last executing test programs: 9m28.70524284s ago: executing program 0 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 9m28.322182997s ago: executing program 0 (id=239): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7bdb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x72, 0xa, 0xff00}, [@call={0x79, 0x0, 0x58}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 9m25.54641763s ago: executing program 0 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000aa8000/0x1000)=nil, 0x400000, 0x2, 0x2}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x80, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf250100000004000180400102800c00018008000100140000003c00018008000100070000000800010005000000080001000700000008000100040000000800010003000000080001000600000008000100000000791b000180080001000600000008000100020000000800010001000000080001"], 0x158}, 0x1, 0x0, 0x0, 0x20042001}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r10, &(0x7f00000003c0)=@random={'security.', 'GPL\x00'}, 0x0, 0x0) 9m24.474263635s ago: executing program 0 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660ae8d0ba913300000000000061114c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) rt_tgsigqueueinfo(r1, r5, 0x27, &(0x7f0000000180)={0x29, 0x5, 0x8000}) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000000000000100010090fd1400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) 9m20.592682456s ago: executing program 0 (id=255): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x80101, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000001540)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r8, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x4000000) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x1000041, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@mb_optimize_scan}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x56657b2b}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 9m19.263860056s ago: executing program 0 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2067, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x3014852, &(0x7f0000000600)=ANY=[], 0x1, 0x1502, &(0x7f0000004580)="$eJzs3AvUjdX2MPA511oPL0k7yX3NNR92clkkSS4JuSRJkiS5JSRJkoTkllsSkpB7kntIbiG532+5J705kiQJCUnWN3Q6n3O+zv/fOd/p/P3HeedvjDXeNd9nz7nXeuc79n6eZ4y9v+kwuEq9qhXrMDP8S/DPP7oDQAoA9AOAawAgAoASWUpkARwGGTR2/9eeRPyxHpx2pVcgriTpf9om/U/bpP9pm/Q/bZP+p23S/7RN+p+2Sf+FSMu2Tc95rYy0O/7n7v+D3P//X0fe//+DHC4y5osNRa7v+E+kSP/TNul/2ib9T9uk/2mb9D9tk/7/h4sAKvw3h6X/aZv0X4i07Erff5ZxZceV/v8TQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJE2nAuXGQD4y/xKr0sIIYQQQgghhBB/nJD+Sq9ACCGEEEIIIYQQ/34ICjQYiCAdpIcUyAAZ4SrIBFdDZrgGEnAtZIHrICtcD9kgO+SAnJALckMesEDggCGGvJAPknAD5IcboQAUhEJQGDwUgaJwExSDm6E43AIl4FYoCbdBKSgNZaAs3A7l4A4oDxWgItwJlaAyVIGqcBdUg7uhOtwDNeBeqAn3QS24H2rDA1AHHoS68BDUg4ehPjwCDaAhNILG0OT/K/8F6AIvQlfoBt2hB/SEl6AX9IY+0Bf6wcvQH16BAfAqDIRBMBhegyHwOgyFN2AYDIcR8CaMhFEwGsbAWBgH4+EtmABvw0R4BybBZJgCU2EaTIcZ8C7MhFkwG96DOfA+zIV5MB8WwEL4ABbBYlgCH8JS+AiWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBx7AddsBO2AW7YQ/shU9gH3wK++EzSIXP/8n8s3+VXxlSoSMCAipUaNBgOkyHKZiCGTEjZsJMmBkzYwITmAWzYFbMitkwG+bAHJgLc2EezIOEhIyMeTEvJjGJ+TE/FsACWAgLoUePRbEoFsObsTgWxxJYAktiSSyFpbE0lsWyWA7LYXksjxWxIlbCSlgFq+BdeBfejdWxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsAG2AgbYRNsgk2xKTbDZtgCW2BLbImtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wBXwBX8QXsRtWUj2wJ/bEXtgL+2Bf7IsvY398BV/BV3EgDsLB+Bq+hq/jUDyDw3A4jsARWE6NwtE4BlmNw/E4HifgBJyIE3ESTsbJOBWn4XScgTNwJs7CWfgezsH38X2ch/NwAS7EhbgIF+MSXIJL8Swuw+W4AlfiKlyNq3AtrsO1uAE34gbcjJtxK27Fj/Fj3IE7cBfuwj24Bz/BT/BT/BQHYiqm4gE8gAfxIB7CQ3gYD+MRPIJH8Sgew2N4HI/jCTyJp/AknsbTeAbP4jk8h+fxPF7A53J9VXdPwfUDQV1ilFHpVDqVolJURpVRZVKZVGaVWSVUQmVRWVRWlVVlU9lUDpVD5VK5VB6VR5EixSpWeVVelVRJlV/lVwVUAVVIFVJeeVVUFVXFVDFVXBVXJdStqqS6TZVSpVVzX1aVVeVUC19eVVAVVUVVSVVWVVRVVVVVU9VUdVVd1VA1VE1VU9VS96vaqgf2wQfVpc7UU4OwvhqMDVRD1Ug1Vq/jo6qpGorNVHPVQj2uhuMwbKWa+tbqKdVGjca26hk1Bp9V7dU47KCeVx1VJ9VZvaC6qGa+a7pfXwLVVOyleqs+qq+aiZXVpY5VUa+qgWqQGqxeUwvwdTVUvaGGqeFqhHpTjVSj1Gg1Ro1V49R49ZaaoN5WE9U7apKarKaoqWqamq5mqHfVTDVLzVbvqTnqfTVXzVPz1QK1UH2gFqnFaon6UC1VH6llarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqbepjtV3tUDvVLrVb7VF71Sdqn/pU7VefqVT1uTqg/qQOqi/UIfWlOqy+UkfU1+qo+kYdU9+q4+o7dUKdVKfU9+q0+kGdUWfVOfWjOq9+UhfUz+qiCgo0aqW1NjrS6XR6naIz6Iz6Kp1JX60z62t0Ql+rs+jrdFZ9vc6ms+scOqfOpXPrPNpq0k6zjnVenU8n9Q06v75RF9AFdSFdWHtdRBfVN+li+mZdXN+iS+hbdUl9my6lS+syuqy+XZfTd+jyuoKuqO/UlXRlXUVX1XfpavpuXV3fo2voe3VNfZ+upe/XtfUDuo5+UNfVD+l6+mFdXz+iG+iGupFurJvoR3VT/ZhuppvrFvpx3VI/oVvpJ3Vr/ZRuo5/WbfUzup1+VrfXz+kO+nndUXfSnfXP+qIOuqvuprvrHrqnfkn30r11H91X99Mv6/76FT1Av6oH6kF6sH5ND9Gv66H6DT1MD9cj9Jt6pB6lR+sxeqwep8frt/QE/baeqN/Rk/RkPUVP1dP0dN3n10qz/4H8t/9O/oBfnn2r3qY/1tv1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1j/p7fVr/oM/os/qs/lGf1+f1hV//BmDQKKONMZFJZ9KbFJPBZDRXmUzmapPZXGMS5lqTxVxnsprrTTaT3eQwOU0uk9vkMdaQcYZNbPKafCZpbjD5zY2mgCloCpnCxpsipqi56V/O/731NTFNTFPT1DQzzUwL08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NB9PBdDQdTWfT2XQxXUxX09V01wBgXjK9TG/Tx/Q1/czLpr/pbwaYAWagGWgGm8FmiBlihpqhZpgZZkaYEWakGWlGm9FmrBlrxpvxZoKZYCaaiWaSmWSmmClmmplmZpgZZqaZaWab2WaOmWPmmrlmvplvFpqFZpFZZJaYJWapWWqWmeVmuVlpVprVZrVZa9aa9Wa92Wg2ms1ms1lmtpltZrvZbnaanWa32W32mr1mn9ln9pv9JtWkmgPmgDloDppD5pA5bA6bI+aIOWqOmmPmmDlujpsT5oQ5ZU6Z0+a0OWPOmHPmnDlvzpsL5oK5aC5eOu2LVKQiE5koXZQuSolSooxRxihTlCnKHGWOElEiyhJlibJG10fZouxRjihnlCvKHXUHG1HkIo7iKG+UL0pGN0T5oxujAlHBqFBUOPJRkahodFNULLo5Kh7dEpWIbo1KRrdFpaLSUZmobHR7VC66IyofVYgqRndGlaLKUZWoanRXVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgaRo2ixlGTP7R+CGeyP+a72m62u+1he9qXbC/b2/axfW0/+7Ltb1+xA+yrdqAdZAfb1+wQ+7odat+ww+xwO8K+aUfaUXa0HWPH2nF2vH3LTrBv24n2HTvJTrZT7FQ7zU63M+y7dqadZWfb9+wc+76da+fZ+XaBXWg/sIvsYrvEfmiX2o/sMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Tb7sd1ud9iddpfdbffYvfYTu89+avfbz2yq/dwesH+yB+0X9pD90h62X9kj9mt71H5jj9lv7XH7nT1hT9pT9nt72v5gz9iz9pz90Z63P9kL9md70YZLJ/eX3t7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoC2WhrJSVslE2ykE5KBflojyUhy5hYspLeSlJScpP+akAFaBCVIg8eSpKRakYFaPiVJxKUAkqSSWpFJWiMlSGbqfb6Q66gypQBbqT7qTKVJmqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9ag+1acG1IAaUSNqQk2oKTWlZtSMWlALakktqRW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJX6k7dqSf1pF7Ui/pQH+pH/ag/9acBNIAG0kAaTINpCA2hoTSUhtFwGkFv0kgaRaNpDI2lcTSextMEmkATaSJNokk0habQNJpGM2gGzaSZNJtm0xyaQ3NpLs2n+bSQFtIiWkRLaAktpaW0jJbRClpBq2gVraE1tI7W0QbaQJtoE22hLbSNttF22k47aSftpt20l/bSPtpH+2k/pVIqHaADdJAO0iE6RIfpMB2hI3SUjtIxOkbH6TidoBN0ik7RaTpNZ+gMnaNzdJ5+ogv0M12kQClOQUZ3lcvkrnaZ3TUuxWVwl+IIAC7FOVxOl8vldnmcddlc9r+JyTlXwBV0hVxh510RV9Td9Ju4lCvtyriy7nZXzt3hyv8mrubudtXdPa6Gu9dVdXf9TVzT3edquYddbfeIq+MaurqusavnHnb13SOugWvoGrnGrqV7wrVyT7rW7inXxj39m3iRW+zWufVug9vo9rlP3Tn3ozvqvnHn3U+uq+vm+rmXXX/3ihvgXnUD3aDfxCPcm26kG+VGuzFuLJwL4a9jN85NcVPdNDfdzXDvuplu1m/ihe4DN8ctcXPdPDffLfglvrSmJe5Dt9R95Ja55W6FW+lWudVujVv7f9e60m12W9xWt9d94ra7HW6n2+V2uz2/xJf2sd995lLd5+6I+9oddH85wf3ql/jS/o65b91x95074U66U+57d9r94M64s7/s/9Lev3c/u4suOGBkxZoNR5yO03MKZ+CMfBVn4qs5M1/DCb6Ws/B1nJWv52ycnXNwTs7FuTkPWyZ2zBxzXs7HSb6B8/ONXIALciEuzJ6LcFG+iYvxzVycb+ESfCuX5Nu4FJfmMlyWb+dyfAeX5wpcke/kSiFwFa7Kd3E1vpur8z1cg+/lmnwf1+L7uTY/wHX4Qa7LD3E9fpjr8yPcgBtyI27MTfhRbsqPcTNuzi34cW7JT3ArfpJb81Pchp/mtvwMt+NnuT0/xx34ee7Inbgzv8Bd+EXuyt24O/fgnvwS9+Le3If7cj9+mfvzKzyAX+WBPIgH82s8hF/nofwGD+PhPILf5JE8ikfzGB7L43g8v8UT+G2eyO/wJJ7MU3gqT+PpPIPf5Zk8i2fzezyH3+e5PI/n8wJeyB/wIl7MS/hDXsof8TJezit4Ja/i1byG1/I6Xs8beCNv4s28hbfyNv6Yt/MO3sm7eDfv4b38Ce/jT3k/f8ap/Dkf4D/xQf6CD/GXfJi/4iP8NR/lb/gYf8vH+Ts+wSf5FH/Pp/kHPsNn+Rz/yOf5J77AP/NFDgwxxirWsYmjOF2cPk6JM8QZ46viTPHVceb4mjgRXxtnia+Ls8bXx9ni7HGOOGecK84d54ltTLGLOY7jvHG+OBnfsC5/fGNcIC4YF4oLxz4uEheNb4qLxTfHxeNb4hLxrXHJ+La4VFw6fvjesvHtcbn4jrh8XCGuGN8ZV4orx1XiqvFdcbX47rh6fE9cI743Lh7fF9eK749rxw/EdeIH47rxQ3G9+OG4fvxI3CBuGDeKG8dN4kfjpvFjcbO4edwifjxuGT8Rt4qfjFvHT8Vt4qd/93j3uEfcM34pfikO4R49P7kguTD5QXJRcnFySfLD5NLkR8llyeXJFcmVyVXJ1ck1ybXJdcn1yQ3JjclNyc3JLcmtyRCqpgePXnntjY98Op/ep/gMPqO/ymfyV/vM/hqf8Nf6LP46n9Vf77P57D6Hz+lz+dw+j7eevPPsY5/X5/NJf4PP72/0BXxB380X9t4X8UV9Y9/EN/FN/WO+mW/uW/jH/eP+Cf+Ef9I/6Z/ybfzTvq1/xrfzz/r2/jn/nH/ed/SdfGf/gu/iX/RdfTff3Xf3PX1P38v38n18H9/P9/P9fX8/wA/wA/1AP9gP9kP8ED/UD/XD/DA/wo/wI/1IP9qP9mP9WD/ej/cT/AQ/0U/0k/wkP8VP8dP8ND/Dz/Az/Uw/28/2cwrM8XP9XD/fz/cL/UK/yC/yS/wSv9Qv9cv8Mr/Cr/Cr/Cq/xq/x6/w6v8Fv8Jv8Jr/Fb/Hb/Da/3W/3O/1Ov9vv9nv9Xr/P7/P7/X6f6lP9AX/AH/QH/SH/pT/sv/JH/Nf+qP/GH/Pf+uP+O3/Cn/Sn/Pf+tP/Bn/Fn/Tn/oz/vf/IX/M/+og9+fOKtxITE24mJiXcSkxKTE1MSUxPTEtMTMxLvJmYmZiVmJ95LzEm8n5ibmJeYn1iQWJj4ILEosTixJPFhYmnio8SyxPLEisTKxKrE6kQIubfHIW/IF5K/fHrKAEDBUCgUDj4UCUXDTaFYuDkUD7eEEuHWUDLcFkqF0qFMeCQ0CA1Do9A4NAmPhqbhsdAsNA8twuOhZXgitApPhtbhqdAmPB3ahmdCu/BsaB+eCx3C86Fj6BQ6hxdCl/Bi6Bq6he6hR+gZXgq9Qu/QJ/QN/cLLoX94JQwIr4aBYVAYHF4LQ8LrYWh4IwwLw8OI8GYYGUaF0WFMGBvGhfHhrTAhvB0mhnfCpDA5TAlTw7QwPcwI74aZYVaYHd4Lc8L7YW6YF+aHBWFh+CAsCovDkvBhWBo+CsvC8rAirAyrwuqwJqwN68L6sCFsDJvC5rAlbA3bwsdhe9gRdoZdYXfYE/aGT8K+8GnYHz4LqeHzcCD8KRwMX4RD4ctwOHwVjoSvw9HwTTgWvg3Hw3fhRDgZToXvw+nwQzgTzoZz4cdwPvwULoSfw0X5zJoQQgghxD9E/87xHn/nd+kAQP067wkAV+/Iefj/rbkp25/nvVWulgkAeKpbhwf/MipV6t69+6+PXaYhyjcPABJ/W/8v8XJoAU9Aa2gOxf7u+nqrTuf5d+onbwXI+Fc5KXA5vlz/5v+i/qOPj1hUMj6X5b+pPw+gQL7LORngcny5fvH/on72pr+z/gxfjAdo9lc5meByfLl+UXgMnobWf/NIIYQQQgghhBDiz3qrMu1+7/r50vV5LnM5Jz1cjn/v+lwIIYQQQgghhBBX3rOdOj/5aOvWzdv9YxP89b7AP5clE5nI5N84Uf+Gylf6lUkIIYQQQgjxR7t80n+lVyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRd/xPfT3al9yiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJcaf8nAAD//5ZqMTw=") socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000001c0)={0xbd6b, 0x4, 0x0, 0xf7ff, 0xdf, "4ae23ae17df2e9890009000005000000001000", 0x406, 0x4}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000f80)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000380)='./file1\x00', 0x4800, 0x0) 9m3.456104328s ago: executing program 32 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2067, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x3014852, &(0x7f0000000600)=ANY=[], 0x1, 0x1502, &(0x7f0000004580)="$eJzs3AvUjdX2MPA511oPL0k7yX3NNR92clkkSS4JuSRJkiS5JSRJkoTkllsSkpB7kntIbiG532+5J705kiQJCUnWN3Q6n3O+zv/fOd/p/P3HeedvjDXeNd9nz7nXeuc79n6eZ4y9v+kwuEq9qhXrMDP8S/DPP7oDQAoA9AOAawAgAoASWUpkARwGGTR2/9eeRPyxHpx2pVcgriTpf9om/U/bpP9pm/Q/bZP+p23S/7RN+p+2Sf+FSMu2Tc95rYy0O/7n7v+D3P//X0fe//+DHC4y5osNRa7v+E+kSP/TNul/2ib9T9uk/2mb9D9tk/7/h4sAKvw3h6X/aZv0X4i07Erff5ZxZceV/v8TQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJE2nAuXGQD4y/xKr0sIIYQQQgghhBB/nJD+Sq9ACCGEEEIIIYQQ/34ICjQYiCAdpIcUyAAZ4SrIBFdDZrgGEnAtZIHrICtcD9kgO+SAnJALckMesEDggCGGvJAPknAD5IcboQAUhEJQGDwUgaJwExSDm6E43AIl4FYoCbdBKSgNZaAs3A7l4A4oDxWgItwJlaAyVIGqcBdUg7uhOtwDNeBeqAn3QS24H2rDA1AHHoS68BDUg4ehPjwCDaAhNILG0OT/K/8F6AIvQlfoBt2hB/SEl6AX9IY+0Bf6wcvQH16BAfAqDIRBMBhegyHwOgyFN2AYDIcR8CaMhFEwGsbAWBgH4+EtmABvw0R4BybBZJgCU2EaTIcZ8C7MhFkwG96DOfA+zIV5MB8WwEL4ABbBYlgCH8JS+AiWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBx7AddsBO2AW7YQ/shU9gH3wK++EzSIXP/8n8s3+VXxlSoSMCAipUaNBgOkyHKZiCGTEjZsJMmBkzYwITmAWzYFbMitkwG+bAHJgLc2EezIOEhIyMeTEvJjGJ+TE/FsACWAgLoUePRbEoFsObsTgWxxJYAktiSSyFpbE0lsWyWA7LYXksjxWxIlbCSlgFq+BdeBfejdWxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsAG2AgbYRNsgk2xKTbDZtgCW2BLbImtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wBXwBX8QXsRtWUj2wJ/bEXtgL+2Bf7IsvY398BV/BV3EgDsLB+Bq+hq/jUDyDw3A4jsARWE6NwtE4BlmNw/E4HifgBJyIE3ESTsbJOBWn4XScgTNwJs7CWfgezsH38X2ch/NwAS7EhbgIF+MSXIJL8Swuw+W4AlfiKlyNq3AtrsO1uAE34gbcjJtxK27Fj/Fj3IE7cBfuwj24Bz/BT/BT/BQHYiqm4gE8gAfxIB7CQ3gYD+MRPIJH8Sgew2N4HI/jCTyJp/AknsbTeAbP4jk8h+fxPF7A53J9VXdPwfUDQV1ilFHpVDqVolJURpVRZVKZVGaVWSVUQmVRWVRWlVVlU9lUDpVD5VK5VB6VR5EixSpWeVVelVRJlV/lVwVUAVVIFVJeeVVUFVXFVDFVXBVXJdStqqS6TZVSpVVzX1aVVeVUC19eVVAVVUVVSVVWVVRVVVVVU9VUdVVd1VA1VE1VU9VS96vaqgf2wQfVpc7UU4OwvhqMDVRD1Ug1Vq/jo6qpGorNVHPVQj2uhuMwbKWa+tbqKdVGjca26hk1Bp9V7dU47KCeVx1VJ9VZvaC6qGa+a7pfXwLVVOyleqs+qq+aiZXVpY5VUa+qgWqQGqxeUwvwdTVUvaGGqeFqhHpTjVSj1Gg1Ro1V49R49ZaaoN5WE9U7apKarKaoqWqamq5mqHfVTDVLzVbvqTnqfTVXzVPz1QK1UH2gFqnFaon6UC1VH6llarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqbepjtV3tUDvVLrVb7VF71Sdqn/pU7VefqVT1uTqg/qQOqi/UIfWlOqy+UkfU1+qo+kYdU9+q4+o7dUKdVKfU9+q0+kGdUWfVOfWjOq9+UhfUz+qiCgo0aqW1NjrS6XR6naIz6Iz6Kp1JX60z62t0Ql+rs+jrdFZ9vc6ms+scOqfOpXPrPNpq0k6zjnVenU8n9Q06v75RF9AFdSFdWHtdRBfVN+li+mZdXN+iS+hbdUl9my6lS+syuqy+XZfTd+jyuoKuqO/UlXRlXUVX1XfpavpuXV3fo2voe3VNfZ+upe/XtfUDuo5+UNfVD+l6+mFdXz+iG+iGupFurJvoR3VT/ZhuppvrFvpx3VI/oVvpJ3Vr/ZRuo5/WbfUzup1+VrfXz+kO+nndUXfSnfXP+qIOuqvuprvrHrqnfkn30r11H91X99Mv6/76FT1Av6oH6kF6sH5ND9Gv66H6DT1MD9cj9Jt6pB6lR+sxeqwep8frt/QE/baeqN/Rk/RkPUVP1dP0dN3n10qz/4H8t/9O/oBfnn2r3qY/1tv1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1j/p7fVr/oM/os/qs/lGf1+f1hV//BmDQKKONMZFJZ9KbFJPBZDRXmUzmapPZXGMS5lqTxVxnsprrTTaT3eQwOU0uk9vkMdaQcYZNbPKafCZpbjD5zY2mgCloCpnCxpsipqi56V/O/731NTFNTFPT1DQzzUwL08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NB9PBdDQdTWfT2XQxXUxX09V01wBgXjK9TG/Tx/Q1/czLpr/pbwaYAWagGWgGm8FmiBlihpqhZpgZZkaYEWakGWlGm9FmrBlrxpvxZoKZYCaaiWaSmWSmmClmmplmZpgZZqaZaWab2WaOmWPmmrlmvplvFpqFZpFZZJaYJWapWWqWmeVmuVlpVprVZrVZa9aa9Wa92Wg2ms1ms1lmtpltZrvZbnaanWa32W32mr1mn9ln9pv9JtWkmgPmgDloDppD5pA5bA6bI+aIOWqOmmPmmDlujpsT5oQ5ZU6Z0+a0OWPOmHPmnDlvzpsL5oK5aC5eOu2LVKQiE5koXZQuSolSooxRxihTlCnKHGWOElEiyhJlibJG10fZouxRjihnlCvKHXUHG1HkIo7iKG+UL0pGN0T5oxujAlHBqFBUOPJRkahodFNULLo5Kh7dEpWIbo1KRrdFpaLSUZmobHR7VC66IyofVYgqRndGlaLKUZWoanRXVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgaRo2ixlGTP7R+CGeyP+a72m62u+1he9qXbC/b2/axfW0/+7Ltb1+xA+yrdqAdZAfb1+wQ+7odat+ww+xwO8K+aUfaUXa0HWPH2nF2vH3LTrBv24n2HTvJTrZT7FQ7zU63M+y7dqadZWfb9+wc+76da+fZ+XaBXWg/sIvsYrvEfmiX2o/sMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Tb7sd1ud9iddpfdbffYvfYTu89+avfbz2yq/dwesH+yB+0X9pD90h62X9kj9mt71H5jj9lv7XH7nT1hT9pT9nt72v5gz9iz9pz90Z63P9kL9md70YZLJ/eX3t7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoC2WhrJSVslE2ykE5KBflojyUhy5hYspLeSlJScpP+akAFaBCVIg8eSpKRakYFaPiVJxKUAkqSSWpFJWiMlSGbqfb6Q66gypQBbqT7qTKVJmqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9ag+1acG1IAaUSNqQk2oKTWlZtSMWlALakktqRW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJX6k7dqSf1pF7Ui/pQH+pH/ag/9acBNIAG0kAaTINpCA2hoTSUhtFwGkFv0kgaRaNpDI2lcTSextMEmkATaSJNokk0habQNJpGM2gGzaSZNJtm0xyaQ3NpLs2n+bSQFtIiWkRLaAktpaW0jJbRClpBq2gVraE1tI7W0QbaQJtoE22hLbSNttF22k47aSftpt20l/bSPtpH+2k/pVIqHaADdJAO0iE6RIfpMB2hI3SUjtIxOkbH6TidoBN0ik7RaTpNZ+gMnaNzdJ5+ogv0M12kQClOQUZ3lcvkrnaZ3TUuxWVwl+IIAC7FOVxOl8vldnmcddlc9r+JyTlXwBV0hVxh510RV9Td9Ju4lCvtyriy7nZXzt3hyv8mrubudtXdPa6Gu9dVdXf9TVzT3edquYddbfeIq+MaurqusavnHnb13SOugWvoGrnGrqV7wrVyT7rW7inXxj39m3iRW+zWufVug9vo9rlP3Tn3ozvqvnHn3U+uq+vm+rmXXX/3ihvgXnUD3aDfxCPcm26kG+VGuzFuLJwL4a9jN85NcVPdNDfdzXDvuplu1m/ihe4DN8ctcXPdPDffLfglvrSmJe5Dt9R95Ja55W6FW+lWudVujVv7f9e60m12W9xWt9d94ra7HW6n2+V2uz2/xJf2sd995lLd5+6I+9oddH85wf3ql/jS/o65b91x95074U66U+57d9r94M64s7/s/9Lev3c/u4suOGBkxZoNR5yO03MKZ+CMfBVn4qs5M1/DCb6Ws/B1nJWv52ycnXNwTs7FuTkPWyZ2zBxzXs7HSb6B8/ONXIALciEuzJ6LcFG+iYvxzVycb+ESfCuX5Nu4FJfmMlyWb+dyfAeX5wpcke/kSiFwFa7Kd3E1vpur8z1cg+/lmnwf1+L7uTY/wHX4Qa7LD3E9fpjr8yPcgBtyI27MTfhRbsqPcTNuzi34cW7JT3ArfpJb81Pchp/mtvwMt+NnuT0/xx34ee7Inbgzv8Bd+EXuyt24O/fgnvwS9+Le3If7cj9+mfvzKzyAX+WBPIgH82s8hF/nofwGD+PhPILf5JE8ikfzGB7L43g8v8UT+G2eyO/wJJ7MU3gqT+PpPIPf5Zk8i2fzezyH3+e5PI/n8wJeyB/wIl7MS/hDXsof8TJezit4Ja/i1byG1/I6Xs8beCNv4s28hbfyNv6Yt/MO3sm7eDfv4b38Ce/jT3k/f8ap/Dkf4D/xQf6CD/GXfJi/4iP8NR/lb/gYf8vH+Ts+wSf5FH/Pp/kHPsNn+Rz/yOf5J77AP/NFDgwxxirWsYmjOF2cPk6JM8QZ46viTPHVceb4mjgRXxtnia+Ls8bXx9ni7HGOOGecK84d54ltTLGLOY7jvHG+OBnfsC5/fGNcIC4YF4oLxz4uEheNb4qLxTfHxeNb4hLxrXHJ+La4VFw6fvjesvHtcbn4jrh8XCGuGN8ZV4orx1XiqvFdcbX47rh6fE9cI743Lh7fF9eK749rxw/EdeIH47rxQ3G9+OG4fvxI3CBuGDeKG8dN4kfjpvFjcbO4edwifjxuGT8Rt4qfjFvHT8Vt4qd/93j3uEfcM34pfikO4R49P7kguTD5QXJRcnFySfLD5NLkR8llyeXJFcmVyVXJ1ck1ybXJdcn1yQ3JjclNyc3JLcmtyRCqpgePXnntjY98Op/ep/gMPqO/ymfyV/vM/hqf8Nf6LP46n9Vf77P57D6Hz+lz+dw+j7eevPPsY5/X5/NJf4PP72/0BXxB380X9t4X8UV9Y9/EN/FN/WO+mW/uW/jH/eP+Cf+Ef9I/6Z/ybfzTvq1/xrfzz/r2/jn/nH/ed/SdfGf/gu/iX/RdfTff3Xf3PX1P38v38n18H9/P9/P9fX8/wA/wA/1AP9gP9kP8ED/UD/XD/DA/wo/wI/1IP9qP9mP9WD/ej/cT/AQ/0U/0k/wkP8VP8dP8ND/Dz/Az/Uw/28/2cwrM8XP9XD/fz/cL/UK/yC/yS/wSv9Qv9cv8Mr/Cr/Cr/Cq/xq/x6/w6v8Fv8Jv8Jr/Fb/Hb/Da/3W/3O/1Ov9vv9nv9Xr/P7/P7/X6f6lP9AX/AH/QH/SH/pT/sv/JH/Nf+qP/GH/Pf+uP+O3/Cn/Sn/Pf+tP/Bn/Fn/Tn/oz/vf/IX/M/+og9+fOKtxITE24mJiXcSkxKTE1MSUxPTEtMTMxLvJmYmZiVmJ95LzEm8n5ibmJeYn1iQWJj4ILEosTixJPFhYmnio8SyxPLEisTKxKrE6kQIubfHIW/IF5K/fHrKAEDBUCgUDj4UCUXDTaFYuDkUD7eEEuHWUDLcFkqF0qFMeCQ0CA1Do9A4NAmPhqbhsdAsNA8twuOhZXgitApPhtbhqdAmPB3ahmdCu/BsaB+eCx3C86Fj6BQ6hxdCl/Bi6Bq6he6hR+gZXgq9Qu/QJ/QN/cLLoX94JQwIr4aBYVAYHF4LQ8LrYWh4IwwLw8OI8GYYGUaF0WFMGBvGhfHhrTAhvB0mhnfCpDA5TAlTw7QwPcwI74aZYVaYHd4Lc8L7YW6YF+aHBWFh+CAsCovDkvBhWBo+CsvC8rAirAyrwuqwJqwN68L6sCFsDJvC5rAlbA3bwsdhe9gRdoZdYXfYE/aGT8K+8GnYHz4LqeHzcCD8KRwMX4RD4ctwOHwVjoSvw9HwTTgWvg3Hw3fhRDgZToXvw+nwQzgTzoZz4cdwPvwULoSfw0X5zJoQQgghxD9E/87xHn/nd+kAQP067wkAV+/Iefj/rbkp25/nvVWulgkAeKpbhwf/MipV6t69+6+PXaYhyjcPABJ/W/8v8XJoAU9Aa2gOxf7u+nqrTuf5d+onbwXI+Fc5KXA5vlz/5v+i/qOPj1hUMj6X5b+pPw+gQL7LORngcny5fvH/on72pr+z/gxfjAdo9lc5meByfLl+UXgMnobWf/NIIYQQQgghhBDiz3qrMu1+7/r50vV5LnM5Jz1cjn/v+lwIIYQQQgghhBBX3rOdOj/5aOvWzdv9YxP89b7AP5clE5nI5N84Uf+Gylf6lUkIIYQQQgjxR7t80n+lVyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRd/xPfT3al9yiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJcaf8nAAD//5ZqMTw=") socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000001c0)={0xbd6b, 0x4, 0x0, 0xf7ff, 0xdf, "4ae23ae17df2e9890009000005000000001000", 0x406, 0x4}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000f80)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000380)='./file1\x00', 0x4800, 0x0) 3m24.809331511s ago: executing program 2 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) 3m22.558002282s ago: executing program 2 (id=1014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r7}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) 3m21.547111482s ago: executing program 2 (id=1018): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 3m21.523688404s ago: executing program 2 (id=1019): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@alloc_mode_def}, {@two_active_logs}, {@nouser_xattr}, {@checkpoint_diasble}, {@noacl}, {@atgc}, {@background_gc_on}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0xfd, 0x551d, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) 3m19.257533397s ago: executing program 2 (id=1025): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0xc, 0x0, @thr={&(0x7f00000002c0)="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", 0x0}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r6, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r8, 0x4e, 0x0) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) syz_open_procfs(0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x509, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8442}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r11}]}, 0x3c}, 0x1, 0xd, 0x0, 0x24000004}, 0x0) tee(r7, r6, 0x9, 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) r12 = syz_usb_connect$cdc_ncm(0x1, 0x7e, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x4, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "38e0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe30, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x43}, [@country_functional={0xe, 0x24, 0x7, 0xc, 0x4, [0x3d, 0x6, 0x4, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xa0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x0, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8e, 0x4, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xf, 0x2, 0x5, 0x40, 0x3}, 0xe4, &(0x7f0000000140)={0x5, 0xf, 0xe4, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc8, "3777116f27196823d7998c605ae43566"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1, 0xff}, @generic={0xc4, 0x10, 0xffb2949cf830aa39, "9b8ed6ae386c1654731f77278ee758a673f2acacae1a5c96b2024ef54ba7f99f7e0f60ced9f91d559f31d31a712d1190f7a74d485fe0308310150c45b599efae7d58636bdbe970800052a9525ac4e4a87e8f8ac3d4dc59cc6358046e097a1a3cf0df0acf8d5339745384e99bce5e831a779f37b6ed9f23281942416407192d5a06cc79e5b9a01cf8d18ec0d930bf1510f85bae2f69679b4fed683d6ad9343b53b914159c6db5b4633fdcd994720040911329d075fea320936fe74bdb22c402a6b7"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41c}}, {0x8, &(0x7f0000000280)=@string={0x8, 0x3, "9661369fe607"}}, {0x60, &(0x7f00000002c0)=@string={0x60, 0x3, "a5222c6d853109e7c817a908465a9ad926a735040834444a961192c8582f10faaa7a35a3e767f70b9c0cc7e89b552629481aae37e63183589a77a4ea721c22d3cf505986031edea6e7f00f9c95ef8abdd7fa32648780ab0f59f3a804ff0c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$cdc_ncm(r12, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x20, 0x1, 0x28, {0x28, 0x9, "3ca56aa195e8b9ae4c3eed16c9490404550db0401ab9cc0c8d9b2c5842a78c5ca98b8bfe50a8"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x0, 0x2eaee214939f802c, 0xb0, "1a8d6c777d0e5be8f03d862a99f787adac5d46a8df1e5f5c356c8f758a6282b2252690c1c79846b8c94237b707e459a9d54b61da3173812b1eeb3e22a88c802a68a46755a0bf273c40e8be5dc902fe0eea40d30f41532840939456f96cd55245e5b150bdd3da0cbf51b3c0a9b54a08a202ce02eabd474e6a61689fd4005029750bd86cd61e0bf756efb548596977093bbab23cbeb2de5f017fc3ae58ad94708793be6cb61222627339fb87942db3cd7c"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x7, 0x38, 0x4400, 0x8000, 0x1, 0x4, 0x3, 0x7887, 0xe307, 0x1}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000700)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="400d11486e872224a6845cb067deb587d949f9ea323e1e"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880), 0x420, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@privport}, {@version_9p2000}, {@access_any}, {@msize={'msize', 0x3d, 0xf}}, {@noxattr}, {@access_uid}, {@version_u}, {@aname}], [{@appraise}, {@obj_user={'obj_user', 0x3d, 'sched_switch\x00'}}, {@seclabel}, {@audit}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) 3m18.81605699s ago: executing program 2 (id=1028): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf01010063"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 3m18.784698053s ago: executing program 33 (id=1028): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf01010063"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 1m59.359831787s ago: executing program 5 (id=1299): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2f50}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881ac, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, 0x0, 0x4c044) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac120000", @ANYRES16=0x0, @ANYBLOB="000102000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000005b000000"], 0x28}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4004) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) 1m58.427820209s ago: executing program 5 (id=1300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000044400018004000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read(r3, &(0x7f0000000300)=""/244, 0xf4) r4 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000140)={0x20080522, r4}, &(0x7f00000001c0)={0xfffff125, 0x2, 0x38, 0x4, 0x5, 0x3f4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000002003061d6804a2fae7130", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009d406383460953", @ANYRES64=r2], 0x53) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ppoll(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x3938700}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m58.101306921s ago: executing program 5 (id=1304): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x0, 0x24, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0xd, 0x2}, {0x2, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x7f}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x9, 0x7, 0x1, 0x7, 0x1, 0x1, 0xd7}}, {0x0, 0x2, [0x8, 0x3, 0x10]}}]}, @qdisc_kind_options=@q_pfifo={{}, {0x0, 0x2, 0x5}}]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65890900000061756c7420303030303030303044a0c23c3320"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000400180000001800000006000000010000000000001200000000000000000000000202000000002e00006100"], 0x0, 0x36}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @empty}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) prctl$PR_SET_PDEATHSIG(0x1, 0x34) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") 1m55.910553687s ago: executing program 5 (id=1307): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@dmask={'dmask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0xb21}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@gid}, {@discard}, {@namecase}, {@keep_last_dots}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='rxrpc_propose_ack\x00', r5, 0x0, 0x80000000}, 0x18) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x8040) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 1m55.656035652s ago: executing program 5 (id=1310): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r5, &(0x7f00000003c0)=@random={'security.', 'GPL\x00'}, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf250100000004000180100002800c000180"], 0x28}}, 0x2000c050) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1m55.606057567s ago: executing program 5 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) 1m55.517253185s ago: executing program 34 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) 13.137671268s ago: executing program 3 (id=1604): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0xfffffffffffffff7, 0xc9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0xff10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)="3b040000000000000000000000004136b8b01380fab9b04c2359d3236cffa16234151c8974fe25b330b3f84848717c096500004031", 0xfc78}, {&(0x7f0000000940)="fdd4909f5456e8d6ccb6dc848c53f5237186f295644bfc9b7ce4040cb6419080c28ce1196b960563eed9ac0c164d30724aeb0bb3c271f4ab252e3de6a334da2c34d210caa8d9c1ec5af3bf408db2f83d885cfd42bd91dbbb6cc2b0c6f5824ff70715f903c02f262b8ee767d74f3346bd85d28d06cc875d67be73c1f531c3d3b13f903d962f744556052addcbb3a09cb4fdca28c6e72c39cc7307ebb11dc2d3190d17b11ef529ed465f599258d7ae5aa951d2ef2c71a906247f6731ff982267269fd6cf940aa44bd1dd460cf1942497f075662e90302ebe"}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) recvfrom$unix(r5, &(0x7f00000002c0)=""/222, 0xde, 0x10120, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='ext4_discard_preallocations\x00', r8}, 0x18) syz_clone3(&(0x7f0000001000)={0x1000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r9}, 0x18) 12.71342511s ago: executing program 3 (id=1605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000580)=0xfffffff6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f0000000840)="2e0f01c3c4e3d16bc6f4b9800000c00f3235000800000f30c744240000500000c74424020f000000c7442406000000000f011c24c4e3d97cdf03c4e22d96e6f30f44b39a11000066b853000f00d0650f01c3b8fd8700000f23d00f21f835000000030f23f8", 0x65}], 0x1, 0x2, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000540)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090561eb"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x2000, 0x8000, 0xfffffffd, 0x1, 0x0, [{0x1, 0x3, 0x6, '\x00', 0x2}, {0x6c, 0xbc, 0x15, '\x00', 0xf}, {0x5, 0x83, 0x6, '\x00', 0x94}, {0x87, 0x0, 0x8, '\x00', 0xd7}, {0x3, 0x5, 0x7, '\x00', 0x4}, {0x3, 0x3, 0x7f, '\x00', 0xfa}, {0xb, 0x2, 0xb4, '\x00', 0x9}, {0x6, 0x0, 0x80, '\x00', 0x3}, {0xb, 0x4, 0x4, '\x00', 0xd}, {0xf, 0x7, 0x1, '\x00', 0x3a}, {0x5, 0xff, 0xc, '\x00', 0x5}, {0x3, 0xf2, 0x3, '\x00', 0x3e}, {0x8, 0x9, 0xd9, '\x00', 0x3}, {0x2, 0xb, 0xa4}, {0x4, 0x40, 0x6, '\x00', 0x20}, {0xe, 0x4, 0xb, '\x00', 0x1}, {0x4d, 0xe, 0x6d}, {0xe, 0x8, 0x8, '\x00', 0xdb}, {0x0, 0x5, 0x2, '\x00', 0x2}, {0x7f, 0x0, 0x76, '\x00', 0x25}, {0x9, 0x4, 0x9, '\x00', 0x7}, {0x1, 0xe, 0x1, '\x00', 0x2}, {0xc, 0x81, 0x5}, {0x80, 0x81, 0x40}]}}) 11.258736293s ago: executing program 6 (id=1611): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000b0000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b30205006023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa8272f3eee97c0c3258918bd811db74b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a9433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0f34d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbdee00550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920386f14d12ca3c3431ee97471c7868dcdaffaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf974fcf36cbf6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a8022c8870f228787863a9e0885e238b44ae1c25c9fd8bb27083b8246829e64056000302bffff15405bd5f2eba2000000dd0000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb42305651152df60a3a05b89e760b60563c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9463f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d00000000ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf5ef06f7244dd357acd09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58aa9deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000004c0c1b4742fdb68a34370543d7aec4fbb67bfb3730af0c908d89029365378cca550f508e3699830028643ecfe9f79bd15db571c5420d9b60fa794cfbc7fd039856329b684216237ec55faf25fee7f1a838fc2399d67fe9b245fab52f7a8eb1aadbfbd8d203290f131965a41ca43bf5440e7b1425c15d39559e76384112b80dd0049280a1e9b63e3e7cadefa558b6d38ebe86b49e3f80204b5536f1bde80cb2dade46f6a1b8cc20a5a9b560e736235d518349599b8368bf1e360ecaa0bde20303eef789304761aca34b507fd66115ef36b2cec7629c7609283d1676bb3a018c0dad35189928abf9d06bc9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000240)=@ethtool_wolinfo={0x6, 0xd, 0x0, "38212786ce58"}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syslog(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x26020480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobarrier}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv1}]}, 0x1, 0x566, &(0x7f0000000fc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 9.032530802s ago: executing program 6 (id=1614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080040000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x23) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 8.245128949s ago: executing program 3 (id=1620): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080) 8.244472919s ago: executing program 4 (id=1621): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 7.541376748s ago: executing program 6 (id=1622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r6}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) 7.128668309s ago: executing program 1 (id=1623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={[0x8]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000022c000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 7.127895419s ago: executing program 4 (id=1624): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000480)='ext4_insert_range\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7fffffff, 0x181001) statx(r8, &(0x7f0000000140)='./file0\x00', 0x100, 0x2, &(0x7f0000000800)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000ffffff90000000006dfeff00850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) r10 = dup(r7) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x98, 0x30, 0x301, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0xffffffff}, 0x1, r11}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000005c0), 0x0, 0x40801) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r14}, 0x18) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r15, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r16, 0x1, 0x709d2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$sock_inet_SIOCGIFBRDADDR(r13, 0x8919, &(0x7f0000000080)={'\x00', {0x2, 0x0, @private}}) 7.001525641s ago: executing program 4 (id=1626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r7}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) 6.81485151s ago: executing program 6 (id=1627): prlimit64(0x0, 0xf, &(0x7f0000000240)={0x8, 0x246}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init() syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x2000000, 0x0, 0xfc, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6111471, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.79863806s ago: executing program 3 (id=1628): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d62000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0xffef, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.79791963s ago: executing program 1 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000ffffff90000000006dfeff00850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x98, 0x30, 0x301, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0xffffffff}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (fail_nth: 4) 5.79744026s ago: executing program 7 (id=1630): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x24, 0x9, 0x5}, 0x4e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0xfffffffa, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0x10, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0x75e, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xc8, 0x40003, 0x5, 0x3, 0xba55, 0x101, 0x1, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xfffffffe, 0x4, 0x6, 0x1000, 0x5, 0x40, 0xb, 0xa, 0x5], [0x6, 0x20001e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x6, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x3, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7, 0x3ff, 0x0, 0xfffffffe, 0xffffffff, 0xffff, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0x8f, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x7, 0x8, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x80003], [0x401, 0xc584, 0xffff, 0xcd3, 0x4, 0x20, 0x404, 0x4, 0x8, 0x12, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x43f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x5, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x218c, 0x7, 0x47, 0x0, 0x3, 0x4, 0x3, 0xfffff000, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x30000, 0x9, 0x4, 0xea, 0x9, 0xa0000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x4, 0xffffffff, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x7, 0x7, 0x0, 0x5, 0x1e2, 0x9, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x7fc, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x804, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x4, 0x202, 0x6, 0x2, 0xfffffffd, 0xa, 0xe, 0xff, 0xf, 0xf, 0x138, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x3, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 5.7954147s ago: executing program 4 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000006, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 5.79509695s ago: executing program 1 (id=1632): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000000000000100000000020000000000002c000000000000000000000007000000070beaffffffff0a0101004408bae000000000"], 0x48}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb108590daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a36b620edf6ed3", 0x5d}, {&(0x7f0000000e00)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000040000a000000", @ANYRES32=0x0, @ANYBLOB="14000100fe0200000000000000000000000000010800090040252e00"], 0x34}}, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001a80)=""/4096, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc095}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, 0x0, 0x0, 0x100}, 0x94) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 4.997903189s ago: executing program 4 (id=1633): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x80000000, 0x80000001, 0x5, [0x8, 0x4, 0x7, 0x9, 0x0]}}) 4.3715586s ago: executing program 7 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) socket$nl_generic(0x10, 0x3, 0x10) 2.704019874s ago: executing program 7 (id=1635): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) 2.702640234s ago: executing program 4 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x3014852, &(0x7f0000000600)=ANY=[], 0x1, 0x1502, &(0x7f0000004580)="$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") socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000001c0)={0xbd6b, 0x4, 0x0, 0xf7ff, 0xdf, "4ae23ae17df2e9890009000005000000001000", 0x406, 0x4}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000440)='./file2\x00', 0x810, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES64=0x0], 0xfd, 0x1505, &(0x7f0000002e00)="$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") open(&(0x7f0000000380)='./file1\x00', 0x4800, 0x0) 2.701747844s ago: executing program 1 (id=1637): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'erspan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 2.393504265s ago: executing program 3 (id=1638): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2.378269407s ago: executing program 1 (id=1639): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080) 1.750251558s ago: executing program 7 (id=1640): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) eventfd(0x6) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.720776171s ago: executing program 7 (id=1641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000240)=@ethtool_wolinfo={0x6, 0xd, 0x0, "38212786ce58"}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syslog(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x26020480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobarrier}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv1}]}, 0x1, 0x566, &(0x7f0000000fc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 1.637953829s ago: executing program 6 (id=1642): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000d40)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@nolazytime}, {@dioread_nolock}, {@grpquota}]}, 0xff, 0x44b, &(0x7f0000001780)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000001000500000000000400000000000000080000", @ANYBLOB="10000500000000002000000000000000754ad3244a683afce7ad94d342a9"], 0x2c, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x21, 0x11, 0x10, 0x4, 0xe80, 0x7, 0x40}}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x48) 1.62973208s ago: executing program 3 (id=1643): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000d40)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@nolazytime}, {@dioread_nolock}, {@grpquota}]}, 0xff, 0x44b, &(0x7f0000001780)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000001000500000000000400000000000000080000", @ANYBLOB="10000500000000002000000000000000754ad3244a683afce7ad94d342a9"], 0x2c, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x21, 0x11, 0x10, 0x4, 0xe80, 0x7, 0x40}}) close_range(r3, 0xffffffffffffffff, 0x0) (fail_nth: 1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x48) 1.265550716s ago: executing program 1 (id=1644): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newrule={0x2c, 0x20, 0x301, 0xfffffffc, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x0, 0x10, 0x0, 0x0, 0x7, 0xf}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x2c}}, 0x44004) 838.388388ms ago: executing program 7 (id=1645): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x24, 0x9, 0x5}, 0x4e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0xfffffffa, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0x10, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0x75e, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xc8, 0x40003, 0x5, 0x3, 0xba55, 0x101, 0x1, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xfffffffe, 0x4, 0x6, 0x1000, 0x5, 0x40, 0xb, 0xa, 0x5], [0x6, 0x20001e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x6, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x3, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7, 0x3ff, 0x0, 0xfffffffe, 0xffffffff, 0xffff, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0x8f, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x7, 0x8, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x80003], [0x401, 0xc584, 0xffff, 0xcd3, 0x4, 0x20, 0x404, 0x4, 0x8, 0x12, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x43f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x5, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x218c, 0x7, 0x47, 0x0, 0x3, 0x4, 0x3, 0xfffff000, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x30000, 0x9, 0x4, 0xea, 0x9, 0xa0000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x4, 0xffffffff, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x7, 0x7, 0x0, 0x5, 0x1e2, 0x9, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x7fc, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x804, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x4, 0x202, 0x6, 0x2, 0xfffffffd, 0xa, 0xe, 0xff, 0xf, 0xf, 0x138, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x3, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 6 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 118] bridge0: port 3(gretap0) entered forwarding state [ 482.304127][ T4118] device gretap0 left promiscuous mode [ 482.309789][ T4118] bridge0: port 3(gretap0) entered disabled state [ 482.336584][ T571] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 482.353101][ T28] audit: type=1400 audit(2000000330.960:306): avc: denied { sqpoll } for pid=4109 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 482.528844][ T571] usb 3-1: Invalid ep0 maxpacket: 64 [ 482.678826][ T571] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 482.881857][ T571] usb 3-1: Invalid ep0 maxpacket: 64 [ 482.888277][ T571] usb usb3-port1: attempt power cycle [ 483.089725][ T4122] loop1: detected capacity change from 0 to 256 [ 483.124591][ T4122] FAT-fs (loop1): bogus number of FAT sectors [ 483.151121][ T4122] FAT-fs (loop1): Can't find a valid FAT filesystem [ 483.729425][ T571] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 483.779130][ T571] usb 3-1: Invalid ep0 maxpacket: 64 [ 483.887462][ T4132] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 483.928905][ T571] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 483.959250][ T571] usb 3-1: Invalid ep0 maxpacket: 64 [ 483.964762][ T571] usb usb3-port1: unable to enumerate USB device [ 484.108830][ T4134] can0: slcan on ttyS3. [ 484.219059][ T4134] can0 (unregistered): slcan off ttyS3. [ 485.364038][ T4141] loop1: detected capacity change from 0 to 40427 [ 485.379064][ T4141] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 485.395241][ T4141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 485.404728][ T4141] F2FS-fs (loop1): invalid crc value [ 485.433031][ T4141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 485.485139][ T4141] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 485.492710][ T4141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 485.591340][ T4141] overlayfs: failed to resolve './bus': -2 [ 485.927692][ T4165] bridge0: port 3(gretap0) entered blocking state [ 485.934619][ T4165] bridge0: port 3(gretap0) entered disabled state [ 485.943928][ T4165] device gretap0 entered promiscuous mode [ 485.950244][ T4165] bridge0: port 3(gretap0) entered blocking state [ 485.956693][ T4165] bridge0: port 3(gretap0) entered forwarding state [ 485.976180][ T4165] device gretap0 left promiscuous mode [ 485.982217][ T4165] bridge0: port 3(gretap0) entered disabled state [ 486.836247][ T4167] loop3: detected capacity change from 0 to 1024 [ 486.888345][ T4167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 486.928761][ T28] audit: type=1400 audit(2000000335.600:307): avc: denied { setattr } for pid=4166 comm="syz.3.1010" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 487.142021][ T4176] loop5: detected capacity change from 0 to 4096 [ 487.165909][ T4176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 487.308752][ T571] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 487.410386][ T4176] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 487.499268][ T571] usb 2-1: Using ep0 maxpacket: 16 [ 487.505317][ T571] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 487.514498][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.525306][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.535149][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.545517][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.556018][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.566285][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.585691][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.596922][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.613627][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.925158][ T4185] device syzkaller0 entered promiscuous mode [ 488.009218][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.049317][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.062607][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.087223][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.099483][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.102551][ T284] EXT4-fs (loop3): unmounting filesystem. [ 488.138309][ T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.150566][ T571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.322006][ T571] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.343926][ T571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.352169][ T571] usb 2-1: Product: syz [ 488.356448][ T571] usb 2-1: Manufacturer: syz [ 488.361110][ T571] usb 2-1: SerialNumber: syz [ 488.579608][ T571] usb 2-1: 0:2 : does not exist [ 488.594733][ T571] usb 2-1: USB disconnect, device number 11 [ 488.611907][ T4199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1015'. [ 488.625252][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 488.790824][ T4198] loop2: detected capacity change from 0 to 40427 [ 488.803934][ T4198] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 488.818154][ T4198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 488.837744][ T4198] F2FS-fs (loop2): invalid crc value [ 489.013154][ T4198] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 489.660131][ T4198] F2FS-fs (loop2): Start checkpoint disabled! [ 489.684372][ T4198] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 489.704240][ T4198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 490.028968][ T373] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 490.055483][ T286] syz-executor: attempt to access beyond end of device [ 490.055483][ T286] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 490.104821][ T286] syz-executor: attempt to access beyond end of device [ 490.104821][ T286] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 490.198972][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 490.238760][ T373] usb 2-1: Using ep0 maxpacket: 32 [ 490.245977][ T373] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.317970][ T43] kworker/u4:2: attempt to access beyond end of device [ 490.317970][ T43] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 490.344312][ T373] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.418810][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 490.426412][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.453387][ T373] usb 2-1: config 0 interface 0 has no altsetting 0 [ 490.511150][ T373] usb 2-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 490.534828][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.038251][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.055959][ T60] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 491.087983][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.096818][ T373] usb 2-1: config 0 descriptor?? [ 491.262684][ T60] usb 6-1: config 0 descriptor?? [ 491.398262][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.405647][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.413696][ T4227] device bridge_slave_0 entered promiscuous mode [ 491.421230][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.428366][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.436454][ T4227] device bridge_slave_1 entered promiscuous mode [ 491.517753][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.524906][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.532258][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.539325][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.568576][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.577711][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.585518][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.603888][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.608651][ T373] wacom 0003:056A:0004.0003: unknown main item tag 0x0 [ 491.613031][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.619899][ T373] wacom 0003:056A:0004.0003: Unknown device_type for 'HID 056a:0004'. Ignoring. [ 491.625911][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.643324][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.651853][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.658963][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.775085][ T4212] loop1: detected capacity change from 0 to 512 [ 491.793725][ T4212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 491.812349][ T4212] EXT4-fs (loop1): 1 truncate cleaned up [ 491.818171][ T4212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 491.843781][ T4237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.858356][ T4237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.866938][ T571] usb 2-1: USB disconnect, device number 12 [ 492.432446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.441813][ T283] EXT4-fs (loop1): unmounting filesystem. [ 492.449194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.457426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.466232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.511348][ T4227] device veth0_vlan entered promiscuous mode [ 492.526937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.532529][ T4251] loop1: detected capacity change from 0 to 256 [ 492.538240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.550646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.555610][ T4251] FAT-fs (loop1): bogus number of FAT sectors [ 492.559104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.598794][ T4251] FAT-fs (loop1): Can't find a valid FAT filesystem [ 492.617636][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.645676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.698562][ T4227] device veth1_macvtap entered promiscuous mode [ 492.839366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.853061][ T4254] loop1: detected capacity change from 0 to 256 [ 492.855061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.867896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.875564][ T4254] FAT-fs (loop1): bogus number of FAT sectors [ 492.876882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.892833][ T4254] FAT-fs (loop1): Can't find a valid FAT filesystem [ 492.895007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.909897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.918562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.388020][ T4264] device syzkaller0 entered promiscuous mode [ 493.408832][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 493.414875][ T60] usbhid: probe of 6-1:0.0 failed with error -71 [ 493.443332][ T60] usb 6-1: USB disconnect, device number 5 [ 493.468410][ T4270] loop5: detected capacity change from 0 to 512 [ 493.488120][ T4270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 493.496485][ T4270] System zones: 1-12 [ 493.501181][ T4270] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1038: Directory hole found for htree index block 0 [ 493.516668][ T4270] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 493.524992][ T4270] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1038: Directory hole found for htree index block 0 [ 493.537939][ T4270] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 493.546405][ T4270] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 493.847636][ T4274] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1038: Directory hole found for htree index block 0 [ 494.900028][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 495.060052][ T4289] loop3: detected capacity change from 0 to 8192 [ 495.067668][ T28] audit: type=1400 audit(2000000343.660:308): avc: denied { getopt } for pid=4279 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 495.877253][ T4295] loop5: detected capacity change from 0 to 256 [ 495.926071][ T4295] FAT-fs (loop5): bogus number of FAT sectors [ 495.938954][ T4295] FAT-fs (loop5): Can't find a valid FAT filesystem [ 496.189257][ T4310] loop5: detected capacity change from 0 to 16 [ 496.325490][ T4315] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 496.570400][ T4317] can0: slcan on ttyS3. [ 496.638846][ T4317] can0 (unregistered): slcan off ttyS3. [ 497.749146][ T28] audit: type=1400 audit(2000000346.450:309): avc: denied { create } for pid=4297 comm="syz.4.1046" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 497.750632][ T4298] overlayfs: failed to clone upperpath [ 497.773288][ T4321] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 497.796336][ T4310] loop5: detected capacity change from 0 to 32768 [ 497.870980][ T4310] loop5: p1 p3 < p5 p6 > [ 498.089857][ T4330] can0: slcan on ttyS3. [ 498.178934][ T4330] can0 (unregistered): slcan off ttyS3. [ 498.952460][ T4342] loop3: detected capacity change from 0 to 256 [ 499.012167][ T571] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 499.282895][ T4344] device syzkaller0 entered promiscuous mode [ 499.313447][ T4342] FAT-fs (loop3): bogus number of FAT sectors [ 499.319811][ T4342] FAT-fs (loop3): Can't find a valid FAT filesystem [ 499.708996][ T28] audit: type=1326 audit(2000000348.310:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4347 comm="syz.3.1061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f392738efc9 code=0x0 [ 499.953375][ T4358] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 500.169582][ T4362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1058'. [ 501.037001][ T571] usb 6-1: device not accepting address 6, error -71 [ 501.998844][ T4364] device syzkaller0 entered promiscuous mode [ 502.071386][ T4368] can0: slcan on ttyS3. [ 502.569232][ T4368] can0 (unregistered): slcan off ttyS3. [ 503.094707][ T4371] overlayfs: failed to clone upperpath [ 503.112642][ T4387] overlayfs: failed to clone lowerpath [ 503.120859][ T4387] overlayfs: failed to clone lowerpath [ 503.143405][ T4389] loop6: detected capacity change from 0 to 256 [ 503.159132][ T4389] FAT-fs (loop6): bogus number of FAT sectors [ 503.166074][ T4389] FAT-fs (loop6): Can't find a valid FAT filesystem [ 504.751940][ T4400] device syzkaller0 entered promiscuous mode [ 504.973737][ T4405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 505.203011][ T4411] can0: slcan on ttyS3. [ 505.598996][ T4411] can0 (unregistered): slcan off ttyS3. [ 506.347764][ T4419] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 506.455517][ T4424] loop6: detected capacity change from 0 to 256 [ 506.545502][ T4425] can0: slcan on ttyS3. [ 506.698803][ T4425] can0 (unregistered): slcan off ttyS3. [ 506.714811][ T4424] FAT-fs (loop6): bogus number of FAT sectors [ 506.776114][ T4424] FAT-fs (loop6): Can't find a valid FAT filesystem [ 507.637252][ T4443] netlink: 'syz.1.1085': attribute type 2 has an invalid length. [ 507.723568][ T4446] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 507.822071][ T4423] overlayfs: failed to clone upperpath [ 508.732182][ T4452] can0: slcan on ttyS3. [ 510.158820][ T4452] can0 (unregistered): slcan off ttyS3. [ 510.618834][ T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 510.828817][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 510.836477][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.859059][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.873848][ T60] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 510.883329][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.899348][ T60] usb 4-1: config 0 descriptor?? [ 511.112769][ T4477] loop6: detected capacity change from 0 to 256 [ 511.121679][ T4479] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 511.143480][ T4477] FAT-fs (loop6): bogus number of FAT sectors [ 511.153961][ T4477] FAT-fs (loop6): Can't find a valid FAT filesystem [ 511.333888][ T4483] can0: slcan on ttyS3. [ 511.405736][ T4483] can0 (unregistered): slcan off ttyS3. [ 511.618242][ T28] audit: type=1400 audit(2000000360.310:311): avc: denied { getopt } for pid=4484 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 511.850148][ T4480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.899187][ T4480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.337245][ T4490] loop6: detected capacity change from 0 to 40427 [ 512.345213][ T4490] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 512.353131][ T4490] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 512.369477][ T4490] F2FS-fs (loop6): invalid crc value [ 512.381207][ T4490] F2FS-fs (loop6): Found nat_bits in checkpoint [ 512.428271][ T4490] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 512.435493][ T4490] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 512.461849][ T28] audit: type=1400 audit(2000000361.160:312): avc: denied { write open } for pid=4489 comm="syz.6.1097" path=2F202864656C6574656429 dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 512.503215][ T28] audit: type=1400 audit(2000000361.160:313): avc: denied { create } for pid=4489 comm="syz.6.1097" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 512.525269][ T28] audit: type=1400 audit(2000000361.160:314): avc: denied { rename } for pid=4489 comm="syz.6.1097" name="#d" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 512.561600][ T28] audit: type=1400 audit(2000000361.160:315): avc: denied { unlink } for pid=4489 comm="syz.6.1097" name="#e" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 512.766349][ T4505] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 512.971416][ T4507] can0: slcan on ttyS3. [ 513.019612][ T4507] can0 (unregistered): slcan off ttyS3. [ 513.748580][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 513.756504][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 513.889277][ T60] usb 4-1: USB disconnect, device number 9 [ 513.897627][ T4517] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 514.194933][ T4520] can0: slcan on ttyS3. [ 514.274343][ T4520] can0 (unregistered): slcan off ttyS3. [ 516.688735][ T4531] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 516.768096][ T4539] tipc: Started in network mode [ 516.778780][ T4539] tipc: Node identity ac14140f, cluster identity 4711 [ 516.785702][ T4539] tipc: New replicast peer: 255.255.255.255 [ 516.809044][ T4539] tipc: Enabled bearer , priority 10 [ 516.904635][ T4541] can0: slcan on ttyS3. [ 516.958839][ T4541] can0 (unregistered): slcan off ttyS3. [ 517.104122][ T4537] Driver unsupported XDP return value 0 on prog (id 573) dev N/A, expect packet loss! [ 517.532219][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 517.749569][ T28] audit: type=1400 audit(2000000366.240:316): avc: denied { getopt } for pid=4544 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 517.932828][ T2943] tipc: Node number set to 2886997007 [ 517.945987][ T4556] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 518.124654][ T4561] can0: slcan on ttyS3. [ 518.155967][ T37] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 518.198777][ T4561] can0 (unregistered): slcan off ttyS3. [ 518.368715][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 518.376439][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.398366][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.416683][ T37] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 518.427226][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.483622][ T37] usb 2-1: config 0 descriptor?? [ 519.507683][ T4568] device syzkaller0 entered promiscuous mode [ 519.594526][ T4563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.633110][ T4563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.184313][ T4585] loop5: detected capacity change from 0 to 512 [ 520.192001][ T4585] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 520.203895][ T4585] EXT4-fs (loop5): 1 truncate cleaned up [ 520.209850][ T4585] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 520.413398][ T4592] input: syz1 as /devices/virtual/input/input17 [ 520.428985][ T4592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1123'. [ 521.070307][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 521.087084][ T37] usbhid: probe of 2-1:0.0 failed with error -71 [ 521.612876][ T37] usb 2-1: USB disconnect, device number 13 [ 521.651473][ T4595] loop6: detected capacity change from 0 to 128 [ 522.340524][ T4601] device syzkaller0 entered promiscuous mode [ 522.947543][ T4606] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 524.112192][ T4610] slcan: can't register candev [ 524.117116][ T4610] Falling back ldisc for ttyS3. [ 524.563231][ T4612] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 524.573280][ T4612] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 524.639994][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 524.745520][ T4631] bridge0: port 3(gretap0) entered blocking state [ 524.752306][ T4631] bridge0: port 3(gretap0) entered disabled state [ 524.761443][ T4631] device gretap0 entered promiscuous mode [ 524.767613][ T4631] bridge0: port 3(gretap0) entered blocking state [ 524.774094][ T4631] bridge0: port 3(gretap0) entered forwarding state [ 524.813528][ T4631] device gretap0 left promiscuous mode [ 524.819500][ T4631] bridge0: port 3(gretap0) entered disabled state [ 524.854770][ T4625] loop1: detected capacity change from 0 to 256 [ 525.009162][ T4630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=4630 comm=syz.6.1136 [ 525.025326][ T4625] FAT-fs (loop1): bogus number of FAT sectors [ 525.126778][ T4625] FAT-fs (loop1): Can't find a valid FAT filesystem [ 525.906198][ T28] audit: type=1400 audit(2000000374.600:317): avc: denied { read } for pid=4642 comm="syz.1.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.966013][ T4646] loop3: detected capacity change from 0 to 512 [ 525.986706][ T4646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.003475][ T4646] EXT4-fs (loop3): 1 truncate cleaned up [ 526.010101][ T4627] loop5: detected capacity change from 0 to 40427 [ 526.016910][ T4646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 526.037290][ T4627] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 526.045222][ T4627] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 526.075740][ T4627] F2FS-fs (loop5): invalid crc value [ 526.083010][ T4627] F2FS-fs (loop5): Found nat_bits in checkpoint [ 526.182224][ T4657] loop1: detected capacity change from 0 to 1024 [ 526.191627][ T4657] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.377399][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 526.574192][ T4627] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 526.645536][ T4627] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 527.039801][ T283] EXT4-fs (loop1): unmounting filesystem. [ 527.095196][ T4665] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1142'. [ 527.115285][ T4664] input: syz1 as /devices/virtual/input/input18 [ 527.125272][ T4667] loop1: detected capacity change from 0 to 512 [ 527.211351][ T4667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 527.245695][ T4669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1141'. [ 527.263391][ T4667] EXT4-fs (loop1): 1 truncate cleaned up [ 527.269163][ T4667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 527.453923][ T4674] input: syz1 as /devices/virtual/input/input19 [ 527.464468][ T4674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1143'. [ 527.603943][ T28] audit: type=1400 audit(2000000376.300:318): avc: denied { mount } for pid=4672 comm="syz.5.1144" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 527.749471][ T28] audit: type=1400 audit(2000000376.450:319): avc: denied { unmount } for pid=1487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 528.122081][ T4684] can0: slcan on ttyS3. [ 528.172685][ T283] EXT4-fs (loop1): unmounting filesystem. [ 528.190870][ T4684] can0 (unregistered): slcan off ttyS3. [ 528.608789][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 528.889912][ T60] usb 7-1: config 0 has an invalid interface number: 213 but max is 0 [ 528.911031][ T60] usb 7-1: config 0 has no interface number 0 [ 529.016547][ T60] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 529.036030][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.054607][ T60] usb 7-1: Product: syz [ 529.255409][ T4696] loop1: detected capacity change from 0 to 256 [ 529.275075][ T284] EXT4-fs (loop3): unmounting filesystem. [ 529.282945][ T60] usb 7-1: Manufacturer: syz [ 529.306110][ T28] audit: type=1400 audit(2000000378.000:320): avc: denied { ioctl } for pid=4693 comm="syz.5.1151" path="socket:[29396]" dev="sockfs" ino=29396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 529.338794][ T60] usb 7-1: SerialNumber: syz [ 529.347874][ T4697] process 'syz.5.1151' launched '/dev/fd/10' with NULL argv: empty string added [ 529.357317][ T28] audit: type=1400 audit(2000000378.060:321): avc: denied { execute_no_trans } for pid=4693 comm="syz.5.1151" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 529.387022][ T4696] FAT-fs (loop1): bogus number of FAT sectors [ 529.400267][ T4696] FAT-fs (loop1): Can't find a valid FAT filesystem [ 529.408820][ T60] usb 7-1: config 0 descriptor?? [ 529.421817][ T4699] loop3: detected capacity change from 0 to 128 [ 530.151242][ T4704] device syzkaller0 entered promiscuous mode [ 530.478748][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 531.168903][ T28] audit: type=1400 audit(2000000379.810:322): avc: denied { mount } for pid=4686 comm="syz.6.1147" name="/" dev="ramfs" ino=29437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 531.409979][ T28] audit: type=1400 audit(2000000380.110:323): avc: denied { audit_write } for pid=4722 comm="syz.4.1159" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 531.467819][ T28] audit: type=1107 audit(2000000380.140:324): pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='%jY:-R}"_{S&cE*&JU+9o<ƎppHi[AMl/^@U|B!:5m%ۦƣ/1s^fuB VP>خTT?H"GA-!t~ ;y WS3f' [ 531.578735][ T37] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 531.629494][ T4732] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1156'. [ 531.728701][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 531.778736][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 531.790139][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.853603][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.866746][ T37] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 531.876188][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.885304][ T37] usb 2-1: config 0 descriptor?? [ 531.950911][ T24] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 531.961628][ T24] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 531.972136][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 532.002506][ T4736] can0: slcan on ttyS3. [ 532.044807][ T24] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 532.054627][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.062908][ T4736] can0 (unregistered): slcan off ttyS3. [ 532.256883][ T24] usb 4-1: Product: syz [ 532.281958][ T24] usb 4-1: Manufacturer: syz [ 532.314180][ T24] usb 4-1: SerialNumber: syz [ 532.389306][ T4730] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 532.427714][ T4730] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 532.616336][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.733319][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.887570][ T60] usb 7-1: USB disconnect, device number 2 [ 532.962678][ T4751] loop6: detected capacity change from 0 to 512 [ 532.985750][ T4751] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 533.004723][ T4754] loop5: detected capacity change from 0 to 1024 [ 533.017121][ T4754] EXT4-fs: Ignoring removed nobh option [ 533.023852][ T4754] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 533.038966][ T4751] EXT4-fs (loop6): 1 truncate cleaned up [ 533.045245][ T4754] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 533.045291][ T4751] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 533.059912][ T24] rtl8150 4-1:1.0: couldn't reset the device [ 533.244164][ T4763] device veth1_macvtap left promiscuous mode [ 534.582932][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 534.605157][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 534.611235][ T37] usbhid: probe of 2-1:0.0 failed with error -71 [ 534.617736][ T24] rtl8150: probe of 4-1:1.0 failed with error -5 [ 534.625218][ T37] usb 2-1: USB disconnect, device number 14 [ 536.567782][ T4770] loop3: detected capacity change from 0 to 8192 [ 537.798080][ T24] usb 4-1: USB disconnect, device number 10 [ 537.836040][ T4776] input: syz1 as /devices/virtual/input/input20 [ 537.881703][ T4776] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1164'. [ 538.063646][ T28] audit: type=1400 audit(2000000386.760:325): avc: denied { read } for pid=4783 comm="syz.3.1175" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 538.099568][ T28] audit: type=1400 audit(2000000386.790:326): avc: denied { open } for pid=4783 comm="syz.3.1175" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 538.234472][ T4775] device syzkaller0 entered promiscuous mode [ 538.475402][ T4791] loop5: detected capacity change from 0 to 8192 [ 539.293544][ T4793] loop3: detected capacity change from 0 to 256 [ 539.353098][ T4793] FAT-fs (loop3): bogus number of FAT sectors [ 539.391081][ T4793] FAT-fs (loop3): Can't find a valid FAT filesystem [ 539.477380][ T2138] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 539.527537][ T4798] loop5: detected capacity change from 0 to 128 [ 539.541724][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 539.996594][ T4811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.030727][ T4812] loop5: detected capacity change from 0 to 256 [ 540.114256][ T4812] FAT-fs (loop5): Directory bread(block 64) failed [ 540.167081][ T4812] FAT-fs (loop5): Directory bread(block 65) failed [ 540.231269][ T4812] FAT-fs (loop5): Directory bread(block 66) failed [ 540.276644][ T4812] FAT-fs (loop5): Directory bread(block 67) failed [ 540.289178][ T4812] FAT-fs (loop5): Directory bread(block 68) failed [ 540.314940][ T4812] FAT-fs (loop5): Directory bread(block 69) failed [ 540.329851][ T4812] FAT-fs (loop5): Directory bread(block 70) failed [ 540.351844][ T4812] FAT-fs (loop5): Directory bread(block 71) failed [ 540.374812][ T4812] FAT-fs (loop5): Directory bread(block 72) failed [ 540.381654][ T4812] FAT-fs (loop5): Directory bread(block 73) failed [ 540.490988][ T4819] loop3: detected capacity change from 0 to 2048 [ 540.538805][ T4819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 540.547426][ T4819] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.628762][ T37] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 541.062589][ T4826] loop6: detected capacity change from 0 to 8192 [ 541.148482][ T4826] device veth1_macvtap left promiscuous mode [ 541.154664][ T4826] device macsec0 entered promiscuous mode [ 541.316246][ T284] EXT4-fs (loop3): unmounting filesystem. [ 541.628711][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 541.634968][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.666379][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.784534][ T37] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 541.814052][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.654818][ T37] usb 2-1: config 0 descriptor?? [ 542.813116][ T4837] loop3: detected capacity change from 0 to 256 [ 542.832210][ T4837] FAT-fs (loop3): bogus number of FAT sectors [ 542.838493][ T4837] FAT-fs (loop3): Can't find a valid FAT filesystem [ 542.992073][ T2142] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 543.286831][ T4839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.300930][ T4839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.891767][ T4859] loop5: detected capacity change from 0 to 256 [ 544.111021][ T4859] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 544.124943][ T4859] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 544.378896][ T4861] can0: slcan on ttyS3. [ 544.391271][ T28] audit: type=1400 audit(2000000392.990:327): avc: denied { write } for pid=4856 comm="syz.5.1193" name="file1" dev="loop5" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 544.679118][ T4862] can0 (unregistered): slcan off ttyS3. [ 544.721319][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 544.727351][ T37] usbhid: probe of 2-1:0.0 failed with error -71 [ 544.734740][ T4866] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 544.874764][ T4870] futex_wake_op: syz.3.1196 tries to shift op by -1; fix this program [ 544.893638][ T37] usb 2-1: USB disconnect, device number 15 [ 545.139621][ T4872] can0: slcan on ttyS3. [ 545.228866][ T4873] can0 (unregistered): slcan off ttyS3. [ 546.421321][ T28] audit: type=1326 audit(2000000395.090:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392738efc9 code=0x7ffc0000 [ 546.513491][ T4878] loop6: detected capacity change from 0 to 8192 [ 547.683361][ T4887] loop5: detected capacity change from 0 to 512 [ 547.749506][ T28] audit: type=1400 audit(2000000395.100:329): avc: denied { read } for pid=4869 comm="syz.3.1196" path="socket:[28536]" dev="sockfs" ino=28536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 547.815922][ T4887] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 547.845236][ T4887] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.902030][ T28] audit: type=1326 audit(2000000395.110:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392738efc9 code=0x7ffc0000 [ 547.933444][ T4887] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1201'. [ 547.963586][ T4887] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1201'. [ 548.008698][ T28] audit: type=1326 audit(2000000395.270:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f392738efc9 code=0x7ffc0000 [ 548.038714][ T28] audit: type=1326 audit(2000000395.270:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392738efc9 code=0x7ffc0000 [ 548.062308][ T28] audit: type=1326 audit(2000000395.280:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3927390e5c code=0x7ffc0000 [ 548.085942][ T28] audit: type=1326 audit(2000000395.280:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3927390d94 code=0x7ffc0000 [ 548.172117][ T28] audit: type=1326 audit(2000000395.280:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3927390d94 code=0x7ffc0000 [ 548.488280][ T4905] device syzkaller0 entered promiscuous mode [ 548.529678][ T28] audit: type=1326 audit(2000000395.280:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392738efc9 code=0x7ffc0000 [ 548.738711][ T546] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 548.884803][ T4910] loop1: detected capacity change from 0 to 40427 [ 548.895222][ T4910] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 548.904473][ T4910] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 548.913554][ T4910] F2FS-fs (loop1): invalid crc value [ 548.920436][ T4910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 548.930296][ T546] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 548.939491][ T546] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.950058][ T546] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 548.959320][ T546] usb 6-1: config 1 has no interface number 1 [ 548.982478][ T546] usb 6-1: string descriptor 0 read error: -22 [ 548.986919][ T4910] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 548.989040][ T546] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.005365][ T4910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 549.013198][ T19] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 549.035713][ T546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.097119][ T546] usb 6-1: MIDIStreaming interface descriptor not found [ 549.107715][ T546] snd-usb-audio: probe of 6-1:1.2 failed with error -16 [ 549.211364][ T4921] loop6: detected capacity change from 0 to 256 [ 549.221701][ T4921] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 549.232498][ T4921] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 549.241863][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 549.263365][ T4921] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 549.573267][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.586447][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.321632][ T431] usb 6-1: USB disconnect, device number 8 [ 550.406908][ T4926] loop1: detected capacity change from 0 to 512 [ 550.413612][ T19] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 550.424895][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.439732][ T19] usb 4-1: config 0 descriptor?? [ 550.453544][ T4928] loop6: detected capacity change from 0 to 1024 [ 550.469871][ T4928] EXT4-fs: Ignoring removed nobh option [ 550.472502][ T4926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 550.485357][ T4928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 550.485419][ T4926] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.519561][ T4928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 550.519868][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 550.519884][ T28] audit: type=1400 audit(2000000399.220:346): avc: denied { read } for pid=4925 comm="syz.1.1210" path="/240/file1/ts" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 550.639685][ T283] EXT4-fs (loop1): unmounting filesystem. [ 550.964569][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 551.163332][ T19] ntrig 0003:1B96:0008.0004: unknown main item tag 0x0 [ 551.170712][ T19] ntrig 0003:1B96:0008.0004: unknown main item tag 0x0 [ 551.177725][ T19] ntrig 0003:1B96:0008.0004: item fetching failed at offset 2/7 [ 551.193035][ T19] ntrig 0003:1B96:0008.0004: parse failed [ 551.206115][ T19] ntrig: probe of 0003:1B96:0008.0004 failed with error -22 [ 551.241453][ T19] usb 4-1: USB disconnect, device number 11 [ 551.301512][ T4944] loop1: detected capacity change from 0 to 256 [ 551.312936][ T4944] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 551.323737][ T4944] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 551.324073][ T4946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4946 comm=syz.5.1215 [ 551.348196][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 551.356738][ T4944] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 551.794793][ T4961] loop3: detected capacity change from 0 to 256 [ 551.978445][ T4963] loop3: detected capacity change from 0 to 8192 [ 552.000309][ T4963] FAT-fs (loop3): bogus logical sector size 759 [ 552.038812][ T4963] FAT-fs (loop3): Can't find a valid FAT filesystem [ 552.052209][ T28] audit: type=1400 audit(2000000400.750:347): avc: denied { append } for pid=4962 comm="syz.3.1223" name="001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 552.125629][ T28] audit: type=1400 audit(2000000400.820:348): avc: denied { getattr } for pid=4969 comm="syz.3.1226" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 552.422443][ T4980] fuse: Bad value for 'fd' [ 552.469126][ T28] audit: type=1326 audit(2000000401.170:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bfb8efc9 code=0x7ffc0000 [ 552.695883][ T28] audit: type=1400 audit(2000000401.250:351): avc: denied { connect } for pid=4978 comm="syz.6.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 552.806331][ T28] audit: type=1326 audit(2000000401.190:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bfb8efc9 code=0x7ffc0000 [ 552.833896][ T28] audit: type=1326 audit(2000000401.320:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f42bfb8efc9 code=0x7ffc0000 [ 552.858051][ T28] audit: type=1326 audit(2000000401.320:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bfb8efc9 code=0x7ffc0000 [ 552.887817][ T28] audit: type=1326 audit(2000000401.320:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bfb8efc9 code=0x7ffc0000 [ 553.507932][ T4975] loop3: detected capacity change from 0 to 131072 [ 553.519269][ T5002] loop5: detected capacity change from 0 to 1024 [ 553.528220][ T4975] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 553.536997][ T4975] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 553.584373][ T4975] F2FS-fs (loop3): Found nat_bits in checkpoint [ 553.604729][ T5002] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 553.695919][ T37] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 553.707865][ T4975] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 553.715273][ T4975] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 554.088768][ T37] usb 7-1: Using ep0 maxpacket: 16 [ 554.095128][ T37] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 554.124792][ T37] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 554.145273][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.164251][ T37] usb 7-1: Product: syz [ 554.177653][ T37] usb 7-1: Manufacturer: syz [ 554.182613][ T37] usb 7-1: SerialNumber: syz [ 554.191355][ T37] usb 7-1: config 0 descriptor?? [ 554.215535][ T37] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 554.230530][ T37] usb 7-1: Detected FT232R [ 554.262381][ T5017] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1237'. [ 554.271563][ T5017] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1237'. [ 554.407814][ T37] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 554.487716][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 554.515075][ T37] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 554.608972][ T37] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 554.636757][ T37] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 554.666972][ T37] usb 7-1: USB disconnect, device number 3 [ 554.670302][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1239'. [ 554.686979][ T37] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 554.709328][ T37] ftdi_sio 7-1:0.0: device disconnected [ 554.972245][ T5026] loop6: detected capacity change from 0 to 1024 [ 555.069446][ T5026] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 555.276753][ T28] audit: type=1400 audit(2000000403.970:355): avc: denied { connect } for pid=5025 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 556.071545][ T5049] loop1: detected capacity change from 0 to 16 [ 556.082702][ T5049] erofs: (device loop1): mounted with root inode @ nid 36. [ 556.090706][ T5049] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 556.100368][ T5049] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 556.111315][ T5049] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 556.120275][ T5049] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 556.129968][ T5049] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 556.141113][ T5049] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 556.154214][ T5050] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1247'. [ 556.167924][ T5050] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1247'. [ 556.352238][ T5059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1248'. [ 557.208701][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 557.208727][ T28] audit: type=1326 audit(2000000405.900:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 557.645934][ T28] audit: type=1326 audit(2000000405.900:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 557.671759][ T5075] FAULT_INJECTION: forcing a failure. [ 557.671759][ T5075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.686334][ T28] audit: type=1326 audit(2000000405.940:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 557.701404][ T5075] CPU: 0 PID: 5075 Comm: syz.6.1253 Not tainted syzkaller #0 [ 557.710180][ T28] audit: type=1326 audit(2000000405.940:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 557.717049][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.741087][ T28] audit: type=1326 audit(2000000405.940:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 557.750476][ T5075] Call Trace: [ 557.750485][ T5075] [ 557.750494][ T5075] __dump_stack+0x21/0x24 [ 557.750523][ T5075] dump_stack_lvl+0xee/0x150 [ 557.774366][ T28] audit: type=1326 audit(2000000405.940:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 557.777161][ T5075] ? __cfi_dump_stack_lvl+0x8/0x8 [ 557.780353][ T28] audit: type=1326 audit(2000000405.940:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 557.784527][ T5075] ? _parse_integer+0x2a/0x40 [ 557.784563][ T5075] dump_stack+0x15/0x24 [ 557.849672][ T5075] should_fail_ex+0x3d4/0x520 [ 557.854367][ T5075] should_fail+0xb/0x10 [ 557.858533][ T5075] should_fail_usercopy+0x1a/0x20 [ 557.863603][ T5075] _copy_from_user+0x1e/0xc0 [ 557.868201][ T5075] ___sys_sendmsg+0x155/0x290 [ 557.872884][ T5075] ? __sys_sendmsg+0x270/0x270 [ 557.877692][ T5075] ? __kasan_check_write+0x14/0x20 [ 557.882859][ T5075] ? proc_fail_nth_write+0x17a/0x1f0 [ 557.888151][ T5075] ? vfs_write+0x9d6/0xca0 [ 557.892618][ T5075] ? __fdget+0x19c/0x220 [ 557.896872][ T5075] __x64_sys_sendmsg+0x1f0/0x2c0 [ 557.901842][ T5075] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 557.907315][ T5075] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 557.913401][ T5075] x64_sys_call+0x171/0x9a0 [ 557.917917][ T5075] do_syscall_64+0x4c/0xa0 [ 557.922339][ T5075] ? clear_bhb_loop+0x30/0x80 [ 557.927037][ T5075] ? clear_bhb_loop+0x30/0x80 [ 557.931808][ T5075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.937714][ T5075] RIP: 0033:0x7f090d98efc9 [ 557.942172][ T5075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.961904][ T5075] RSP: 002b:00007f090e7e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.970327][ T5075] RAX: ffffffffffffffda RBX: 00007f090dbe6180 RCX: 00007f090d98efc9 [ 557.978310][ T5075] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 557.986285][ T5075] RBP: 00007f090e7e9090 R08: 0000000000000000 R09: 0000000000000000 [ 557.994260][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.002237][ T5075] R13: 00007f090dbe6218 R14: 00007f090dbe6180 R15: 00007ffe4b261318 [ 558.010309][ T5075] [ 558.077099][ T5077] syz.5.1251[5077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.078329][ T5077] syz.5.1251[5077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.128010][ T5077] netlink: 'syz.5.1251': attribute type 3 has an invalid length. [ 558.149857][ T5077] netlink: 'syz.5.1251': attribute type 3 has an invalid length. [ 558.775894][ T28] audit: type=1326 audit(2000000405.940:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 558.824536][ T28] audit: type=1326 audit(2000000405.940:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 558.872785][ T28] audit: type=1326 audit(2000000405.940:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6618efc9 code=0x7ffc0000 [ 559.520433][ T5089] loop5: detected capacity change from 0 to 40427 [ 559.543747][ T5089] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 559.569975][ T5089] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 559.588526][ T5089] F2FS-fs (loop5): invalid crc value [ 559.614441][ T5089] F2FS-fs (loop5): Found nat_bits in checkpoint [ 559.701616][ T5089] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 559.712943][ T5089] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 559.955304][ T5106] loop3: detected capacity change from 0 to 256 [ 559.962392][ T5106] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 559.973158][ T5106] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 559.986491][ T5106] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 560.004527][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 560.013626][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 560.263584][ T5111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1264'. [ 560.324554][ T5113] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1263'. [ 560.615462][ T5115] loop5: detected capacity change from 0 to 512 [ 560.670009][ T5115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 560.717990][ T5115] EXT4-fs (loop5): Test dummy encryption mode enabled [ 560.900508][ T5115] EXT4-fs (loop5): 1 truncate cleaned up [ 560.928698][ T5115] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 561.498891][ T5130] loop6: detected capacity change from 0 to 512 [ 561.576051][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 561.651889][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1271'. [ 562.057701][ T5147] loop5: detected capacity change from 0 to 40427 [ 562.078545][ T5147] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 562.093181][ T5147] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 562.111616][ T5147] F2FS-fs (loop5): invalid crc value [ 562.137396][ T5147] F2FS-fs (loop5): Found nat_bits in checkpoint [ 562.233665][ T5147] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 562.260411][ T5147] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 562.529194][ T5167] overlayfs: failed to clone lowerpath [ 562.536745][ T5167] overlayfs: failed to clone lowerpath [ 563.082454][ T5173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1279'. [ 566.739444][ T5180] loop6: detected capacity change from 0 to 1024 [ 566.748321][ T5180] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.937100][ T5180] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 567.242347][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 567.725855][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1284'. [ 569.427045][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 569.427061][ T28] audit: type=1400 audit(2000000418.120:375): avc: denied { ioctl } for pid=5216 comm="syz.5.1291" path="socket:[30384]" dev="sockfs" ino=30384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 569.991014][ T5227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1294'. [ 570.332448][ T5229] loop6: detected capacity change from 0 to 1024 [ 570.357128][ T5229] EXT4-fs: Ignoring removed mblk_io_submit option [ 570.412017][ T5229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 570.522316][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 570.812269][ T5244] can0: slcan on ttyS3. [ 571.248793][ T5244] can0 (unregistered): slcan off ttyS3. [ 573.061215][ T5268] loop5: detected capacity change from 0 to 1024 [ 573.506036][ T5268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 573.663211][ T5268] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 573.872620][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 573.924527][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 574.141550][ T5279] loop5: detected capacity change from 0 to 256 [ 574.149090][ T5279] exfat: Deprecated parameter 'namecase' [ 574.170354][ T5279] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 574.208486][ T28] audit: type=1400 audit(2000000422.900:376): avc: denied { mounton } for pid=5278 comm="syz.5.1307" path="/188/file0/file0" dev="loop5" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 574.236120][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'. [ 574.246539][ T28] audit: type=1400 audit(2000000422.930:377): avc: denied { ioctl } for pid=5278 comm="syz.5.1307" path="/188/file0/file1" dev="loop5" ino=1048647 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 574.269573][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'. [ 574.316467][ T28] audit: type=1400 audit(2000000423.010:378): avc: denied { unlink } for pid=1487 comm="syz-executor" name="file0" dev="loop5" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 574.350571][ T28] audit: type=1400 audit(2000000423.010:379): avc: denied { rmdir } for pid=1487 comm="syz-executor" name="file0" dev="loop5" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 574.769781][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.776975][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.784920][ T5290] device bridge_slave_0 entered promiscuous mode [ 574.792370][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.800199][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.841579][ T5290] device bridge_slave_1 entered promiscuous mode [ 575.113864][ T10] device bridge_slave_1 left promiscuous mode [ 575.124706][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.165497][ T10] device bridge_slave_0 left promiscuous mode [ 575.215403][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.303102][ T10] device veth0_vlan left promiscuous mode [ 576.633429][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 576.833071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.003860][ T5304] loop3: detected capacity change from 0 to 40427 [ 577.017275][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.026032][ T5304] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 577.036159][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.068689][ T5304] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 577.078878][ T5304] F2FS-fs (loop3): fault_type options not supported [ 577.087387][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.094488][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.112255][ T5304] F2FS-fs (loop3): fault_injection options not supported [ 577.141980][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.148685][ T5304] F2FS-fs (loop3): Image doesn't support compression [ 577.165582][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.182441][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.189567][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.198974][ T5304] F2FS-fs (loop3): invalid crc value [ 577.211401][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.235727][ T5304] F2FS-fs (loop3): Found nat_bits in checkpoint [ 577.236699][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.262658][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.279095][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.295615][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.323416][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 577.339645][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 577.358482][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 577.375734][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 577.387430][ T5304] F2FS-fs (loop3): Start checkpoint disabled! [ 577.404022][ T5290] device veth0_vlan entered promiscuous mode [ 577.410674][ T5304] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 577.420036][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 577.431915][ T5304] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 577.443821][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 577.491503][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 577.511216][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 577.528226][ T5290] device veth1_macvtap entered promiscuous mode [ 577.544406][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 577.556193][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 577.573879][ T28] audit: type=1400 audit(2000000426.270:380): avc: denied { append } for pid=5302 comm="syz.3.1315" path="/264/file2/file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 577.605493][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 577.625288][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 577.642095][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.493261][ T5340] loop7: detected capacity change from 0 to 512 [ 579.508177][ T5336] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1321'. [ 579.684113][ T5181] kworker/u4:9: attempt to access beyond end of device [ 579.684113][ T5181] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 579.700168][ T5340] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 579.709190][ T5340] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.438499][ T5347] device syzkaller0 entered promiscuous mode [ 580.708124][ T5290] EXT4-fs (loop7): unmounting filesystem. [ 580.922480][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1325'. [ 581.361867][ T5363] loop6: detected capacity change from 0 to 8192 [ 582.758948][ T28] audit: type=1400 audit(2000000430.730:381): avc: denied { read } for pid=5365 comm="syz.7.1328" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 583.203390][ T5358] loop3: detected capacity change from 0 to 512 [ 583.225924][ T28] audit: type=1400 audit(2000000430.730:382): avc: denied { open } for pid=5365 comm="syz.7.1328" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 583.252332][ T5358] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 583.274728][ T5358] EXT4-fs (loop3): unable to read superblock [ 583.339658][ T28] audit: type=1400 audit(2000000430.740:383): avc: denied { ioctl } for pid=5365 comm="syz.7.1328" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 583.656473][ T5368] loop1: detected capacity change from 0 to 40427 [ 583.663767][ T5368] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 583.682784][ T5368] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 583.699499][ T5368] F2FS-fs (loop1): invalid crc value [ 583.755752][ T5368] F2FS-fs (loop1): Found nat_bits in checkpoint [ 583.779306][ T5392] loop6: detected capacity change from 0 to 256 [ 583.797001][ T5392] FAT-fs (loop6): bogus number of FAT sectors [ 583.803625][ T5392] FAT-fs (loop6): Can't find a valid FAT filesystem [ 583.815785][ T5368] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 583.828038][ T5368] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 583.829946][ T5395] netlink: 'syz.6.1336': attribute type 12 has an invalid length. [ 583.856507][ T5395] netlink: 'syz.6.1336': attribute type 29 has an invalid length. [ 583.870800][ T5395] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1336'. [ 583.977672][ T28] audit: type=1400 audit(2000000000.300:384): avc: denied { create } for pid=5367 comm="syz.1.1327" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 584.074762][ T28] audit: type=1400 audit(2000000000.400:385): avc: denied { mount } for pid=5400 comm="syz.6.1337" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 584.130659][ T28] audit: type=1400 audit(2000000000.420:386): avc: denied { remount } for pid=5400 comm="syz.6.1337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 584.180207][ T28] audit: type=1400 audit(2000000000.430:387): avc: denied { mounton } for pid=5400 comm="syz.6.1337" path="/64/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 584.223893][ T28] audit: type=1400 audit(2000000000.430:388): avc: denied { mount } for pid=5400 comm="syz.6.1337" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 584.308074][ T28] audit: type=1400 audit(2000000000.430:389): avc: denied { remount } for pid=5400 comm="syz.6.1337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 585.137929][ T5411] device veth1_macvtap left promiscuous mode [ 585.144103][ T5411] device macsec0 entered promiscuous mode [ 585.769193][ T5415] device batadv_slave_0 entered promiscuous mode [ 585.829239][ T28] audit: type=1400 audit(2000000000.440:390): avc: denied { unmount } for pid=4227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 586.263826][ T283] syz-executor: attempt to access beyond end of device [ 586.263826][ T283] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 586.568731][ T431] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 586.635292][ T5430] loop1: detected capacity change from 0 to 256 [ 586.668431][ T5430] FAT-fs (loop1): bogus number of FAT sectors [ 586.693226][ T5430] FAT-fs (loop1): Can't find a valid FAT filesystem [ 586.728960][ T5435] syz.4.1347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 586.780082][ T431] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 586.818876][ T431] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 36128, setting to 64 [ 586.839816][ T431] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.855674][ T431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 586.902006][ T5434] input: syz0 as /devices/virtual/input/input21 [ 586.906468][ T431] usb 7-1: SerialNumber: syz [ 586.924613][ T5415] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 586.947261][ T431] cdc_acm 7-1:1.0: skipping garbage [ 586.964327][ T431] cdc_acm: probe of 7-1:1.0 failed with error -12 [ 587.050664][ T5440] loop7: detected capacity change from 0 to 1024 [ 587.097537][ T5440] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 587.119428][ T334] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 587.127795][ T5435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5435 comm=syz.4.1347 [ 587.134876][ T5440] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 587.155085][ T431] usb 7-1: USB disconnect, device number 4 [ 587.156146][ T5440] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 587.162990][ T5412] device batadv_slave_0 left promiscuous mode [ 587.174371][ T5440] EXT4-fs (loop7): This should not happen!! Data will be lost [ 587.174371][ T5440] [ 587.190779][ T5440] EXT4-fs (loop7): Total free blocks count 0 [ 587.198052][ T5440] EXT4-fs (loop7): Free/Dirty block details [ 587.204821][ T5440] EXT4-fs (loop7): free_blocks=68451041280 [ 587.210838][ T5440] EXT4-fs (loop7): dirty_blocks=32 [ 587.216109][ T5440] EXT4-fs (loop7): Block reservation details [ 587.222190][ T5440] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 587.335358][ T334] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.345325][ T334] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 587.358437][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 587.365260][ T334] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 587.374585][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.479012][ T1300] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 587.658023][ T334] usb 2-1: config 0 descriptor?? [ 587.759790][ T1300] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 587.771225][ T1300] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 587.782368][ T5456] loop6: detected capacity change from 0 to 128 [ 587.788519][ T1300] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 587.801332][ T1300] usb 8-1: config 220 has no interface number 2 [ 587.807691][ T1300] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 587.809926][ T5456] FAT-fs (loop6): Unrecognized mount option "gid=0x0000000000000000;&е" or missing value [ 587.821297][ T1300] usb 8-1: config 220 interface 0 has no altsetting 0 [ 587.837948][ T1300] usb 8-1: config 220 interface 76 has no altsetting 0 [ 587.845224][ T1300] usb 8-1: config 220 interface 1 has no altsetting 0 [ 587.916355][ T1300] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 587.925513][ T1300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.933565][ T1300] usb 8-1: Product: syz [ 587.937831][ T1300] usb 8-1: Manufacturer: syz [ 587.942485][ T1300] usb 8-1: SerialNumber: syz [ 588.067635][ T334] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 588.074863][ T334] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 588.082018][ T334] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 588.089236][ T334] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 588.096343][ T334] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 588.179014][ T19] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 588.195208][ T1300] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 588.206351][ T1300] usb 8-1: No valid video chain found. [ 588.220979][ T1300] usb 8-1: selecting invalid altsetting 0 [ 588.295583][ T1300] usb 8-1: USB disconnect, device number 2 [ 588.378719][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 588.391098][ T19] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 588.400291][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.410502][ T19] usb 7-1: Product: syz [ 588.414758][ T19] usb 7-1: Manufacturer: syz [ 588.419460][ T19] usb 7-1: SerialNumber: syz [ 588.429019][ T19] usb 7-1: config 0 descriptor?? [ 588.436758][ T19] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 588.446019][ T19] usb 7-1: Detected FT232H [ 588.493220][ T5438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.501889][ T5438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.510496][ T5438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.519347][ T5438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.635050][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 588.717236][ T43] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 588.754651][ T431] usb 2-1: USB disconnect, device number 16 [ 590.464908][ T19] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 590.515655][ T5479] loop3: detected capacity change from 0 to 256 [ 590.522555][ T5479] FAT-fs (loop3): bogus number of FAT sectors [ 590.529147][ T5479] FAT-fs (loop3): Can't find a valid FAT filesystem [ 590.592670][ T5481] bridge0: port 3(gretap0) entered blocking state [ 590.599241][ T5481] bridge0: port 3(gretap0) entered disabled state [ 590.608339][ T5481] device gretap0 entered promiscuous mode [ 590.614751][ T5481] bridge0: port 3(gretap0) entered blocking state [ 590.621233][ T5481] bridge0: port 3(gretap0) entered forwarding state [ 590.688101][ T1300] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 590.698248][ T5482] device gretap0 left promiscuous mode [ 590.704376][ T5482] bridge0: port 3(gretap0) entered disabled state [ 590.741673][ T5473] loop5: detected capacity change from 0 to 727 [ 591.426992][ T5488] loop3: detected capacity change from 0 to 1024 [ 591.433889][ T5488] EXT4-fs: Ignoring removed mblk_io_submit option [ 591.469815][ T24] usb 7-1: USB disconnect, device number 5 [ 591.558716][ T1300] usb 8-1: Using ep0 maxpacket: 8 [ 591.570613][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 591.605119][ T1300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.633086][ T5488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 591.654374][ T24] ftdi_sio 7-1:0.0: device disconnected [ 591.706581][ T1300] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.730767][ T1300] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 591.821972][ T1300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.847128][ T1300] usb 8-1: config 0 descriptor?? [ 591.854058][ T1300] usb 8-1: can't set config #0, error -71 [ 591.873606][ T1300] usb 8-1: USB disconnect, device number 3 [ 593.030722][ T5503] loop7: detected capacity change from 0 to 8192 [ 594.280021][ T5524] loop1: detected capacity change from 0 to 256 [ 594.298341][ T5524] FAT-fs (loop1): bogus number of FAT sectors [ 594.320167][ T5524] FAT-fs (loop1): Can't find a valid FAT filesystem [ 594.800563][ T5532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1374'. [ 595.052069][ T284] EXT4-fs (loop3): unmounting filesystem. [ 595.444562][ T5543] device syzkaller0 entered promiscuous mode [ 595.625466][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 595.636819][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 595.636860][ T28] audit: type=1400 audit(2000000011.960:392): avc: denied { mount } for pid=5538 comm="syz.3.1377" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 597.890862][ T5552] loop3: detected capacity change from 0 to 8192 [ 599.183050][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 599.201788][ T24] usb 8-1: device descriptor read/all, error -71 [ 599.210923][ T5556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 599.229036][ T5556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 599.547976][ T5582] loop6: detected capacity change from 0 to 256 [ 600.236340][ T5582] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 600.247066][ T5582] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 600.342519][ T5582] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 600.550749][ T5587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1388'. [ 602.141102][ T28] audit: type=1400 audit(2000000018.470:393): avc: denied { map } for pid=5599 comm="syz.3.1392" path="socket:[31885]" dev="sockfs" ino=31885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 602.195751][ T5604] loop3: detected capacity change from 0 to 1024 [ 602.202809][ T5604] EXT4-fs: Ignoring removed i_version option [ 602.209572][ T5604] EXT4-fs (loop3): Test dummy encryption mode enabled [ 602.674504][ T5606] loop7: detected capacity change from 0 to 8192 [ 602.967999][ T5604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 603.172680][ T5615] fscrypt: AES-256-XTS using blk-crypto-fallback [ 603.218235][ T5617] overlayfs: failed to clone lowerpath [ 603.239687][ T28] audit: type=1400 audit(2000000019.570:394): avc: denied { mount } for pid=5603 comm="syz.3.1394" name="/" dev="configfs" ino=13569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 603.419074][ T28] audit: type=1400 audit(2000000019.750:395): avc: denied { search } for pid=5603 comm="syz.3.1394" name="/" dev="configfs" ino=13569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 603.613882][ T5627] loop7: detected capacity change from 0 to 256 [ 603.672342][ T28] audit: type=1400 audit(2000000019.770:396): avc: denied { read } for pid=5603 comm="syz.3.1394" name="/" dev="configfs" ino=13569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 603.765428][ T5627] FAT-fs (loop7): bogus number of FAT sectors [ 603.861192][ T5604] bridge0: port 3(vlan2) entered blocking state [ 603.870564][ T5627] FAT-fs (loop7): Can't find a valid FAT filesystem [ 603.925626][ T5604] bridge0: port 3(vlan2) entered disabled state [ 603.990116][ T28] audit: type=1400 audit(2000000019.770:397): avc: denied { open } for pid=5603 comm="syz.3.1394" path="/" dev="configfs" ino=13569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 604.488345][ T5633] loop1: detected capacity change from 0 to 512 [ 604.533945][ T5633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 604.625599][ T5633] EXT4-fs (loop1): 1 truncate cleaned up [ 604.631641][ T5633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 604.928709][ T5639] input: syz1 as /devices/virtual/input/input22 [ 605.047913][ T5641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1402'. [ 605.173634][ T284] EXT4-fs (loop3): unmounting filesystem. [ 605.199026][ T5645] overlayfs: failed to clone upperpath [ 605.287567][ T5650] loop7: detected capacity change from 0 to 256 [ 605.438021][ T5654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 605.508376][ T283] EXT4-fs (loop1): unmounting filesystem. [ 605.534447][ T5650] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 605.677817][ T5650] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 605.701648][ T5656] 9pnet_fd: Insufficient options for proto=fd [ 605.708577][ T5650] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 606.176004][ T5671] device syzkaller0 entered promiscuous mode [ 607.136716][ T5670] loop1: detected capacity change from 0 to 8192 [ 607.552774][ T5686] overlayfs: overlapping lowerdir path [ 607.568526][ T28] audit: type=1400 audit(2000000023.890:398): avc: denied { sys_module } for pid=5682 comm="syz.6.1415" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 607.948248][ T5688] can0: slcan on ttyS3. [ 608.029557][ T5688] can0 (unregistered): slcan off ttyS3. [ 608.188670][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 608.349175][ T5698] loop6: detected capacity change from 0 to 512 [ 608.378700][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 608.384962][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.418682][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.431659][ T5698] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 608.468690][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 608.489393][ T5698] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.1418: inline data xattr refers to an external xattr inode [ 608.514416][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.538450][ T24] usb 2-1: config 0 descriptor?? [ 608.554824][ T5698] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1418: couldn't read orphan inode 17 (err -117) [ 608.613887][ T5698] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 608.631782][ T28] audit: type=1400 audit(2000000024.960:399): avc: denied { setopt } for pid=5730 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 608.662333][ T28] audit: type=1400 audit(2000000024.990:400): avc: denied { create } for pid=5697 comm="syz.6.1418" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 608.690999][ T28] audit: type=1400 audit(2000000025.010:401): avc: denied { write } for pid=5697 comm="syz.6.1418" name=E91F7189591E9233614B dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 608.783304][ T5734] netlink: 'syz.4.1420': attribute type 13 has an invalid length. [ 608.793119][ T5734] gretap0: refused to change device tx_queue_len [ 608.799806][ T5734] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 608.961272][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 609.103144][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.113446][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.475659][ T5751] syz.3.1425 uses obsolete (PF_INET,SOCK_PACKET) [ 609.521865][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 609.564393][ T5753] 9pnet_fd: Insufficient options for proto=fd [ 609.733788][ T5759] loop3: detected capacity change from 0 to 8192 [ 610.438685][ T491] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 610.936541][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 610.943784][ T24] usbhid: probe of 2-1:0.0 failed with error -71 [ 610.950450][ T491] usb 8-1: Using ep0 maxpacket: 8 [ 610.956854][ T491] usb 8-1: config 135 has an invalid interface number: 230 but max is 0 [ 610.973442][ T24] usb 2-1: USB disconnect, device number 17 [ 610.980483][ T491] usb 8-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 611.054028][ T491] usb 8-1: config 135 has no interface number 0 [ 611.063595][ T491] usb 8-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 611.118373][ T491] usb 8-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 611.162154][ T5783] bridge0: port 3(gretap0) entered blocking state [ 611.169180][ T5783] bridge0: port 3(gretap0) entered disabled state [ 611.210185][ T5783] device gretap0 entered promiscuous mode [ 611.218601][ T5783] bridge0: port 3(gretap0) entered blocking state [ 611.225135][ T5783] bridge0: port 3(gretap0) entered forwarding state [ 611.629895][ T5783] device gretap0 left promiscuous mode [ 611.635565][ T5783] bridge0: port 3(gretap0) entered disabled state [ 612.068686][ T491] usb 8-1: config 135 interface 230 has no altsetting 0 [ 612.077776][ T491] usb 8-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 612.094256][ T491] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.171496][ T491] usb 8-1: Product: syz [ 612.175734][ T491] usb 8-1: Manufacturer: syz [ 612.180426][ T491] usb 8-1: SerialNumber: syz [ 612.344791][ T5792] loop3: detected capacity change from 0 to 256 [ 612.389099][ T491] usb 8-1: USB disconnect, device number 6 [ 612.499330][ T5792] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 612.530726][ T5788] loop1: detected capacity change from 0 to 40427 [ 612.555200][ T5792] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 612.570732][ T5792] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 612.581207][ T5788] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 612.648046][ T5788] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 612.668952][ T5788] F2FS-fs (loop1): invalid crc value [ 612.715009][ T5788] F2FS-fs (loop1): Found nat_bits in checkpoint [ 612.818917][ T5788] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 612.826134][ T5788] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 613.038993][ T5811] loop7: detected capacity change from 0 to 256 [ 613.051721][ T5811] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 613.063150][ T5811] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 613.075187][ T5811] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 614.031332][ T5821] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1444'. [ 614.438985][ T5830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'. [ 614.568794][ T28] audit: type=1400 audit(2000000030.860:402): avc: denied { read } for pid=5827 comm="syz.7.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 618.050855][ T5845] loop7: detected capacity change from 0 to 1024 [ 618.067092][ T5845] EXT4-fs: Ignoring removed mblk_io_submit option [ 619.332168][ T5845] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 619.961261][ T5290] EXT4-fs (loop7): unmounting filesystem. [ 620.197968][ T5860] loop1: detected capacity change from 0 to 512 [ 620.233860][ T5852] loop3: detected capacity change from 0 to 40427 [ 620.245049][ T5852] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 620.249981][ T5860] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1454: casefold flag without casefold feature [ 620.253386][ T5852] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 620.273998][ T5860] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1454: couldn't read orphan inode 15 (err -117) [ 620.274100][ T5860] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 620.323592][ T5852] F2FS-fs (loop3): invalid crc value [ 620.352843][ T283] EXT4-fs (loop1): unmounting filesystem. [ 620.360100][ T28] audit: type=1400 audit(2000000036.660:403): avc: denied { rename } for pid=5856 comm="syz.1.1454" name="#1c" dev="loop1" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 620.383809][ T28] audit: type=1400 audit(2000000036.660:404): avc: denied { reparent } for pid=5856 comm="syz.1.1454" name="#1b" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 620.408037][ T5852] F2FS-fs (loop3): Found nat_bits in checkpoint [ 620.440594][ T5852] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 620.447709][ T5852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 622.968865][ T5879] loop1: detected capacity change from 0 to 40427 [ 622.996305][ T5879] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 623.040476][ T5879] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 623.211150][ T5879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 623.241707][ T5879] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 623.248890][ T5879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 623.315530][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1463'. [ 623.397750][ T5879] FAULT_INJECTION: forcing a failure. [ 623.397750][ T5879] name failslab, interval 1, probability 0, space 0, times 0 [ 623.545186][ T5879] CPU: 0 PID: 5879 Comm: syz.1.1459 Not tainted syzkaller #0 [ 623.552629][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 623.562727][ T5879] Call Trace: [ 623.566013][ T5879] [ 623.568949][ T5879] __dump_stack+0x21/0x24 [ 623.573288][ T5879] dump_stack_lvl+0xee/0x150 [ 623.577897][ T5879] ? __cfi_dump_stack_lvl+0x8/0x8 [ 623.582931][ T5879] ? __cfi___switch_to+0x10/0x10 [ 623.587885][ T5879] dump_stack+0x15/0x24 [ 623.592051][ T5879] should_fail_ex+0x3d4/0x520 [ 623.596750][ T5879] __should_failslab+0xac/0xf0 [ 623.601534][ T5879] should_failslab+0x9/0x20 [ 623.606052][ T5879] slab_pre_alloc_hook+0x30/0x1e0 [ 623.611091][ T5879] kmem_cache_alloc_lru+0x49/0x280 [ 623.616212][ T5879] ? __d_alloc+0x34/0x6c0 [ 623.620565][ T5879] __d_alloc+0x34/0x6c0 [ 623.624823][ T5879] ? __cfi__raw_spin_lock+0x10/0x10 [ 623.630031][ T5879] d_alloc_parallel+0xd6/0x1240 [ 623.634901][ T5879] ? rcu_preempt_deferred_qs_irqrestore+0x6c8/0x9d0 [ 623.641505][ T5879] ? __cfi_d_alloc_parallel+0x10/0x10 [ 623.646886][ T5879] ? rcu_read_unlock_special+0xab/0x480 [ 623.652443][ T5879] ? __kasan_check_write+0x14/0x20 [ 623.657555][ T5879] ? rwsem_read_trylock+0x29a/0x620 [ 623.662774][ T5879] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 623.668593][ T5879] ? downgrade_write+0x350/0x350 [ 623.673567][ T5879] __lookup_slow+0x141/0x3f0 [ 623.678163][ T5879] ? lookup_one_len+0x2d0/0x2d0 [ 623.683017][ T5879] ? down_read+0xa0/0xf0 [ 623.687282][ T5879] lookup_slow+0x57/0x70 [ 623.691555][ T5879] walk_component+0x2f4/0x420 [ 623.696270][ T5879] path_lookupat+0x180/0x490 [ 623.700881][ T5879] filename_lookup+0x1f0/0x500 [ 623.705660][ T5879] ? __cfi_filename_lookup+0x10/0x10 [ 623.710974][ T5879] ? preempt_schedule_irq+0xbb/0x110 [ 623.716281][ T5879] vfs_statx+0x10b/0x660 [ 623.720548][ T5879] ? __check_object_size+0x45a/0x600 [ 623.725848][ T5879] ? strncpy_from_user+0x17a/0x2d0 [ 623.730964][ T5879] ? vfs_fstatat+0x80/0x80 [ 623.735399][ T5879] __se_sys_newstat+0xd8/0x350 [ 623.740173][ T5879] ? __x64_sys_newstat+0x70/0x70 [ 623.745116][ T5879] ? release_firmware_map_entry+0x194/0x194 [ 623.751037][ T5879] ? finish_task_switch+0x16b/0x7b0 [ 623.756247][ T5879] ? __kasan_check_read+0x11/0x20 [ 623.761284][ T5879] ? preempt_schedule_irq+0xbb/0x110 [ 623.766588][ T5879] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 623.772318][ T5879] ? __schedule+0xb8f/0x14e0 [ 623.776935][ T5879] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 623.782675][ T5879] __x64_sys_newstat+0x5b/0x70 [ 623.787537][ T5879] x64_sys_call+0x411/0x9a0 [ 623.792103][ T5879] do_syscall_64+0x4c/0xa0 [ 623.796548][ T5879] ? clear_bhb_loop+0x30/0x80 [ 623.801501][ T5879] ? clear_bhb_loop+0x30/0x80 [ 623.806227][ T5879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.812137][ T5879] RIP: 0033:0x7f0df2b8efc9 [ 623.816657][ T5879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.836386][ T5879] RSP: 002b:00007f0df3a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 623.844826][ T5879] RAX: ffffffffffffffda RBX: 00007f0df2de5fa0 RCX: 00007f0df2b8efc9 [ 623.852804][ T5879] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000200000000480 [ 623.860814][ T5879] RBP: 00007f0df3a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 623.868874][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.876848][ T5879] R13: 00007f0df2de6038 R14: 00007f0df2de5fa0 R15: 00007fffc54aa828 [ 623.884933][ T5879] [ 624.138960][ T5909] loop6: detected capacity change from 0 to 16 [ 624.164397][ T5909] erofs: (device loop6): mounted with root inode @ nid 36. [ 624.201608][ T28] audit: type=1400 audit(2000000040.520:405): avc: denied { map } for pid=5901 comm="syz.6.1464" path="socket:[32218]" dev="sockfs" ino=32218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 627.050822][ T5939] random: crng reseeded on system resumption [ 627.952302][ T5937] Unrecognized hibernate image header format! [ 627.958469][ T5937] PM: hibernation: Image mismatch: architecture specific data [ 628.841829][ T5951] loop1: detected capacity change from 0 to 512 [ 628.880486][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 628.889535][ T5951] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.306013][ T5961] loop3: detected capacity change from 0 to 256 [ 632.367237][ T5961] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 632.385683][ T5963] loop7: detected capacity change from 0 to 512 [ 632.426273][ T5963] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 632.451448][ T5961] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 632.499526][ T5961] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 632.552135][ T5963] EXT4-fs (loop7): 1 truncate cleaned up [ 632.557930][ T5963] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 634.035006][ T5976] input: syz1 as /devices/virtual/input/input23 [ 634.135785][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1479'. [ 634.291428][ T283] EXT4-fs (loop1): unmounting filesystem. [ 634.334146][ T5290] EXT4-fs (loop7): unmounting filesystem. [ 634.924809][ T5987] device syzkaller0 entered promiscuous mode [ 635.321784][ T5996] loop6: detected capacity change from 0 to 256 [ 635.381807][ T5996] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 635.460532][ T5996] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 635.638082][ T5996] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x60d77874, utbl_chksum : 0xe619d30d) [ 636.491395][ T6002] overlayfs: missing 'lowerdir' [ 636.539763][ T28] audit: type=1400 audit(2000000052.870:406): avc: denied { create } for pid=6001 comm="syz.7.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 636.645894][ T28] audit: type=1400 audit(2000000052.870:407): avc: denied { sys_admin } for pid=6001 comm="syz.7.1489" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 637.052782][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1492'. [ 637.647046][ T28] audit: type=1400 audit(2000000053.960:408): avc: denied { execute } for pid=6014 comm="syz.4.1493" path="/326/cpu.stat" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.011663][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1495'. [ 638.111487][ T6027] loop3: detected capacity change from 0 to 512 [ 638.132203][ T6027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 638.169741][ T6027] EXT4-fs (loop3): 1 truncate cleaned up [ 638.177681][ T6027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 638.449105][ T6032] input: syz1 as /devices/virtual/input/input24 [ 638.525979][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1497'. [ 638.758978][ T28] audit: type=1400 audit(2000000055.090:409): avc: denied { execute_no_trans } for pid=6016 comm="syz.1.1494" path="/294/file1" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 639.572074][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1499'. [ 639.637524][ T284] EXT4-fs (loop3): unmounting filesystem. [ 641.639713][ T6039] overlayfs: failed to clone upperpath [ 642.123478][ T6065] input: syz1 as /devices/virtual/input/input25 [ 642.312439][ T6065] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1506'. [ 643.698694][ T393] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 643.768371][ T6097] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1515'. [ 643.878789][ T393] usb 2-1: Using ep0 maxpacket: 8 [ 643.885542][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.910773][ T393] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.924421][ T393] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 643.934116][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.567113][ T393] usb 2-1: config 0 descriptor?? [ 645.782414][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1521'. [ 646.228335][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.267859][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.867220][ T6138] bridge0: port 3(gretap0) entered blocking state [ 646.873955][ T6138] bridge0: port 3(gretap0) entered disabled state [ 646.881003][ T6138] device gretap0 entered promiscuous mode [ 646.887015][ T6138] bridge0: port 3(gretap0) entered blocking state [ 646.893488][ T6138] bridge0: port 3(gretap0) entered forwarding state [ 646.913375][ T6138] device gretap0 left promiscuous mode [ 646.919043][ T6138] bridge0: port 3(gretap0) entered disabled state [ 647.323502][ T6142] syz.3.1527[6142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.323728][ T6142] syz.3.1527[6142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.337805][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 648.869999][ T393] usbhid 2-1:0.0: can't add hid device: -71 [ 648.876003][ T393] usbhid: probe of 2-1:0.0 failed with error -71 [ 648.892959][ T393] usb 2-1: USB disconnect, device number 18 [ 649.152310][ T6158] loop3: detected capacity change from 0 to 1024 [ 649.169206][ T6158] EXT4-fs: Ignoring removed mblk_io_submit option [ 653.859509][ T6158] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 654.160401][ T28] audit: type=1326 audit(2000000070.490:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.7.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 654.193572][ T28] audit: type=1326 audit(2000000070.490:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.7.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 654.227095][ T28] audit: type=1326 audit(2000000070.510:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.7.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 657.439170][ T6174] device syzkaller0 entered promiscuous mode [ 658.208788][ T6185] overlayfs: overlapping lowerdir path [ 658.215456][ T28] audit: type=1326 audit(2000000070.680:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.7.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 658.239230][ T28] audit: type=1326 audit(2000000070.680:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.7.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 658.257718][ T6189] overlayfs: failed to clone lowerpath [ 658.362471][ T6187] netlink: 552 bytes leftover after parsing attributes in process `syz.7.1540'. [ 658.374542][ T6187] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 658.735430][ T6195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1538'. [ 659.084406][ T6199] device syzkaller0 entered promiscuous mode [ 659.139486][ T6187] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1540'. [ 659.983894][ T6205] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 659.999634][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1544'. [ 660.037370][ T6207] device syzkaller0 entered promiscuous mode [ 660.068486][ T6185] can0: slcan on ttyS3. [ 660.292228][ T6185] can0 (unregistered): slcan off ttyS3. [ 661.647004][ T6256] bridge0: port 3(gretap0) entered blocking state [ 661.653550][ T6256] bridge0: port 3(gretap0) entered disabled state [ 661.662752][ T6256] device gretap0 entered promiscuous mode [ 661.668954][ T6256] bridge0: port 3(gretap0) entered blocking state [ 661.675410][ T6256] bridge0: port 3(gretap0) entered forwarding state [ 661.725547][ T6256] device gretap0 left promiscuous mode [ 661.731572][ T6256] bridge0: port 3(gretap0) entered disabled state [ 662.311789][ T6258] loop3: detected capacity change from 0 to 512 [ 662.752854][ T6258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 662.905440][ T6258] EXT4-fs (loop3): 1 truncate cleaned up [ 662.911335][ T6258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 663.394012][ T6269] input: syz1 as /devices/virtual/input/input26 [ 663.871456][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 663.921972][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 664.050430][ T284] EXT4-fs (loop3): unmounting filesystem. [ 664.179585][ T28] audit: type=1400 audit(2000000080.510:415): avc: denied { block_suspend } for pid=6272 comm="syz.1.1554" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 664.287092][ T6285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1555'. [ 664.981069][ T28] audit: type=1400 audit(2000000081.310:416): avc: denied { ioctl } for pid=6288 comm="syz.3.1557" path="socket:[33918]" dev="sockfs" ino=33918 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 665.070401][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1556'. [ 665.524031][ T28] audit: type=1400 audit(2000000081.810:417): avc: denied { write } for pid=6292 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 665.679817][ T6300] loop6: detected capacity change from 0 to 1024 [ 665.686694][ T6300] EXT4-fs: Ignoring removed mblk_io_submit option [ 665.920315][ T6300] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 665.978893][ T359] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 665.978927][ T360] Bluetooth: hci0: command 0x1003 tx timeout [ 666.430436][ T6311] loop1: detected capacity change from 0 to 512 [ 666.463848][ T6311] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 666.506143][ T6311] EXT4-fs (loop1): 1 truncate cleaned up [ 666.522142][ T6311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 666.690840][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 667.095132][ T6319] input: syz1 as /devices/virtual/input/input27 [ 667.235766][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1562'. [ 667.474329][ T6326] overlayfs: failed to clone lowerpath [ 667.480899][ T283] EXT4-fs (loop1): unmounting filesystem. [ 667.499381][ T28] audit: type=1400 audit(2000000083.830:418): avc: denied { read } for pid=6327 comm="syz.1.1567" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 668.548652][ T431] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 668.759709][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.788690][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.798505][ T431] usb 4-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.00 [ 668.829513][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1573'. [ 668.838656][ T431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.849637][ T431] usb 4-1: config 0 descriptor?? [ 668.869355][ T431] usbhid 4-1:0.0: can't add hid device: -22 [ 668.875367][ T431] usbhid: probe of 4-1:0.0 failed with error -22 [ 668.900899][ T28] audit: type=1326 audit(2000000085.230:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 668.944775][ T28] audit: type=1326 audit(2000000085.230:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 668.993413][ T28] audit: type=1326 audit(2000000085.230:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.017355][ T28] audit: type=1326 audit(2000000085.230:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.024907][ T6350] loop1: detected capacity change from 0 to 40427 [ 669.040879][ T28] audit: type=1326 audit(2000000085.230:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.075238][ T28] audit: type=1326 audit(2000000085.230:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.122394][ T6363] syz.7.1574[6363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.122820][ T6363] syz.7.1574[6363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.139789][ T6350] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 669.343740][ T28] audit: type=1326 audit(2000000085.230:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.365191][ T6350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 669.377504][ T28] audit: type=1326 audit(2000000085.230:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.437305][ T6350] F2FS-fs (loop1): invalid crc value [ 669.524039][ T6350] F2FS-fs (loop1): Found nat_bits in checkpoint [ 669.563841][ T28] audit: type=1326 audit(2000000085.250:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.707917][ T6350] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 669.806248][ T6350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 669.823446][ T28] audit: type=1326 audit(2000000085.320:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 669.982390][ T28] audit: type=1326 audit(2000000085.320:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 670.014262][ T28] audit: type=1326 audit(2000000085.340:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 670.071439][ T28] audit: type=1326 audit(2000000085.340:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 670.097933][ T28] audit: type=1326 audit(2000000085.340:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 671.572547][ T393] usb 4-1: USB disconnect, device number 12 [ 671.591144][ T28] audit: type=1326 audit(2000000085.340:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5c9498efc9 code=0x7ffc0000 [ 671.754539][ T6387] loop6: detected capacity change from 0 to 2048 [ 671.930240][ T6395] overlayfs: failed to clone lowerpath [ 671.978767][ T6387] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 672.038723][ T6398] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 672.869022][ T6409] loop1: detected capacity change from 0 to 8192 [ 674.177401][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.226321][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.274123][ T6427] loop3: detected capacity change from 0 to 1024 [ 674.356840][ T6427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 674.369425][ T28] audit: type=1400 audit(2000000090.690:434): avc: denied { map } for pid=6425 comm="syz.3.1589" path="/320/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 674.458635][ T431] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 674.668642][ T431] usb 4-1: device descriptor read/64, error -71 [ 674.882034][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 674.938873][ T431] usb 4-1: device descriptor read/64, error -71 [ 674.995381][ T6435] 9pnet_fd: Insufficient options for proto=fd [ 675.044152][ T6435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.051446][ T6435] IPv6: NLM_F_CREATE should be set when creating new route [ 675.131145][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.138543][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.226596][ T6435] device macsec0 left promiscuous mode [ 675.308877][ T431] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 675.468653][ T431] usb 4-1: device descriptor read/64, error -71 [ 675.738870][ T431] usb 4-1: device descriptor read/64, error -71 [ 676.312055][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1598'. [ 676.324002][ T431] usb usb4-port1: attempt power cycle [ 676.679412][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 676.781883][ T6471] overlayfs: failed to clone lowerpath [ 676.838701][ T431] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 676.882600][ T431] usb 4-1: device descriptor read/8, error -71 [ 676.884381][ T284] EXT4-fs (loop3): unmounting filesystem. [ 677.039167][ T431] usb 4-1: device descriptor read/8, error -71 [ 677.764520][ T28] audit: type=1400 audit(2000000094.020:435): avc: denied { map } for pid=6487 comm="syz.6.1607" path="socket:[35014]" dev="sockfs" ino=35014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 678.050183][ T6495] device syzkaller0 entered promiscuous mode [ 678.809825][ T431] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 678.878413][ T6509] loop6: detected capacity change from 0 to 1024 [ 678.885338][ T6509] EXT4-fs: Ignoring removed mblk_io_submit option [ 678.933592][ T6509] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 678.933763][ T431] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.953274][ T431] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 678.964172][ T431] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 678.978971][ T431] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 680.790859][ T4227] EXT4-fs (loop6): unmounting filesystem. [ 680.831948][ T431] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 681.028069][ T431] usb 4-1: Manufacturer: syz [ 681.066421][ T431] usb 4-1: config 0 descriptor?? [ 681.094602][ T431] usb 4-1: can't set config #0, error -71 [ 681.120492][ T6532] overlayfs: failed to clone lowerpath [ 681.170798][ T431] usb 4-1: USB disconnect, device number 16 [ 681.646014][ T6539] can0: slcan on ttyS3. [ 681.788673][ T6539] can0 (unregistered): slcan off ttyS3. [ 682.923277][ T6549] device syzkaller0 entered promiscuous mode [ 683.935208][ T6577] loop6: detected capacity change from 0 to 512 [ 683.998817][ T6585] device bridge0 entered promiscuous mode [ 684.025109][ T6585] device macsec1 entered promiscuous mode [ 684.031584][ T6585] bridge0: port 3(macsec1) entered blocking state [ 684.048242][ T6585] bridge0: port 3(macsec1) entered disabled state [ 684.817402][ T6585] device bridge0 left promiscuous mode [ 685.026628][ T5964] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 685.135412][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1630'. [ 685.203137][ T6592] bridge0: port 3(gretap0) entered blocking state [ 685.209695][ T6592] bridge0: port 3(gretap0) entered disabled state [ 685.217288][ T6592] device gretap0 entered promiscuous mode [ 685.230721][ T6592] device gretap0 left promiscuous mode [ 685.236494][ T6592] bridge0: port 3(gretap0) entered disabled state [ 685.244310][ T393] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 687.290110][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.300255][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.333613][ T393] usb 2-1: device descriptor read/all, error -71 [ 688.018190][ T6608] loop3: detected capacity change from 0 to 40427 [ 688.042815][ T6608] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 688.072453][ T6608] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 688.093427][ T6608] F2FS-fs (loop3): invalid crc value [ 688.123380][ T6608] F2FS-fs (loop3): Found nat_bits in checkpoint [ 688.218104][ T6608] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 688.231130][ T6608] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 688.412233][ T6624] loop6: detected capacity change from 0 to 512 [ 688.432603][ T6624] EXT4-fs: Mount option(s) incompatible with ext3 [ 688.602867][ T6626] loop3: detected capacity change from 0 to 512 [ 688.620637][ T6626] EXT4-fs: Mount option(s) incompatible with ext3 [ 688.678231][ T6626] loop3: detected capacity change from 0 to 512 [ 688.698658][ T6626] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 688.717013][ T6626] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 688.730058][ T28] audit: type=1400 audit(2000000105.060:436): avc: denied { read write } for pid=6623 comm="syz.6.1642" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 688.754929][ T6626] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1643: corrupted in-inode xattr [ 688.767737][ T6626] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1643: couldn't read orphan inode 15 (err -117) [ 688.780204][ T28] audit: type=1400 audit(2000000105.110:437): avc: denied { ioctl open } for pid=6623 comm="syz.6.1642" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 688.789441][ T6626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 688.806747][ T6627] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.193456][ T6626] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.318706][ T6626] FAULT_INJECTION: forcing a failure. [ 689.318706][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 689.329301][ T334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.339294][ T334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.347096][ T334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.355008][ T334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.362438][ T334] rtc rtc0: __rtc_set_alarm: err=-22 [ 689.378767][ T6626] CPU: 1 PID: 6626 Comm: syz.3.1643 Not tainted syzkaller #0 [ 689.386210][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 689.396291][ T6626] Call Trace: [ 689.399578][ T6626] [ 689.402531][ T6626] __dump_stack+0x21/0x24 [ 689.406875][ T6626] dump_stack_lvl+0xee/0x150 [ 689.411471][ T6626] ? __cfi_dump_stack_lvl+0x8/0x8 [ 689.416498][ T6626] ? ____fput+0x15/0x20 [ 689.420659][ T6626] ? exit_to_user_mode_loop+0x9b/0xb0 [ 689.426069][ T6626] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 689.431723][ T6626] ? syscall_exit_to_user_mode+0x1a/0x30 [ 689.437377][ T6626] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.443484][ T6626] dump_stack+0x15/0x24 [ 689.447744][ T6626] should_fail_ex+0x3d4/0x520 [ 689.452436][ T6626] __should_failslab+0xac/0xf0 [ 689.457218][ T6626] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 689.463210][ T6626] should_failslab+0x9/0x20 [ 689.467718][ T6626] __kmem_cache_alloc_node+0x3d/0x2c0 [ 689.473106][ T6626] ? __cfi_mutex_lock+0x10/0x10 [ 689.477962][ T6626] ? delete_node+0x2f4/0xa60 [ 689.482557][ T6626] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 689.488543][ T6626] __kmalloc+0xa1/0x1e0 [ 689.492720][ T6626] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 689.498798][ T6626] tracepoint_probe_unregister+0x1e6/0x8b0 [ 689.504612][ T6626] bpf_probe_unregister+0x61/0x70 [ 689.509677][ T6626] bpf_raw_tp_link_release+0x63/0x90 [ 689.514971][ T6626] bpf_link_free+0x13a/0x390 [ 689.519576][ T6626] ? bpf_link_put_deferred+0x20/0x20 [ 689.524900][ T6626] ? security_file_free+0xd8/0xf0 [ 689.530108][ T6626] bpf_link_release+0x15f/0x170 [ 689.534962][ T6626] ? __cfi_bpf_link_release+0x10/0x10 [ 689.540450][ T6626] __fput+0x1fc/0x8f0 [ 689.544454][ T6626] ____fput+0x15/0x20 [ 689.548448][ T6626] task_work_run+0x1db/0x240 [ 689.553058][ T6626] ? __cfi_task_work_run+0x10/0x10 [ 689.558221][ T6626] ? __cfi___close_range+0x10/0x10 [ 689.563364][ T6626] ? __kasan_check_read+0x11/0x20 [ 689.568404][ T6626] exit_to_user_mode_loop+0x9b/0xb0 [ 689.573614][ T6626] exit_to_user_mode_prepare+0x5a/0xa0 [ 689.579094][ T6626] syscall_exit_to_user_mode+0x1a/0x30 [ 689.584570][ T6626] do_syscall_64+0x58/0xa0 [ 689.588994][ T6626] ? clear_bhb_loop+0x30/0x80 [ 689.593684][ T6626] ? clear_bhb_loop+0x30/0x80 [ 689.598461][ T6626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.604363][ T6626] RIP: 0033:0x7f392738efc9 [ 689.608783][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.628494][ T6626] RSP: 002b:00007f3928229038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 689.636920][ T6626] RAX: 0000000000000000 RBX: 00007f39275e5fa0 RCX: 00007f392738efc9 [ 689.644898][ T6626] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 689.652874][ T6626] RBP: 00007f3928229090 R08: 0000000000000000 R09: 0000000000000000 [ 689.660939][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.668918][ T6626] R13: 00007f39275e6038 R14: 00007f39275e5fa0 R15: 00007ffee3ded588 [ 689.676938][ T6626] [ 690.710382][ T6646] can0: slcan on ttyS3. [ 690.758942][ T6646] can0 (unregistered): slcan off ttyS3. [ 690.992818][ T6648] loop1: detected capacity change from 0 to 512 [ 691.057300][ T6626] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 691.069135][ T6626] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 691.075225][ T6626] CPU: 1 PID: 6626 Comm: syz.3.1643 Not tainted syzkaller #0 [ 691.082629][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 691.092724][ T6626] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 691.098886][ T6626] Code: 80 3c 30 00 74 05 e8 84 75 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 691.118582][ T6626] RSP: 0018:ffffc90000bd7690 EFLAGS: 00010096 [ 691.124649][ T6626] RAX: 1ffff1102120c1e6 RBX: ffff888109060f28 RCX: ffff888113d49440 [ 691.132618][ T6626] RDX: ffff888114b70000 RSI: 0000000000000001 RDI: ffffc90001733000 [ 691.140585][ T6626] RBP: ffffc90000bd76d0 R08: 0000000000000000 R09: fffffbfff0ee4dde [ 691.148551][ T6626] R10: 00000000b720eca3 R11: 1ffffffff0ee4ddd R12: 0000000000000001 [ 691.156606][ T6626] R13: ffff888109060f28 R14: dffffc0000000000 R15: ffffffff81713a70 [ 691.164586][ T6626] FS: 00007f39282296c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 691.173542][ T6626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.180123][ T6626] CR2: 000000110c2977e7 CR3: 0000000120cc8000 CR4: 00000000003506a0 [ 691.188096][ T6626] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 691.196062][ T6626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 691.204039][ T6626] Call Trace: [ 691.207331][ T6626] [ 691.210261][ T6626] __schedule+0x1263/0x14e0 [ 691.214894][ T6626] ? enqueue_task_rt+0x8b9/0xed0 [ 691.219836][ T6626] ? release_firmware_map_entry+0x194/0x194 [ 691.225760][ T6626] ? resched_curr+0x10e/0x380 [ 691.230432][ T6626] ? __cfi_resched_curr+0x10/0x10 [ 691.235455][ T6626] ? preempt_schedule+0xa7/0xb0 [ 691.240307][ T6626] preempt_schedule_common+0x9b/0xf0 [ 691.245593][ T6626] preempt_schedule+0xa7/0xb0 [ 691.250267][ T6626] ? __cfi_preempt_schedule+0x10/0x10 [ 691.255637][ T6626] ? ttwu_do_wakeup+0x1b4/0x490 [ 691.260504][ T6626] preempt_schedule_thunk+0x16/0x18 [ 691.265706][ T6626] try_to_wake_up+0x6b8/0x1220 [ 691.270469][ T6626] ? _raw_spin_lock+0x8e/0xe0 [ 691.275144][ T6626] wake_up_q+0xdc/0x1b0 [ 691.279301][ T6626] __mutex_unlock_slowpath+0x262/0x3b0 [ 691.284782][ T6626] ? exit_to_user_mode_loop+0x9b/0xb0 [ 691.290153][ T6626] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 691.295784][ T6626] ? mutex_unlock+0x220/0x220 [ 691.300460][ T6626] ? should_fail_ex+0x2a3/0x520 [ 691.305310][ T6626] ? __should_failslab+0xac/0xf0 [ 691.310261][ T6626] mutex_unlock+0xd8/0x220 [ 691.314675][ T6626] ? __cfi_mutex_unlock+0x10/0x10 [ 691.319696][ T6626] ? __kasan_kmalloc+0x24/0xb0 [ 691.324460][ T6626] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 691.330439][ T6626] ? __kmalloc+0xb1/0x1e0 [ 691.334772][ T6626] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 691.340841][ T6626] tracepoint_probe_unregister+0x84e/0x8b0 [ 691.346655][ T6626] bpf_probe_unregister+0x61/0x70 [ 691.351686][ T6626] bpf_raw_tp_link_release+0x63/0x90 [ 691.356969][ T6626] bpf_link_free+0x13a/0x390 [ 691.361572][ T6626] ? bpf_link_put_deferred+0x20/0x20 [ 691.366868][ T6626] ? security_file_free+0xd8/0xf0 [ 691.371893][ T6626] bpf_link_release+0x15f/0x170 [ 691.376824][ T6626] ? __cfi_bpf_link_release+0x10/0x10 [ 691.382213][ T6626] __fput+0x1fc/0x8f0 [ 691.386201][ T6626] ____fput+0x15/0x20 [ 691.390237][ T6626] task_work_run+0x1db/0x240 [ 691.394849][ T6626] ? __cfi_task_work_run+0x10/0x10 [ 691.399998][ T6626] ? __cfi___close_range+0x10/0x10 [ 691.405198][ T6626] ? __kasan_check_read+0x11/0x20 [ 691.410222][ T6626] exit_to_user_mode_loop+0x9b/0xb0 [ 691.415419][ T6626] exit_to_user_mode_prepare+0x5a/0xa0 [ 691.420879][ T6626] syscall_exit_to_user_mode+0x1a/0x30 [ 691.426345][ T6626] do_syscall_64+0x58/0xa0 [ 691.430761][ T6626] ? clear_bhb_loop+0x30/0x80 [ 691.435442][ T6626] ? clear_bhb_loop+0x30/0x80 [ 691.440217][ T6626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.446156][ T6626] RIP: 0033:0x7f392738efc9 [ 691.450695][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.470312][ T6626] RSP: 002b:00007f3928229038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 691.478728][ T6626] RAX: 0000000000000000 RBX: 00007f39275e5fa0 RCX: 00007f392738efc9 [ 691.486699][ T6626] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 691.494852][ T6626] RBP: 00007f3928229090 R08: 0000000000000000 R09: 0000000000000000 [ 691.502817][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.510798][ T6626] R13: 00007f39275e6038 R14: 00007f39275e5fa0 R15: 00007ffee3ded588 [ 691.518769][ T6626] [ 691.521777][ T6626] Modules linked in: [ 691.525674][ T6626] ---[ end trace 0000000000000000 ]--- [ 691.531120][ T6626] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 691.537272][ T6626] Code: 80 3c 30 00 74 05 e8 84 75 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 691.556878][ T6626] RSP: 0018:ffffc90000bd7690 EFLAGS: 00010096 [ 691.562949][ T6626] RAX: 1ffff1102120c1e6 RBX: ffff888109060f28 RCX: ffff888113d49440 [ 691.570918][ T6626] RDX: ffff888114b70000 RSI: 0000000000000001 RDI: ffffc90001733000 [ 691.578893][ T6626] RBP: ffffc90000bd76d0 R08: 0000000000000000 R09: fffffbfff0ee4dde [ 691.586871][ T6626] R10: 00000000b720eca3 R11: 1ffffffff0ee4ddd R12: 0000000000000001 [ 691.594851][ T6626] R13: ffff888109060f28 R14: dffffc0000000000 R15: ffffffff81713a70 [ 691.602933][ T6626] FS: 00007f39282296c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 691.611876][ T6626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.618568][ T6626] CR2: 000000110c2977e7 CR3: 0000000120cc8000 CR4: 00000000003506a0 [ 691.626535][ T6626] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 691.634499][ T6626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 691.642465][ T6626] Kernel panic - not syncing: Fatal exception [ 692.799584][ T6626] Shutting down cpus with NMI [ 692.804776][ T6626] Kernel Offset: disabled [ 692.809104][ T6626] Rebooting in 86400 seconds..