace+0x3a/0x2e0 [ 201.606427][ T4922] __se_sys_mount+0x153/0x380 [ 201.611095][ T4922] ? fput+0x1a/0x20 [ 201.614950][ T4922] ? __x64_sys_mount+0xd0/0xd0 [ 201.619706][ T4922] ? fpu__clear_all+0x20/0x20 [ 201.624384][ T4922] __x64_sys_mount+0xbf/0xd0 [ 201.628968][ T4922] do_syscall_64+0x31/0x40 [ 201.633375][ T4922] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 201.639254][ T4922] RIP: 0033:0x7f094bee9969 [ 201.643669][ T4922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.663264][ T4922] RSP: 002b:00007f094a552038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.671668][ T4922] RAX: ffffffffffffffda RBX: 00007f094c110fa0 RCX: 00007f094bee9969 [ 201.679629][ T4922] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 201.687588][ T4922] RBP: 00007f094a552090 R08: 0000200000000600 R09: 0000000000000000 [ 201.695548][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.703510][ T4922] R13: 0000000000000000 R14: 00007f094c110fa0 R15: 00007ffc93458268 [ 201.714831][ T2058] usb 10-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 201.725757][ T2058] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.733846][ T2058] usb 10-1: Product: syz [ 201.738561][ T15] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 201.748471][ T2058] usb 10-1: Manufacturer: syz [ 201.753343][ T2058] usb 10-1: SerialNumber: syz [ 201.761746][ T2058] usb 10-1: config 0 descriptor?? [ 201.803749][ T4920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1158'. [ 201.813725][ T2058] usb 10-1: bad CDC descriptors [ 201.820153][ T4920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1158'. [ 201.830449][ T4925] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 201.839554][ T4925] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.862259][ T4925] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:404: inode #2: comm syz.4.1160: No space for directory leaf checksum. Please run e2fsck -D. [ 201.877697][ T4925] EXT4-fs error (device loop4): __ext4_find_entry:1668: inode #2: comm syz.4.1160: checksumming directory block 0 [ 201.915286][ T2062] usb 7-1: 2:1 : sample bitwidth 204 in over sample bytes 2 [ 201.922862][ T2062] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 201.939427][ T4910] udc-core: couldn't find an available UDC or it's busy [ 201.947966][ T4910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 201.955609][ T15] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 201.966995][ T2062] usb 7-1: USB disconnect, device number 5 [ 201.973095][ T15] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 202.216821][ T4933] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 202.235308][ T15] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 202.255124][ T15] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 202.305178][ T15] asix: probe of 2-1:0.0 failed with error -71 [ 202.318955][ T15] usb 2-1: USB disconnect, device number 13 [ 203.106532][ T4953] EXT4-fs (loop4): Ignoring removed orlov option [ 203.113126][ T4953] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 203.120916][ T4953] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 203.130878][ T4953] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=asymmetric" or missing value [ 203.416172][ T4961] FAULT_INJECTION: forcing a failure. [ 203.416172][ T4961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.430114][ T4961] CPU: 0 PID: 4961 Comm: syz.6.1170 Tainted: G W 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 203.441424][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.451465][ T4961] Call Trace: [ 203.454744][ T4961] __dump_stack+0x21/0x24 [ 203.459061][ T4961] dump_stack_lvl+0x169/0x1d8 [ 203.463728][ T4961] ? show_regs_print_info+0x18/0x18 [ 203.468919][ T4961] dump_stack+0x15/0x1c [ 203.473061][ T4961] should_fail+0x3c1/0x510 [ 203.477464][ T4961] should_fail_usercopy+0x1a/0x20 [ 203.482487][ T4961] _copy_from_user+0x20/0xd0 [ 203.487071][ T4961] __se_sys_mount+0x176/0x380 [ 203.491733][ T4961] ? fput+0x1a/0x20 [ 203.495527][ T4961] ? __x64_sys_mount+0xd0/0xd0 [ 203.500278][ T4961] ? fpu__clear_all+0x20/0x20 [ 203.504956][ T4961] __x64_sys_mount+0xbf/0xd0 [ 203.509540][ T4961] do_syscall_64+0x31/0x40 [ 203.513947][ T4961] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 203.519832][ T4961] RIP: 0033:0x7f28a0385969 [ 203.524238][ T4961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.543830][ T4961] RSP: 002b:00007f289e9ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.552240][ T4961] RAX: ffffffffffffffda RBX: 00007f28a05acfa0 RCX: 00007f28a0385969 [ 203.560209][ T4961] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 203.568184][ T4961] RBP: 00007f289e9ee090 R08: 0000200000000600 R09: 0000000000000000 [ 203.576144][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.584105][ T4961] R13: 0000000000000000 R14: 00007f28a05acfa0 R15: 00007ffd2316ff28 [ 203.865918][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:4' failed: Read-only file system [ 203.900408][ T4963] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.1169: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.915596][ T4963] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.1169: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.931147][ T4963] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1169: Failed to acquire dquot type 0 [ 203.943416][ T4963] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 203.953641][ T4963] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.1169: mark_inode_dirty error [ 203.965719][ T4963] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 203.976160][ T4963] EXT4-fs (loop4): 1 orphan inode deleted [ 203.982146][ T4963] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,noblock_validity,init_itable,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue [ 204.142918][ T4963] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 16: comm syz.4.1169: lblock 0 mapped to illegal pblock 16 (length 1) [ 204.167492][ T4963] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 16: comm syz.4.1169: lblock 0 mapped to illegal pblock 16 (length 1) [ 204.289660][ T1267] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.556759][ T2306] usb 10-1: USB disconnect, device number 11 [ 204.594204][ T1267] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 204.650279][ T2719] EXT4-fs error (device loop4): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 204.725430][ T2719] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 204.749349][ T2719] EXT4-fs error (device loop4): ext4_quota_off:6545: inode #3: comm syz-executor: mark_inode_dirty error [ 204.865666][ T4974] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1172'. [ 205.074852][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/SYZKALLER.tmp-b7:9' failed: Read-only file system [ 205.087524][ T4967] handle_bad_sector: 248 callbacks suppressed [ 205.087539][ T4967] attempt to access beyond end of device [ 205.087539][ T4967] loop9: rw=0, want=57848, limit=8192 [ 205.112213][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:9' failed: Read-only file system [ 205.128875][ T4967] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 205.137824][ T4967] FAT-fs (loop9): Filesystem has been set read-only [ 205.147595][ T4967] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 205.156239][ T4967] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 205.176859][ T4989] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 205.176859][ T4989] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 205.176859][ T4989] [ 205.197393][ T466] udevd[466]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 205.213560][ T4989] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 205.213756][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/SYZKALLER.tmp-b7:9' failed: Read-only file system [ 205.228982][ T2706] udevd[2706]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 205.250391][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:9' failed: Read-only file system [ 205.263392][ T4989] EXT4-fs (loop6): 1 truncate cleaned up [ 205.274971][ T4989] EXT4-fs (loop6): mounted filesystem without journal. Opts: noacl,inode_readahead_blks=0x0000000000004000,resuid=0x0000000000000000,noblock_validity,sb=0x0000000000001404,,errors=continue [ 205.437245][ T2708] udevd[2708]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:9' failed: Read-only file system [ 205.442703][ T466] udevd[466]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 205.451637][ T2708] udevd[2708]: symlink '../../loop3' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:9' failed: Read-only file system [ 205.472123][ T4998] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 205.480296][ T4998] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 205.491723][ T4998] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1179: corrupted in-inode xattr [ 205.504080][ T4998] EXT4-fs (loop4): Remounting filesystem read-only [ 205.716407][ T4998] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1179: couldn't read orphan inode 15 (err -117) [ 205.764272][ T5010] overlayfs: conflicting lowerdir path [ 205.769853][ T4998] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000000,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,nomblk_io_submit,grpquota,nodiscard, [ 205.875798][ T5020] syz.9.1185[5020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.875844][ T5020] syz.9.1185[5020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.560532][ T5018] tipc: Enabling of bearer rejected, failed to enable media [ 206.616060][ T5023] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1186'. [ 206.712319][ T5028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 206.726712][ T5028] overlayfs: filesystem on './bus' not supported as upperdir [ 206.749990][ T5028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 206.765546][ T5028] overlayfs: filesystem on './bus' not supported as upperdir [ 206.818085][ T5031] overlayfs: failed to resolve './file1': -2 [ 206.874931][ T24] kauditd_printk_skb: 117 callbacks suppressed [ 206.874945][ T24] audit: type=1326 audit(2000000009.660:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 206.904859][ T821] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 206.912727][ T24] audit: type=1326 audit(2000000009.660:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 206.928990][ T5038] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 206.964577][ T24] audit: type=1326 audit(2000000009.660:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 206.988493][ T24] audit: type=1326 audit(2000000009.700:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 207.088356][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 207.109746][ T24] audit: type=1326 audit(2000000009.700:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 207.434000][ T24] audit: type=1326 audit(2000000009.710:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 207.995123][ T24] audit: type=1326 audit(2000000009.710:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 208.075213][ T24] audit: type=1326 audit(2000000009.710:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 208.121165][ T24] audit: type=1326 audit(2000000009.710:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 208.144991][ T821] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.156209][ T24] audit: type=1326 audit(2000000009.710:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x7ffc0000 [ 208.189798][ T821] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 208.246119][ T5057] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1199'. [ 208.274252][ T1267] device bridge_slave_1 left promiscuous mode [ 208.280610][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.288694][ T1267] device bridge_slave_0 left promiscuous mode [ 208.294988][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.303447][ T1267] device veth1_macvtap left promiscuous mode [ 208.309979][ T1267] device veth0_vlan left promiscuous mode [ 208.416073][ T821] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.700245][ T5053] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.707397][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.714541][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.715650][ T821] usb 10-1: Product: syz [ 208.723895][ T5053] device bridge_slave_0 entered promiscuous mode [ 208.727217][ T821] usb 10-1: Manufacturer: syz [ 208.738039][ T821] usb 10-1: SerialNumber: syz [ 208.745614][ T5053] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.752689][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.760244][ T5053] device bridge_slave_1 entered promiscuous mode [ 208.775620][ T821] cdc_mbim 10-1:1.0: skipping garbage [ 208.822345][ T5053] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.829443][ T5053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.836767][ T5053] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.843814][ T5053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.876905][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.884685][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.892221][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.903136][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.911660][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.918763][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.010108][ T821] cdc_mbim 10-1:1.0: bind() failure [ 209.012204][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.028579][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.037580][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.044621][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.077658][ T5083] erofs: (device loop1): mounted with root inode @ nid 36. [ 209.111652][ T5083] attempt to access beyond end of device [ 209.111652][ T5083] loop1: rw=0, want=34359739352, limit=16 [ 209.124381][ T5083] attempt to access beyond end of device [ 209.124381][ T5083] loop1: rw=0, want=34359739352, limit=16 [ 209.230938][ T2706] udevd[2706]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 209.358651][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.454975][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.548672][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.650124][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.666947][ T5090] EXT4-fs (loop9): Test dummy encryption mode enabled [ 210.673867][ T5090] EXT4-fs (loop9): Mount option "noacl" will be removed by 3.5 [ 210.673867][ T5090] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 210.673867][ T5090] [ 210.691656][ T5090] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 210.698835][ T5090] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 210.741398][ T2706] udevd[2706]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 210.813559][ T5099] device bridge0 entered promiscuous mode [ 210.863251][ T5099] bridge0: port 3(macsec1) entered blocking state [ 210.940449][ T2706] udevd[2706]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 210.975469][ T5099] bridge0: port 3(macsec1) entered disabled state [ 211.078557][ T5090] EXT4-fs (loop9): 1 truncate cleaned up [ 211.084227][ T5090] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,barrier=0x0000000000000009,noacl,discard,mblk_io_submit,nolazytime,bsddf,max_batch_time=0x0000000000000995,sb=0x0000000000000010,,errors=continue [ 211.142718][ T466] udevd[466]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 211.309243][ T5099] device bridge0 left promiscuous mode [ 211.318393][ T5107] EXT4-fs (loop4): Test dummy encryption mode enabled [ 211.369630][ T5107] EXT4-fs error (device loop4): __ext4_iget:5007: inode #11: block 1: comm syz.4.1211: invalid block [ 211.381418][ T5107] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1211: couldn't read orphan inode 11 (err -117) [ 211.394472][ T5107] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 211.538344][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.550585][ T821] cdc_ncm 10-1:1.1: bind() failure [ 211.558205][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 211.565357][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.710397][ T466] udevd[466]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 211.757985][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.786968][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.008359][ T5053] device veth0_vlan entered promiscuous mode [ 212.031803][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.058628][ T5116] FAT-fs (loop9): Unrecognized mount option "nonumdail=0" or missing value [ 212.096233][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.250355][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.312154][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.419209][ T5053] device veth1_macvtap entered promiscuous mode [ 212.519791][ T821] usb 10-1: USB disconnect, device number 12 [ 212.535903][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.555710][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.571113][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.621373][ T5127] x_tables: duplicate underflow at hook 1 [ 212.640950][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.655234][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.740858][ T5141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1219'. [ 213.191046][ T5148] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 213.191046][ T5148] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 213.191046][ T5148] [ 213.245868][ T2706] udevd[2706]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 213.294835][ T24] kauditd_printk_skb: 97 callbacks suppressed [ 213.294862][ T24] audit: type=1400 audit(2000000016.080:4147): avc: denied { mounton } for pid=5150 comm="syz.9.1222" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 213.364990][ T5148] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nouser_xattr,,errors=continue [ 213.377033][ T5148] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.471637][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 213.773022][ T24] audit: type=1400 audit(2000000016.200:4148): avc: denied { ioctl } for pid=5140 comm="syz.1.1219" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.023248][ T5166] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 214.286062][ T5170] raw_sendmsg: syz.0.1227 forgot to set AF_INET. Fix it! [ 214.300541][ T5170] 9pnet: Insufficient options for proto=fd [ 214.308924][ T5170] 9pnet: Insufficient options for proto=fd [ 214.365473][ T5168] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 214.365473][ T5168] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 214.365473][ T5168] [ 214.386644][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 214.410371][ T5164] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 214.417906][ T5164] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 214.427425][ T5164] F2FS-fs (loop4): invalid crc value [ 214.432936][ T5168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.446449][ T5168] EXT4-fs (loop1): 1 truncate cleaned up [ 214.453673][ T5168] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,nouser_xattr,grpid,,errors=continue [ 214.478309][ T5164] F2FS-fs (loop4): Found nat_bits in checkpoint [ 214.508825][ T5164] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 214.515709][ T5164] F2FS-fs (loop4): Start checkpoint disabled! [ 214.523044][ T5164] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 214.530449][ T5164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 214.541571][ T2706] udevd[2706]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 214.562887][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 214.565894][ T466] udevd[466]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 214.578837][ T5168] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1226: corrupted in-inode xattr [ 214.626754][ T5168] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1753: inode #15: comm syz.1.1226: unable to update i_inline_off [ 214.632427][ T1264] attempt to access beyond end of device [ 214.632427][ T1264] loop4: rw=2049, want=40976, limit=40427 [ 214.673765][ T5168] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #15: comm syz.1.1226: corrupted in-inode xattr [ 214.686784][ T24] audit: type=1400 audit(2000000017.480:4149): avc: denied { rmdir } for pid=5167 comm="syz.1.1226" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.711283][ T5196] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1226: corrupted in-inode xattr [ 214.777444][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 214.859644][ T2706] udevd[2706]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 215.110143][ T24] audit: type=1400 audit(2000000017.900:4150): avc: denied { unmount } for pid=3850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 215.346161][ T5205] erofs: Unknown parameter 'ÿÿÿÿ' [ 215.352169][ T24] audit: type=1400 audit(2000000018.140:4151): avc: denied { create } for pid=5204 comm="syz.4.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 215.352713][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 215.442299][ T24] audit: type=1326 audit(2000000018.180:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 215.466592][ T24] audit: type=1326 audit(2000000018.180:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 215.532514][ T24] audit: type=1326 audit(2000000018.180:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 215.573220][ T24] audit: type=1326 audit(2000000018.180:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 215.607343][ T24] audit: type=1326 audit(2000000018.180:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 215.678412][ T5213] F2FS-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 215.681876][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 215.797976][ T5224] overlayfs: unrecognized mount option "userxattr" or missing value [ 215.815226][ T826] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 215.834323][ T5232] futex_wake_op: syz.5.1243 tries to shift op by -1; fix this program [ 215.848656][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 215.969951][ T5232] netlink: 'syz.5.1243': attribute type 5 has an invalid length. [ 215.979099][ T5232] device ip6erspan0 entered promiscuous mode [ 216.109447][ T5245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1245'. [ 216.195284][ T826] usb 10-1: device descriptor read/64, error -71 [ 216.311749][ T5247] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 216.595185][ T826] usb 10-1: device descriptor read/64, error -71 [ 216.601978][ T821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.875119][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 216.895131][ T826] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 217.015723][ T821] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.032201][ T821] usb 2-1: config 0 has no interface number 0 [ 217.185496][ T826] usb 10-1: device descriptor read/64, error -71 [ 217.226262][ T821] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.250636][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.349913][ T821] usb 2-1: Product: syz [ 217.391313][ T821] usb 2-1: Manufacturer: syz [ 217.435593][ T821] usb 2-1: SerialNumber: syz [ 217.568009][ T821] usb 2-1: config 0 descriptor?? [ 217.575194][ T826] usb 10-1: device descriptor read/64, error -71 [ 217.915581][ T826] usb usb10-port1: attempt power cycle [ 217.921673][ T821] smsc95xx v2.0.0 [ 218.335219][ T826] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 218.413377][ T2062] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 218.419962][ T821] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 218.431803][ T821] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 218.525098][ T826] usb 10-1: device descriptor read/8, error -71 [ 218.557168][ T5278] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.655181][ T2062] usb 5-1: Using ep0 maxpacket: 16 [ 218.766296][ T826] usb 10-1: device descriptor read/8, error -71 [ 218.778821][ T5285] EXT4-fs (loop9): Test dummy encryption mode enabled [ 218.805316][ T2062] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.807998][ T2706] udevd[2706]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 218.828661][ T2062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 218.841720][ T5285] EXT4-fs error (device loop9): __ext4_iget:5007: inode #11: block 1: comm syz.9.1258: invalid block [ 218.854611][ T5285] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.1258: couldn't read orphan inode 11 (err -117) [ 218.869059][ T5285] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000e29,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,nodioread_nolock,journal_dev=0x0000000000000008,acl,,errors=continue [ 218.905609][ T2062] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 218.915231][ T2062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.052559][ T2062] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 219.715187][ T821] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 219.726810][ T821] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 219.735803][ T821] usb 2-1: USB disconnect, device number 14 [ 219.807943][ T2058] usb 5-1: USB disconnect, device number 29 [ 219.847316][ T5296] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 219.860039][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/75500962-132d-43aa-bb98-c3833f701d6f.tmp-b7:1' failed: Read-only file system [ 220.496532][ T5299] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1259'. [ 220.496940][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 220.496955][ T24] audit: type=1326 audit(2000000023.290:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.586800][ T24] audit: type=1326 audit(2000000023.330:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.612421][ T24] audit: type=1326 audit(2000000023.330:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.636069][ T24] audit: type=1326 audit(2000000023.330:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.676482][ T5312] fuse: Bad value for 'group_id' [ 220.688579][ T5313] 9pnet: Insufficient options for proto=fd [ 220.715222][ T24] audit: type=1326 audit(2000000023.330:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.755105][ T24] audit: type=1326 audit(2000000023.330:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.785388][ T24] audit: type=1326 audit(2000000023.330:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.820068][ T24] audit: type=1326 audit(2000000023.330:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.843875][ T24] audit: type=1326 audit(2000000023.330:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.867900][ T24] audit: type=1326 audit(2000000023.330:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f094bee9969 code=0x7ffc0000 [ 220.948071][ T5317] erofs: (device loop9): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 220.960131][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-uuid/b90ffb29-0f69-4fbb-9730-eedcb9c04b39.tmp-b7:9' failed: Read-only file system [ 221.048509][ T5334] syz.5.1270[5334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.048580][ T5334] syz.5.1270[5334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.109345][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 221.148829][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 221.162771][ T5338] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 221.165501][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 221.190155][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 221.223831][ T5347] overlayfs: failed to clone upperpath [ 221.241163][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 221.485378][ T5353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1276'. [ 221.963195][ T5369] syz.4.1281[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.963260][ T5369] syz.4.1281[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.975646][ T5369] syz.4.1281[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.987858][ T5369] syz.4.1281[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.000136][ T5369] syz.4.1281[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.043924][ T5369] syz.4.1281[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.358471][ T5372] EXT4-fs (loop9): Test dummy encryption mode enabled [ 222.427598][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 222.496821][ T5372] EXT4-fs error (device loop9): __ext4_iget:5007: inode #11: block 1: comm syz.9.1280: invalid block [ 222.508544][ T5372] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.1280: couldn't read orphan inode 11 (err -117) [ 222.521456][ T5372] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000006,bsddf,nodiscard,data_err=abort,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 223.079076][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 223.397995][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 223.412459][ T5388] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 223.752060][ T5398] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,stripe=0x0000000000000f62,max_batch_time=0x0000000000200000,stripe=0x0000000000000007,,errors=continue [ 224.094105][ T5388] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1287: bg 0: block 234: padding at end of block bitmap is not set [ 224.407207][ T5388] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 80 with error 28 [ 224.427508][ T5388] EXT4-fs (loop4): This should not happen!! Data will be lost [ 224.427508][ T5388] [ 224.437252][ T5388] EXT4-fs (loop4): Total free blocks count 0 [ 224.443239][ T5388] EXT4-fs (loop4): Free/Dirty block details [ 224.449169][ T5388] EXT4-fs (loop4): free_blocks=0 [ 224.454114][ T5388] EXT4-fs (loop4): dirty_blocks=80 [ 224.459256][ T5388] EXT4-fs (loop4): Block reservation details [ 224.465288][ T5388] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 224.586458][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 224.644562][ T5427] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1293'. [ 224.940652][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 224.952207][ T2062] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 225.635065][ T2062] usb 10-1: Using ep0 maxpacket: 32 [ 225.708745][ T24] kauditd_printk_skb: 97 callbacks suppressed [ 225.708760][ T24] audit: type=1400 audit(2000000028.500:4300): avc: denied { map } for pid=5438 comm="syz.1.1299" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 225.739163][ T24] audit: type=1400 audit(2000000028.510:4301): avc: denied { call } for pid=5438 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 225.755170][ T2062] usb 10-1: descriptor type invalid, skip [ 225.764070][ T2062] usb 10-1: descriptor type invalid, skip [ 225.771571][ T2062] usb 10-1: descriptor type invalid, skip [ 225.777579][ T2062] usb 10-1: descriptor type invalid, skip [ 225.783399][ T2062] usb 10-1: descriptor type invalid, skip [ 225.855678][ T5439] erofs: (device loop1): mounted with root inode @ nid 36. [ 225.869377][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 225.915316][ T2062] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.939749][ T2062] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.956885][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 225.977722][ T2062] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.975128][ T2062] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.994468][ T2062] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.045147][ T2062] usb 10-1: can't set config #1, error -71 [ 228.056480][ T2062] usb 10-1: USB disconnect, device number 17 [ 228.187186][ T5467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1308'. [ 228.465894][ T5466] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.563468][ T5462] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 228.575137][ T5462] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.582507][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 228.603196][ T5462] F2FS-fs (loop1): invalid crc value [ 228.606610][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 228.699687][ T5462] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.739868][ T5462] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 228.747026][ T5462] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.087359][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 229.166580][ T24] audit: type=1400 audit(2000000031.960:4302): avc: denied { getopt } for pid=5488 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.393003][ T9] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.184041][ T466] udevd[466]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 230.437683][ T2706] udevd[2706]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 230.883088][ T24] audit: type=1400 audit(2000000033.670:4303): avc: denied { nlmsg_read } for pid=5539 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 231.211583][ T5562] binder: 5561:5562 ioctl c0306201 0 returned -14 [ 231.270328][ T5569] binder: 5561:5569 ioctl c0306201 0 returned -14 [ 231.455425][ T5573] hub 9-0:1.0: USB hub found [ 231.460370][ T5573] hub 9-0:1.0: 1 port detected [ 232.281104][ T24] audit: type=1400 audit(2000000035.070:4304): avc: denied { sys_module } for pid=5581 comm="syz.9.1346" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 234.416767][ T24] audit: type=1400 audit(2000000036.540:4305): avc: denied { sys_admin } for pid=5616 comm="syz.1.1359" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 234.496024][ T24] audit: type=1400 audit(2000000037.280:4306): avc: denied { remount } for pid=5625 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 234.552699][ T24] audit: type=1400 audit(2000000037.330:4307): avc: denied { ioctl } for pid=5629 comm="syz.9.1364" path="uts:[4026532554]" dev="nsfs" ino=4026532554 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 234.693572][ T24] audit: type=1400 audit(2000000037.480:4308): avc: denied { read } for pid=5620 comm="syz.0.1360" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 234.717231][ T24] audit: type=1400 audit(2000000037.480:4309): avc: denied { open } for pid=5620 comm="syz.0.1360" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 234.883366][ T24] audit: type=1400 audit(2000000037.510:4310): avc: denied { ioctl } for pid=5620 comm="syz.0.1360" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.846029][ T5633] F2FS-fs (loop1): fault_injection options not supported [ 235.940490][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 236.055400][ T5633] F2FS-fs (loop1): invalid crc value [ 236.066681][ T5633] F2FS-fs (loop1): Found nat_bits in checkpoint [ 236.095925][ T5633] F2FS-fs (loop1): Start checkpoint disabled! [ 236.103073][ T5633] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 236.120386][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 236.120741][ T5633] attempt to access beyond end of device [ 236.120741][ T5633] loop1: rw=2049, want=77960, limit=40427 [ 236.148373][ T24] audit: type=1400 audit(2000000038.940:4311): avc: denied { unlink } for pid=5631 comm="syz.1.1363" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 236.185295][ T289] attempt to access beyond end of device [ 236.185295][ T289] loop1: rw=2049, want=40976, limit=40427 [ 236.288612][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 237.735159][ T2062] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 238.050245][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 238.088959][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 238.099273][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 238.109300][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 238.292864][ T2062] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 238.375108][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.392247][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.403531][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.410555][ T5723] attempt to access beyond end of device [ 238.410555][ T5723] loop1: rw=2049, want=1041, limit=128 [ 238.493057][ T5722] attempt to access beyond end of device [ 238.493057][ T5722] loop1: rw=524288, want=369, limit=128 [ 238.568079][ T5723] attempt to access beyond end of device [ 238.568079][ T5723] loop1: rw=0, want=153, limit=128 [ 238.579672][ T5723] attempt to access beyond end of device [ 238.579672][ T5723] loop1: rw=0, want=153, limit=128 [ 238.592055][ T5723] attempt to access beyond end of device [ 238.592055][ T5723] loop1: rw=0, want=153, limit=128 [ 238.604128][ T5723] attempt to access beyond end of device [ 238.604128][ T5723] loop1: rw=0, want=153, limit=128 [ 238.696764][ T5723] attempt to access beyond end of device [ 238.696764][ T5723] loop1: rw=0, want=153, limit=128 [ 238.708118][ T5723] attempt to access beyond end of device [ 238.708118][ T5723] loop1: rw=0, want=153, limit=128 [ 238.735101][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.747391][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.771718][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.865215][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.885534][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.915079][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.995399][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.016284][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.053323][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.155261][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.171605][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.214922][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.335627][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.358104][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.429414][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.121705][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.130690][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.141912][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.225191][ T2062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.234271][ T2062] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.252510][ T2062] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.700480][ T5762] device ip6tnl1 entered promiscuous mode [ 240.785117][ T2062] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 240.798382][ T2062] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 240.821719][ T2062] usb 5-1: Product: syz [ 240.834731][ T2062] usb 5-1: config 0 descriptor?? [ 240.865132][ T2062] usb 5-1: can't set config #0, error -71 [ 240.874132][ T2062] usb 5-1: USB disconnect, device number 30 [ 241.974670][ T24] audit: type=1400 audit(2000000044.760:4312): avc: denied { create } for pid=5792 comm="syz.1.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 241.996879][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 242.078760][ T5798] netlink: 'syz.5.1421': attribute type 12 has an invalid length. [ 242.141870][ T24] audit: type=1326 audit(2000000044.930:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.5.1424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f047300c969 code=0x0 [ 242.190587][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 242.208700][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 242.223606][ T5807] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 242.233254][ T5807] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.249982][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 244.478162][ T24] audit: type=1400 audit(2000000047.270:4314): avc: denied { create } for pid=5859 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.605759][ T5864] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 244.664560][ T5864] FAT-fs (loop9): Filesystem has been set read-only [ 244.670231][ T24] audit: type=1400 audit(2000000047.460:4315): avc: denied { ioctl } for pid=5859 comm="syz.4.1442" path="socket:[37474]" dev="sockfs" ino=37474 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.740093][ T24] audit: type=1400 audit(2000000047.460:4316): avc: denied { accept } for pid=5859 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 246.145161][ T299] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 246.510374][ T24] audit: type=1400 audit(2000000049.300:4317): avc: denied { ioctl } for pid=5923 comm="syz.5.1465" path="socket:[36737]" dev="sockfs" ino=36737 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.525171][ T299] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.544426][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 246.555264][ T824] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 246.574398][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1467'. [ 246.593706][ T299] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.607774][ T5926] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.619627][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 246.635116][ T299] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 246.656832][ T299] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.679245][ T299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.736282][ T5926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 246.747955][ T5926] System zones: 1-12 [ 246.753359][ T5926] EXT4-fs (loop4): 1 truncate cleaned up [ 246.759138][ T5926] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue [ 246.778539][ T5902] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 246.831090][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 246.937678][ T299] hub 10-1:1.0: bad descriptor, ignoring hub [ 246.943827][ T299] hub: probe of 10-1:1.0 failed with error -5 [ 246.950224][ T299] cdc_wdm 10-1:1.0: skipping garbage [ 246.955666][ T299] cdc_wdm 10-1:1.0: skipping garbage [ 246.962007][ T299] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 247.115374][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 247.230929][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.242444][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 247.415311][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 247.465186][ T824] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 247.474459][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.482946][ T824] usb 2-1: Product: syz [ 247.487267][ T824] usb 2-1: Manufacturer: syz [ 247.491921][ T824] usb 2-1: SerialNumber: syz [ 247.500248][ T824] usb 2-1: config 0 descriptor?? [ 247.535277][ T2058] usb 10-1: USB disconnect, device number 18 [ 248.995062][ T2058] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 249.044191][ T5910] udc-core: couldn't find an available UDC or it's busy [ 249.051390][ T5910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 249.355144][ T2058] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.365358][ T2058] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.378561][ T2058] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.387661][ T2058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.073648][ T2058] usb 2-1: USB disconnect, device number 15 [ 250.475066][ T2058] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 250.661443][ T24] audit: type=1400 audit(2000000053.450:4318): avc: denied { create } for pid=6001 comm="syz.5.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.735079][ T2058] usb 2-1: Using ep0 maxpacket: 32 [ 251.346021][ T2058] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 251.363557][ T2058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.425714][ T2058] usb 2-1: config 0 descriptor?? [ 251.830174][ T824] usb 5-1: USB disconnect, device number 31 [ 252.111883][ T6008] overlayfs: failed to clone upperpath [ 253.094803][ T408] usb 2-1: USB disconnect, device number 16 [ 253.127031][ T6063] tipc: Enabling of bearer rejected, failed to enable media [ 253.914044][ T24] audit: type=1400 audit(2000000056.700:4319): avc: denied { create } for pid=6086 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 254.719127][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 254.742152][ T6099] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 254.751055][ T6099] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 254.766274][ T6099] EXT4-fs (loop1): mount failed [ 255.676064][ T24] audit: type=1400 audit(2000000058.470:4320): avc: denied { create } for pid=6125 comm="syz.1.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.928442][ T6145] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 256.670754][ T6164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1025 (2050 ns) > initial count (14 ns). Using initial count to start timer. [ 257.052405][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 257.074859][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 257.216339][ T6177] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 257.230265][ T6177] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.248762][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 257.710610][ T6186] F2FS-fs (loop1): invalid crc value [ 257.722331][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 257.756581][ T6186] F2FS-fs (loop1): Found nat_bits in checkpoint [ 257.764208][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 257.813368][ T6186] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 257.827962][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 258.434693][ T6219] overlayfs: conflicting lowerdir path [ 258.736282][ T24] audit: type=1400 audit(2000000061.200:4321): avc: denied { setattr } for pid=6185 comm="syz.1.1560" name="work" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 258.804095][ T3850] handle_bad_sector: 12823 callbacks suppressed [ 258.804110][ T3850] attempt to access beyond end of device [ 258.804110][ T3850] loop1: rw=2049, want=45120, limit=40427 [ 258.844219][ T24] audit: type=1400 audit(2000000061.210:4322): avc: denied { rename } for pid=6185 comm="syz.1.1560" name="#1c" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.962988][ T24] audit: type=1400 audit(2000000061.220:4323): avc: denied { unlink } for pid=6185 comm="syz.1.1560" name="#1c" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.584927][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 259.694664][ T6253] input: syz1 as /devices/virtual/input/input19 [ 259.800749][ T6264] 8021q: VLANs not supported on ip6gre0 [ 259.814797][ T24] audit: type=1400 audit(2000000062.590:4324): avc: denied { create } for pid=6263 comm="syz.9.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.907676][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 259.923105][ T6273] EXT4-fs error (device loop9): ext4_map_blocks:630: inode #2: block 3: comm syz.9.1590: lblock 0 mapped to illegal pblock 3 (length 1) [ 259.937765][ T6273] EXT4-fs (loop9): Remounting filesystem read-only [ 259.951674][ T6273] EXT4-fs warning (device loop9): dx_probe:796: inode #2: lblock 0: comm syz.9.1590: error -117 reading directory block [ 259.964554][ T2062] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 259.972361][ T6273] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 259.981166][ T6273] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,discard,abort,nodelalloc,user_xattr,grpjquota=.max_batch_time=0x0000000000000003,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 260.023018][ T6276] EXT4-fs (loop1): Ignoring removed bh option [ 260.033175][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 260.046546][ T6276] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 260.058729][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 260.071672][ T6273] EXT4-fs error (device loop9): ext4_remount:5878: Abort forced by user [ 260.082750][ T2706] udevd[2706]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 260.095610][ T6273] EXT4-fs (loop9): Remounting filesystem read-only [ 260.109826][ T6273] EXT4-fs (loop9): re-mounted. Opts: dioread_lock,discard,abort,nodelalloc,user_xattr,grpjquota=.max_batch_time=0x0000000000000003,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 260.127005][ T6276] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1585: corrupted in-inode xattr [ 260.139334][ T6276] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1585: couldn't read orphan inode 15 (err -117) [ 260.151786][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 260.228317][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 260.271491][ T6281] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 260.575141][ T2062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 260.584308][ T2062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.592972][ T2062] usb 5-1: Product: syz [ 260.603366][ T2062] usb 5-1: Manufacturer: syz [ 260.608339][ T2062] usb 5-1: SerialNumber: syz [ 261.156757][ T2062] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 261.260378][ T24] audit: type=1400 audit(2000000064.050:4325): avc: denied { bind } for pid=6297 comm="syz.9.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 261.326742][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:9' failed: Read-only file system [ 261.361061][ T299] usb 5-1: USB disconnect, device number 32 [ 261.405433][ T299] usblp0: removed [ 261.410247][ T6301] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 261.435693][ T6301] EXT4-fs (loop9): orphan cleanup on readonly fs [ 261.442139][ T6301] EXT4-fs error (device loop9): ext4_ext_check_inode:500: inode #3: comm syz.9.1597: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 261.506419][ T6301] EXT4-fs error (device loop9): ext4_quota_enable:6450: comm syz.9.1597: Bad quota inode: 3, type: 0 [ 261.520468][ T6301] EXT4-fs warning (device loop9): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 261.544810][ T6301] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 261.551966][ T6301] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,grpquota,nouid32,nodelalloc,abort,data=ordered,barrier,journal_dev=0x0000000000000f35,,errors=continue [ 261.574058][ T24] audit: type=1400 audit(2000000064.370:4326): avc: denied { watch watch_reads } for pid=6300 comm="syz.9.1597" path="/134/file1" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 261.607017][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:9' failed: Read-only file system [ 261.661830][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 261.661941][ T6312] EXT4-fs (loop9): Test dummy encryption mode enabled [ 261.678627][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 261.691020][ T6312] EXT4-fs (loop9): Mount option "dioread_nolock" incompatible with ext3 [ 261.697375][ T2708] udevd[2708]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 263.466012][ T6350] FAT-fs (loop4): Unrecognized mount option "dmask=0100000L000000000000000" or missing value [ 265.454519][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 265.489676][ T6371] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 265.505668][ T824] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 265.526208][ T6371] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.568360][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 265.662987][ T6371] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 265.680758][ T6371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 265.730734][ T6371] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 265.742998][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 265.754682][ T6371] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 265.764188][ T6371] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue [ 265.792968][ T2708] udevd[2708]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 265.905202][ T824] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 265.916444][ T824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.930419][ T824] usb 5-1: config 0 descriptor?? [ 266.437522][ T6398] xt_time: unknown flags 0xc [ 267.279069][ T6410] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1631'. [ 267.337644][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 267.348607][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1632'. [ 267.438096][ T6416] /dev/loop0: Can't open blockdev [ 267.493654][ T2058] usb 5-1: USB disconnect, device number 33 [ 269.245719][ T24] audit: type=1400 audit(2000000072.040:4327): avc: denied { execute } for pid=6455 comm="syz.0.1646" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.322486][ T2708] udevd[2708]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 269.379831][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 269.426973][ T6467] ================================================================== [ 269.435092][ T6467] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 269.443249][ T6467] Read of size 8 at addr ffff88810b30b2c0 by task syz.0.1651/6467 [ 269.451052][ T6467] [ 269.453393][ T6467] CPU: 0 PID: 6467 Comm: syz.0.1651 Tainted: G W 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 269.464674][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.474732][ T6467] Call Trace: [ 269.478040][ T6467] __dump_stack+0x21/0x24 [ 269.482391][ T6467] dump_stack_lvl+0x169/0x1d8 [ 269.487089][ T6467] ? show_regs_print_info+0x18/0x18 [ 269.492307][ T6467] ? thaw_kernel_threads+0x220/0x220 [ 269.497618][ T6467] print_address_description+0x7f/0x2c0 [ 269.503186][ T6467] ? tc_setup_flow_action+0x842/0x3280 [ 269.508657][ T6467] kasan_report+0xe2/0x130 [ 269.513088][ T6467] ? flow_action_cookie_create+0x28/0x90 [ 269.518732][ T6467] ? tc_setup_flow_action+0x842/0x3280 [ 269.524209][ T6467] __asan_report_load8_noabort+0x14/0x20 [ 269.529868][ T6467] tc_setup_flow_action+0x842/0x3280 [ 269.535167][ T6467] ? __kmalloc+0x1a7/0x330 [ 269.539600][ T6467] ? flow_rule_alloc+0x32/0x2c0 [ 269.544472][ T6467] mall_replace_hw_filter+0x293/0x810 [ 269.549864][ T6467] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 269.555955][ T6467] ? mall_set_parms+0x410/0x410 [ 269.560835][ T6467] ? tcf_exts_destroy+0xb0/0xb0 [ 269.565689][ T6467] ? pcpu_alloc+0xf8a/0x16b0 [ 269.570275][ T6467] ? mall_set_parms+0x19d/0x410 [ 269.575118][ T6467] mall_change+0x528/0x750 [ 269.579527][ T6467] ? __kasan_check_write+0x14/0x20 [ 269.584627][ T6467] ? mall_get+0xa0/0xa0 [ 269.588773][ T6467] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 269.594658][ T6467] ? nla_strcmp+0xf4/0x140 [ 269.599076][ T6467] tc_new_tfilter+0x13f6/0x1a10 [ 269.603915][ T6467] ? mall_get+0xa0/0xa0 [ 269.608062][ T6467] ? tcf_gate_entry_destructor+0x20/0x20 [ 269.613684][ T6467] ? security_capable+0x87/0xb0 [ 269.618524][ T6467] ? ns_capable+0x8c/0xf0 [ 269.622843][ T6467] ? netlink_net_capable+0x125/0x160 [ 269.628123][ T6467] ? tcf_gate_entry_destructor+0x20/0x20 [ 269.633744][ T6467] rtnetlink_rcv_msg+0x800/0xb90 [ 269.638672][ T6467] ? rtnetlink_bind+0x80/0x80 [ 269.643334][ T6467] ? arch_stack_walk+0xee/0x140 [ 269.648176][ T6467] ? stack_trace_save+0x98/0xe0 [ 269.653019][ T6467] ? stack_trace_snprint+0xf0/0xf0 [ 269.658122][ T6467] ? memcpy+0x56/0x70 [ 269.662093][ T6467] ? avc_has_perm+0x234/0x360 [ 269.666758][ T6467] ? __kasan_slab_alloc+0xbd/0xf0 [ 269.671777][ T6467] ? slab_post_alloc_hook+0x5d/0x2f0 [ 269.677052][ T6467] ? ___sys_sendmsg+0x1f0/0x260 [ 269.681892][ T6467] ? avc_has_perm_noaudit+0x240/0x240 [ 269.687256][ T6467] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 269.692630][ T6467] netlink_rcv_skb+0x1e0/0x430 [ 269.697391][ T6467] ? rtnetlink_bind+0x80/0x80 [ 269.702056][ T6467] ? netlink_ack+0xb80/0xb80 [ 269.706658][ T6467] ? __netlink_lookup+0x387/0x3b0 [ 269.711691][ T6467] rtnetlink_rcv+0x1c/0x20 [ 269.716114][ T6467] netlink_unicast+0x87c/0xa40 [ 269.720878][ T6467] netlink_sendmsg+0x88d/0xb30 [ 269.725632][ T6467] ? schedule_preempt_disabled+0x20/0x20 [ 269.731256][ T6467] ? netlink_getsockopt+0x530/0x530 [ 269.736449][ T6467] ? security_socket_sendmsg+0x82/0xa0 [ 269.741904][ T6467] ? netlink_getsockopt+0x530/0x530 [ 269.747096][ T6467] ____sys_sendmsg+0x5a2/0x8c0 [ 269.751862][ T6467] ? __sys_sendmsg_sock+0x40/0x40 [ 269.756883][ T6467] ? import_iovec+0x7c/0xb0 [ 269.761382][ T6467] ___sys_sendmsg+0x1f0/0x260 [ 269.766055][ T6467] ? __sys_sendmsg+0x250/0x250 [ 269.770947][ T6467] ? __fdget+0x1a1/0x230 [ 269.775192][ T6467] __x64_sys_sendmsg+0x1e2/0x2a0 [ 269.780128][ T6467] ? ___sys_sendmsg+0x260/0x260 [ 269.785135][ T6467] ? switch_fpu_return+0x197/0x340 [ 269.790248][ T6467] do_syscall_64+0x31/0x40 [ 269.794651][ T6467] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 269.800552][ T6467] RIP: 0033:0x7fc0bfee1969 [ 269.804972][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.824574][ T6467] RSP: 002b:00007fc0be54a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.832985][ T6467] RAX: ffffffffffffffda RBX: 00007fc0c0108fa0 RCX: 00007fc0bfee1969 [ 269.840952][ T6467] RDX: 0000000004000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 269.848919][ T6467] RBP: 00007fc0bff63ab1 R08: 0000000000000000 R09: 0000000000000000 [ 269.856894][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.864861][ T6467] R13: 0000000000000000 R14: 00007fc0c0108fa0 R15: 00007fff36e1d898 [ 269.872832][ T6467] [ 269.875156][ T6467] Allocated by task 6467: [ 269.879484][ T6467] __kasan_kmalloc+0xda/0x110 [ 269.884150][ T6467] __kmalloc+0x1a7/0x330 [ 269.888386][ T6467] tcf_idr_create+0x5f/0x790 [ 269.892971][ T6467] tcf_idr_create_from_flags+0x61/0x70 [ 269.898418][ T6467] tcf_gact_init+0x2b4/0x520 [ 269.903014][ T6467] tcf_action_init_1+0x3e1/0x670 [ 269.908062][ T6467] tcf_action_init+0x1e6/0x700 [ 269.912813][ T6467] tcf_exts_validate+0x215/0x510 [ 269.917761][ T6467] mall_set_parms+0x4b/0x410 [ 269.922347][ T6467] mall_change+0x45c/0x750 [ 269.926762][ T6467] tc_new_tfilter+0x13f6/0x1a10 [ 269.931615][ T6467] rtnetlink_rcv_msg+0x800/0xb90 [ 269.936545][ T6467] netlink_rcv_skb+0x1e0/0x430 [ 269.941404][ T6467] rtnetlink_rcv+0x1c/0x20 [ 269.945817][ T6467] netlink_unicast+0x87c/0xa40 [ 269.950575][ T6467] netlink_sendmsg+0x88d/0xb30 [ 269.955330][ T6467] ____sys_sendmsg+0x5a2/0x8c0 [ 269.960220][ T6467] ___sys_sendmsg+0x1f0/0x260 [ 269.964896][ T6467] __x64_sys_sendmsg+0x1e2/0x2a0 [ 269.969842][ T6467] do_syscall_64+0x31/0x40 [ 269.974256][ T6467] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 269.980133][ T6467] [ 269.982453][ T6467] Last potentially related work creation: [ 269.988167][ T6467] kasan_save_stack+0x3a/0x60 [ 269.992839][ T6467] __kasan_record_aux_stack+0xd2/0x100 [ 269.998292][ T6467] kasan_record_aux_stack_noalloc+0xb/0x10 [ 270.004094][ T6467] kvfree_call_rcu+0x10c/0x620 [ 270.008853][ T6467] ip_ma_put+0xf7/0x140 [ 270.013001][ T6467] __ip_mc_dec_group+0x44e/0x520 [ 270.017939][ T6467] ip_mc_down+0x1b0/0x240 [ 270.022268][ T6467] ip_mc_destroy_dev+0x58/0x2f0 [ 270.027111][ T6467] inetdev_event+0x620/0x1030 [ 270.031787][ T6467] raw_notifier_call_chain+0x90/0x100 [ 270.037180][ T6467] call_netdevice_notifiers_mtu+0x12d/0x1b0 [ 270.043068][ T6467] dev_set_mtu_ext+0x435/0x600 [ 270.047831][ T6467] do_setlink+0x853/0x3ab0 [ 270.052238][ T6467] rtnl_setlink+0x347/0x3f0 [ 270.056737][ T6467] rtnetlink_rcv_msg+0x9db/0xb90 [ 270.061681][ T6467] netlink_rcv_skb+0x1e0/0x430 [ 270.066443][ T6467] rtnetlink_rcv+0x1c/0x20 [ 270.070854][ T6467] netlink_unicast+0x87c/0xa40 [ 270.075608][ T6467] netlink_sendmsg+0x88d/0xb30 [ 270.080370][ T6467] sock_write_iter+0x29c/0x380 [ 270.085127][ T6467] do_iter_readv_writev+0x491/0x600 [ 270.090315][ T6467] do_iter_write+0x189/0x630 [ 270.094898][ T6467] vfs_writev+0x293/0x4f0 [ 270.099218][ T6467] do_writev+0x14a/0x2b0 [ 270.103450][ T6467] __x64_sys_writev+0x7d/0x90 [ 270.108120][ T6467] do_syscall_64+0x31/0x40 [ 270.112534][ T6467] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 270.118409][ T6467] [ 270.120733][ T6467] Second to last potentially related work creation: [ 270.127358][ T6467] kasan_save_stack+0x3a/0x60 [ 270.132034][ T6467] __kasan_record_aux_stack+0xd2/0x100 [ 270.137486][ T6467] kasan_record_aux_stack_noalloc+0xb/0x10 [ 270.143286][ T6467] kvfree_call_rcu+0x10c/0x620 [ 270.148057][ T6467] drop_sysctl_table+0x2ef/0x410 [ 270.152991][ T6467] unregister_sysctl_table+0x75/0x120 [ 270.158371][ T6467] unregister_net_sysctl_table+0x15/0x20 [ 270.163993][ T6467] nf_ct_net_exit+0x60/0xb0 [ 270.168490][ T6467] cleanup_net+0x586/0xb70 [ 270.172893][ T6467] process_one_work+0x6e1/0xba0 [ 270.177736][ T6467] worker_thread+0xa6a/0x13b0 [ 270.182403][ T6467] kthread+0x346/0x3d0 [ 270.186482][ T6467] ret_from_fork+0x1f/0x30 [ 270.190882][ T6467] [ 270.193206][ T6467] The buggy address belongs to the object at ffff88810b30b200 [ 270.193206][ T6467] which belongs to the cache kmalloc-192 of size 192 [ 270.207253][ T6467] The buggy address is located 0 bytes to the right of [ 270.207253][ T6467] 192-byte region [ffff88810b30b200, ffff88810b30b2c0) [ 270.220858][ T6467] The buggy address belongs to the page: [ 270.226485][ T6467] page:ffffea00042cc2c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b30b [ 270.236710][ T6467] flags: 0x4000000000000200(slab) [ 270.241730][ T6467] raw: 4000000000000200 ffffea0004412f40 0000000500000005 ffff888100043380 [ 270.250308][ T6467] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 270.258878][ T6467] page dumped because: kasan: bad access detected [ 270.265366][ T6467] page_owner tracks the page as allocated [ 270.271081][ T6467] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 292, ts 62348910101, free_ts 62304259378 [ 270.286954][ T6467] prep_new_page+0x179/0x180 [ 270.291538][ T6467] get_page_from_freelist+0x2235/0x23d0 [ 270.297074][ T6467] __alloc_pages_nodemask+0x268/0x5f0 [ 270.302438][ T6467] new_slab+0x84/0x3f0 [ 270.306498][ T6467] ___slab_alloc+0x2a6/0x450 [ 270.311077][ T6467] __slab_alloc+0x63/0xa0 [ 270.315395][ T6467] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 270.320771][ T6467] kernfs_fop_open+0x343/0xb30 [ 270.325523][ T6467] do_dentry_open+0x793/0x1090 [ 270.330275][ T6467] vfs_open+0x73/0x80 [ 270.334247][ T6467] path_openat+0x27ad/0x3160 [ 270.338828][ T6467] do_filp_open+0x1b3/0x3e0 [ 270.343323][ T6467] do_sys_openat2+0x14c/0x6d0 [ 270.347995][ T6467] __x64_sys_openat+0x136/0x160 [ 270.352838][ T6467] do_syscall_64+0x31/0x40 [ 270.357247][ T6467] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 270.363121][ T6467] page last free stack trace: [ 270.367790][ T6467] free_unref_page_prepare+0x2b7/0x2d0 [ 270.373242][ T6467] __free_pages+0x14b/0x380 [ 270.377734][ T6467] __vunmap+0x84d/0x9d0 [ 270.381880][ T6467] vfree+0x61/0x90 [ 270.385628][ T6467] kcov_close+0x2b/0x50 [ 270.389773][ T6467] __fput+0x2fb/0x770 [ 270.393757][ T6467] ____fput+0x15/0x20 [ 270.397735][ T6467] task_work_run+0x127/0x190 [ 270.402317][ T6467] do_exit+0xa27/0x2470 [ 270.406464][ T6467] do_group_exit+0x141/0x310 [ 270.411052][ T6467] __x64_sys_exit_group+0x3f/0x40 [ 270.416066][ T6467] do_syscall_64+0x31/0x40 [ 270.420477][ T6467] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 270.426354][ T6467] [ 270.428669][ T6467] Memory state around the buggy address: [ 270.434295][ T6467] ffff88810b30b180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 270.442346][ T6467] ffff88810b30b200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 270.450401][ T6467] >ffff88810b30b280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 270.458470][ T6467] ^ [ 270.464613][ T6467] ffff88810b30b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 270.472665][ T6467] ffff88810b30b380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 270.480710][ T6467] ================================================================== [ 270.488787][ T6467] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 271.068000][ T24] audit: type=1400 audit(2000000073.810:4328): avc: denied { write } for pid=260 comm="syz-executor" path="pipe:[14196]" dev="pipefs" ino=14196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 271.148440][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 271.194226][ T6462] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 271.292786][ T2708] udevd[2708]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 272.085973][ T450] device bridge_slave_1 left promiscuous mode [ 272.092113][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.099663][ T450] device bridge_slave_0 left promiscuous mode [ 272.105887][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.113719][ T450] device veth1_macvtap left promiscuous mode [ 272.119845][ T450] device veth0_vlan left promiscuous mode [ 273.406386][ T450] device bridge_slave_1 left promiscuous mode [ 273.412521][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.420005][ T450] device bridge_slave_0 left promiscuous mode [ 273.426160][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.433939][ T450] device bridge_slave_1 left promiscuous mode [ 273.440159][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.447725][ T450] device bridge_slave_0 left promiscuous mode [ 273.453827][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.461857][ T450] device bridge_slave_1 left promiscuous mode [ 273.468045][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.475582][ T450] device bridge_slave_0 left promiscuous mode [ 273.481723][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.490083][ T450] device veth1_macvtap left promiscuous mode [ 273.496150][ T450] device veth0_vlan left promiscuous mode [ 273.501975][ T450] device veth1_macvtap left promiscuous mode [ 273.508002][ T450] device veth0_vlan left promiscuous mode [ 273.513903][ T450] device veth1_macvtap left promiscuous mode [ 273.519989][ T450] device veth0_vlan left promiscuous mode