last executing test programs: 29.472962971s ago: executing program 4 (id=11): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x45, 0x0, 0x2}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x48) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r2, &(0x7f00000002c0), &(0x7f0000000380)=""/107}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xee, 0x4, 0x8, 0x16000, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f00000005c0)="5fbb753a98769bc296dc460b0883e7ce4dab6262043fb3f0eaee31e5054504b957c1c8bc41c14eeb0928604689689216c633d2d18c36fb58d5f95e5b91b1bb42853d573f7b87898cc82083d266524316d7d62589a8935ab6c4753f64511dcd6094f336069e5cfcf7e40fb8f338ced00771077a967433916e06879f972e2ff1bbe2527e2432e0"}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x400, 0x0, 0xa, 0x0, 0x20, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x4, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x4, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3503}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast2, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) 29.212976116s ago: executing program 4 (id=15): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2003, 0x0) syz_emit_ethernet(0xe00, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xb4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) 28.152861867s ago: executing program 4 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwrite64(r1, &(0x7f0000000300)="572654b114b1a9e1879a390786dd87318827008a118e186ae35a8dd9fd884c", 0x1f, 0x4dc) 26.01613039s ago: executing program 4 (id=30): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={r2, 0xee01}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="440100001000130700000000bbdbdf250000000000000000000000000000000020010000000000000000010000000001000000004e21000a0000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 25.062706869s ago: executing program 4 (id=38): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80040, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = open(&(0x7f0000000080)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x9, 0x4, @thr={&(0x7f00000000c0)="cc39c5ba03b529ea13ad23b786b3174f896a3eba753a23c347769a1f58d01b8a5877b01692d1196109b65eae4b3ad5aa7bf76dcf90575f94a3a70c9298fbe12e59644e54015b954cefe50bf7307d221f3c7f6e659309e2e32e4ec4b95faa808d3350b31c6bcff8a3fe5c8060376a61aa0b0a9690cedc476ebb0d57f9bd10c68fc66c3a3c59f8abbaae4caa5261ddcf0e9bdd65803008d9049deced15f4c4d407a884d126f2f0ce9347754813ea59f6c8ff7859dbffdf33a79954ead707c960947d2ce854a4e36b35f4159ecf7357d14edd1546202bf6caf2938c37d4520a67c239dfd2", &(0x7f00000001c0)="4ca117a1b4da64854e6a44a6336468acd9ea9929344310afde6fbb1ebb0c047b6f1eb8aa5b8e67efe6454c85faaf5562c449811bb532e43ff238ea7cf74708c89da4674792af38ce4f04d326f763400d55deb63e1a3333c258d19b517dbd8e543d71caa0fd99a56ea169b332b0ec77a206fa79e6"}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280), &(0x7f00000002c0)) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) unshare(0x22020600) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) signalfd4(r5, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) fcntl$setlease(r1, 0x400, 0x2) 24.940463831s ago: executing program 4 (id=40): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xa, "e2374758"}, @main=@item_4={0x3, 0x0, 0x9, "51daa14e"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xa, "e2374758"}, @main=@item_4={0x3, 0x0, 0x9, "51daa14e"}]}}, 0x0}, 0x0) 24.913283602s ago: executing program 32 (id=40): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xa, "e2374758"}, @main=@item_4={0x3, 0x0, 0x9, "51daa14e"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xa, "e2374758"}, @main=@item_4={0x3, 0x0, 0x9, "51daa14e"}]}}, 0x0}, 0x0) 11.428181042s ago: executing program 2 (id=133): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) unshare(0x2040400) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) (async) io_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000300681d24db0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 11.427818392s ago: executing program 2 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x15, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331ba40dfabcc81c750e"]}]}, 0x44}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', r5, 0x80, 0x20, 0x5, 0x7, {{0x11, 0x4, 0x2, 0x7, 0x44, 0x64, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x3, [{@local, 0x2}, {@broadcast, 0x8}]}, @lsrr={0x83, 0xb, 0xe, [@rand_addr=0x64010101, @rand_addr=0x64010102]}, @cipso={0x86, 0xc, 0x1, [{0x2, 0x4, "c70a928a"}]}, @generic={0x86, 0x5, "3c9f7e"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r11, 0x325, 0x70bf27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000620000280012800b00010065727370616e00001800028004001200060010004e230000060011004e23000099ef00c3aa345c0ea053"], 0x48}, 0x1, 0x0, 0x0, 0x20000100}, 0x40080c0) 10.469678411s ago: executing program 2 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x60, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 10.444430131s ago: executing program 2 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000003d30eaa50000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) open(0x0, 0x4008040, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x6, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x98, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x68, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0xb}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x3}]}}}]}, 0x98}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 9.557975919s ago: executing program 2 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000036c358cd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getrusage(0x1, &(0x7f0000000280)) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000080fedbdf250a"], 0x24}}, 0x20000050) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) (async, rerun: 64) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x3, 0xd, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0xfff9, 0x0, 0x0, 0x0}) (async) getpid() 9.348907863s ago: executing program 2 (id=147): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x82071c, &(0x7f0000000f40)={[{@nobarrier}], [{@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*&'}}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x23}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0xff, 0x48d, &(0x7f0000001500)="$eJzs3MtvVNUfAPDvvX3wpv39RBQEHUUj8dHSgsrChRpNXGhiogtc1rYgMlBDayKEaDUGl4bEvXFp4l/gzo1RF8bErSYsDQlRYgK4qrkvpp1OS1tKBzqfTzKdc+aemXO+c+6ZOfee3gmgY9WyP0nE1oj4PSL6iuzcArXi7tqVc6PXr5wbTWJm5s2/krzc1SvnRqui1fO2lJn9aUT6WRIvJPPrnTxz9sRIvT5+uswPTp18f3DyzNmnj58cOTZ+bPzU8OHDhw4OPffs8DOrEmcW19XdH03s2fXq2xdeHz1y4Z2fvs2atXNvsX12HDd1vUVALdSyd+3vmVzztseW0fa7wbZZ6aS7jQ1hWboiIuuunnz890VXNDqvL175tK2NA26r7Ltpw8Kbp2eAdSyJdrcAaI/qiz47/q1uazT1uCNcfjGiN+LixvL8xrUb8XdHWpbpuY311yLiyPS/X2W3WO55CACAFcjnNk+1mv+lsTO/L9Y6tpdrKP0R8b+I+H9E3BMROyLi3oi87H0RcX/x5Jm+JdZfa8rPn/+klxrprpUFuYhs/vd8OfeLOfO/tLrr7ypz2/L4e5Kjx+vjB8r3ZH/0bMjyQ4vU8f3Lv32x0LbZ87/sltVfzQXLBlzqbjpBNzYyNbJak9LLn0Ts7m7MfRvxJzdWArI9YFdE7F7eS2+vEsef+GbPQoVuHv8iVmGdaebriMeL/p+OpvgryeLrk4Mboz5+YLDaK+b7+dfzbyxU/y3Fvwqy/t8cc/q/qUTfP0mxXtsT9fr46cnl13H+j88XPKZZ6f7fm7yVr1n/8m7x2IcjU1OnhyJ6k9fyfG/Meny48dwqX5XP4t+/r9X+n+afcVH2/wMRke3EeyPiwYh4qGz7wxHxSETsWyT+H1969L1F4k8iibb2/1i0Hv+l/mT2ev0KEl0nfvhuoRXzpfX/oZjOP2sL+effTSy1gbf49gEAAMBdIY2IrZGkA0W6tjXSdGCg+B/+HbE5rU9MTj15dOKDU2PFNQL90ZNWZ7r6Zp0PHUqmy1cs8sPlueJq+8Go5eeNv+zalOcHRifqY22OHTrdlrnjP6rxn/lz9ZdbgDuN67WgczWP/7RN7QDW3lK+/x0LwPrUYvxvakc7gLXn+B86V6vx/3FT3vwf1qf54/9ii5+sA9Yj83/oXMY/dC7jHzrSrVzXv/JEdbHAyl9n45Kv8O+URPWLF7ezrk3ReCTStofcQYlsxKxtpY3fUAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALib/RcAAP//lWnm6g==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 9.334119704s ago: executing program 33 (id=147): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x82071c, &(0x7f0000000f40)={[{@nobarrier}], [{@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*&'}}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x23}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0xff, 0x48d, &(0x7f0000001500)="$eJzs3MtvVNUfAPDvvX3wpv39RBQEHUUj8dHSgsrChRpNXGhiogtc1rYgMlBDayKEaDUGl4bEvXFp4l/gzo1RF8bErSYsDQlRYgK4qrkvpp1OS1tKBzqfTzKdc+aemXO+c+6ZOfee3gmgY9WyP0nE1oj4PSL6iuzcArXi7tqVc6PXr5wbTWJm5s2/krzc1SvnRqui1fO2lJn9aUT6WRIvJPPrnTxz9sRIvT5+uswPTp18f3DyzNmnj58cOTZ+bPzU8OHDhw4OPffs8DOrEmcW19XdH03s2fXq2xdeHz1y4Z2fvs2atXNvsX12HDd1vUVALdSyd+3vmVzztseW0fa7wbZZ6aS7jQ1hWboiIuuunnz890VXNDqvL175tK2NA26r7Ltpw8Kbp2eAdSyJdrcAaI/qiz47/q1uazT1uCNcfjGiN+LixvL8xrUb8XdHWpbpuY311yLiyPS/X2W3WO55CACAFcjnNk+1mv+lsTO/L9Y6tpdrKP0R8b+I+H9E3BMROyLi3oi87H0RcX/x5Jm+JdZfa8rPn/+klxrprpUFuYhs/vd8OfeLOfO/tLrr7ypz2/L4e5Kjx+vjB8r3ZH/0bMjyQ4vU8f3Lv32x0LbZ87/sltVfzQXLBlzqbjpBNzYyNbJak9LLn0Ts7m7MfRvxJzdWArI9YFdE7F7eS2+vEsef+GbPQoVuHv8iVmGdaebriMeL/p+OpvgryeLrk4Mboz5+YLDaK+b7+dfzbyxU/y3Fvwqy/t8cc/q/qUTfP0mxXtsT9fr46cnl13H+j88XPKZZ6f7fm7yVr1n/8m7x2IcjU1OnhyJ6k9fyfG/Meny48dwqX5XP4t+/r9X+n+afcVH2/wMRke3EeyPiwYh4qGz7wxHxSETsWyT+H1969L1F4k8iibb2/1i0Hv+l/mT2ev0KEl0nfvhuoRXzpfX/oZjOP2sL+effTSy1gbf49gEAAMBdIY2IrZGkA0W6tjXSdGCg+B/+HbE5rU9MTj15dOKDU2PFNQL90ZNWZ7r6Zp0PHUqmy1cs8sPlueJq+8Go5eeNv+zalOcHRifqY22OHTrdlrnjP6rxn/lz9ZdbgDuN67WgczWP/7RN7QDW3lK+/x0LwPrUYvxvakc7gLXn+B86V6vx/3FT3vwf1qf54/9ii5+sA9Yj83/oXMY/dC7jHzrSrVzXv/JEdbHAyl9n45Kv8O+URPWLF7ezrk3ReCTStofcQYlsxKxtpY3fUAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALib/RcAAP//lWnm6g==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 8.112955738s ago: executing program 5 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0xe71}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200001002bbd7000fddbdf250210009ae71085cc4806040000081200010008000100ffffffff0c00000000000000090800000000c762f82dc309eac8588c5cda55f9c7e6197766ddfba32efc844d9d6bb76e09ec2b33cf99344a6eea5bb908d75c8d290c71c1b9379d2c405d8f1845ecfcc3"], 0x38}}, 0x0) 6.722244826s ago: executing program 5 (id=159): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x82071c, &(0x7f0000000f40)={[{@nobarrier}], [{@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*&'}}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x23}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0xff, 0x48d, &(0x7f0000001500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001540)={0x14, r6, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 5.52096885s ago: executing program 3 (id=163): unshare(0x22020600) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@volatile={0x4, 0x0, 0x0, 0x9, 0x5}, @union={0xa, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x10, 0x4, 0x7}, {0x0, 0x5, 0x6}]}, @fwd={0xf}]}, {0x0, [0x2e, 0x5f, 0x6f, 0x5f, 0x4f]}}, &(0x7f00000001c0)=""/102, 0x5b, 0x66, 0x1, 0x7, 0x10000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) (async) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = epoll_create(0x3ff) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0xac2aa76bb80af927}) (async, rerun: 32) fadvise64(r2, 0x966d, 0xa07, 0x4) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r5}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) 5.495028221s ago: executing program 0 (id=164): pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffc, 0x3, 0x0, 0x1, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x9291}, 0x0, 0x0) 5.449657891s ago: executing program 1 (id=165): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x2000408, &(0x7f0000001f80)=ANY=[], 0x1, 0x5557, &(0x7f0000000500)="$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") symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_usb_connect(0x0, 0x5b, &(0x7f0000001e00)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109024900020000000009047f00022513bf000a240100000002010205240400001d050000000000000007250100000000072501000000000905000000000000000904e1"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) 5.440933311s ago: executing program 0 (id=166): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xba8ebc7e453fcf7b, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0xb7cf, 0x6, 0xd, 0x5c36}, {0x4, 0x6, 0x0, 0xea82}, {0xc2d6, 0x6, 0x76, 0x8}, {0x401, 0x0, 0x9, 0x7a}, {0x3, 0x2, 0x2, 0x6}, {0x6, 0xe, 0x0, 0x2}, {0x7f, 0x95, 0x4}, {0x3, 0xd, 0xfc, 0x7f}, {0x5, 0xa, 0x0, 0x2}, {0xfff9, 0xf9, 0x6, 0x100}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0xca000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000180)=""/201) r2 = syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x6000, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x17a}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x9}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/input/event#\x00'}}, {@euid_gt}, {@euid_lt}, {@hash}, {@uid_lt={'uid<', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}, 0x1, 0x0, &(0x7f0000000480)="05919fb34129ca09d89f25e470cd2bdc4993dbfdaa9c6ef8b28b20b56c357d8a8b6813a39ee41d0e1d5a7715edaff87c68f4b14bec2f35c87a63839e03638ac93288d655c7b8def5a494f8c5ae7d69f4c52f99df1cc4ae5cfed2dcc49dcf0802d41c2f9bc2e70b6ac3ceaf094d7d5a77061ea3f07c654ac2fea92392f58c192a52b155d05d275a57b6b1d83d22b86b094be4134c436166692b9977b183d26cb5f14a") getdents(r2, &(0x7f0000000540)=""/202, 0xca) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x281, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000680)={0x8, 0x8, 0x0, 0x1e, 0x3, 0x5400000, 0x3, 0x9f, 0x1}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x20000, 0x17) r5 = gettid() sched_setscheduler(r5, 0x1, &(0x7f0000000700)=0x1d) r6 = creat(&(0x7f0000000740)='./file0\x00', 0x106) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000780)=r6) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f00000007c0)) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000800)=0xa, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x101, 0xffffffff, {{0xc, 0x4, 0x1, 0x3c, 0x30, 0x67, 0x0, 0x17, 0x0, 0x0, @loopback, @local, {[@timestamp={0x44, 0xc, 0x12, 0x0, 0x9, [0x1000, 0x4]}, @ssrr={0x89, 0xf, 0x68, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000900)={@mcast2, r7}, 0x14) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x1364) recvmsg$can_raw(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/13, 0xd}, {&(0x7f0000000980)=""/154, 0x9a}, {&(0x7f0000000a40)=""/145, 0x91}, {&(0x7f0000000b00)=""/251, 0xfb}, {&(0x7f0000000c00)=""/163, 0xa3}], 0x5, &(0x7f0000000d40)=""/92, 0x5c}, 0x12000) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) syz_emit_ethernet(0x5e, &(0x7f0000000e80)={@broadcast, @random="aaf000734c36", @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x5}}, {@canfd={0xd, {{0x2, 0x1, 0x0, 0x1}, 0x1e, 0x1, 0x0, 0x0, "00d9b6176c358cd45cf3b6ae7c72d9bf3c3d5fa697e99655e554a1ca55815bd64768be67d7b45acb58300b09712ebb0717cb9ce48c1506363e9789d6c28a4d9d"}}}}, &(0x7f0000000f00)={0x0, 0x1, [0xfffffffc, 0x378, 0x5be, 0xd39]}) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(r4, &(0x7f0000001140)='./file0\x00', 0x800, 0x800, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0x1000400, &(0x7f0000001280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}, {@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x8}}], [{@fsmagic={'fsmagic', 0x3d, 0xb7}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syztnl1\x00'}}, {@uid_gt={'uid>', r10}}, {@audit}]}}, 0x0, 0x0, &(0x7f0000001400)="7000fbc4bcdec9d702b83a6f2865324c3f4c5aa6be031d756acfd30a116b0e5f6504e17b26ceaddd1ca9e128c4eb7a749f06107abd03726c06522c0ec2acd083518629ce24e2319bb7432e516d40569eca3be4092541ffa5a3bf4a67fe59a109fedaff471650338dfba99296200222c42a0106b8c5e8be5388eaebea831b9ee887c1f1c999edfa40982dc3eff4c2b2b324ea8448cd0dc13a5ff0921f8da6a173efbc0c8e39a7b307672439b14c55b95af97b4a3eef96f583d27680a2d021f444e370190fd98842da5941220c32081d568ee82b5bff34296b6ad2357c4923c0a0a0c0c197e56cd7fbc290a0ff") r11 = open_tree(r4, &(0x7f0000001500)='./file0\x00', 0x80000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000001540)={0x7e90, 0x10, 0x3ff, 0x1, 0x9, 0x8001}) recvfrom$inet_nvme(r11, &(0x7f0000001580)=""/52, 0x34, 0x40000002, &(0x7f00000015c0)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) setsockopt$inet_buf(r6, 0x0, 0x24, &(0x7f0000001640)="a166b292cb0ddf57edccf776cc2bcee301c3d3f0bac3a4a95e829e345eb3560cc0069d7a23cc932e6a83d231e82113cc5650203ab7807985458412dec40136394645fc42322aa2d274d96e30b29672ffe8e3111e5c8e1a5c10e3df", 0x5b) 5.383196082s ago: executing program 5 (id=167): mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="0b011001000000082505a8a440000102030109021b00010100a00009040000010701010009050102000200fc00"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) 5.288952564s ago: executing program 0 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r5, 0x1, 0x0, @void}, 0x10) write(r2, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000003c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6(0xa, 0x3, 0xff) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r4, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r5, 0x1, 0x0, @void}, 0x10) (async) write(r2, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000003c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 5.138396647s ago: executing program 3 (id=169): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB='rodir,noeumtail=0,utf8=0,usefree,shortname=mixed,uni_xlate=0,nonumtail=0,utf8=normal,codepage=864,check=strict,shortname=winnt,shortname=lower,iocharset=cp1250,utf8=0,iocharset=cp737,\x00'], 0x3, 0x27b, &(0x7f0000000640)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0xffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') 5.136832887s ago: executing program 3 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a0000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl(r0, 0x3, &(0x7f0000000380)="f9dc9d7396712f6094c2ae36dede02c99a187b03cc112ddae4fbaa3cb4112339c5030b3ff86a9d0326d9898d21a184bbe81d190995575e8ef956fe8d35c53b1e991e01ff84bfb890873b6ca5511d724077cc0a7a9967aefdaffc4057d4d1d0b0954406efc3160966ea6f") r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3f0600001400000000000000000a400000000000bfe11a739bc3447872cd890e45503e8c014af5eb54b7e4904b8266316f08bc86c4b01c285c86110f330e20fedf69e62903fb7f1b461d2dd2c304dbad327553811334207ea6709a9d8fbcccfdebe479f4777df793b4921c5a1c6693a433a2ac974347c77fc2fa3daff976233bf0232ac5a92f23e8f5c5acb584687f70d7592b69c91a11bbb04c6964f53b13af38c5d2c53e00607b98cca1eca59347ce7acfd87d99e95ee93eb5b5a5befe48ede31fa60d61d9e288cbbdb39b6c772a", @ANYRES32=r4, @ANYBLOB="14000200ff0200000000000000000000000000010800080002070000"], 0x34}}, 0x0) getpid() 5.136365317s ago: executing program 0 (id=171): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x82071c, &(0x7f0000000f40)={[{@nobarrier}], [{@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*&'}}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x23}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0xff, 0x48d, &(0x7f0000001500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001540)={0x14, r7, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 5.066003718s ago: executing program 3 (id=172): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3a, 0x0, "209fa2563eb0985b72c18371a92b4d03da6e5f86c6a57e36c30bb0cbb6ec32634ff8bb79ab0ea1a69d912c63144d9fe4b167d5ae06908720c88d3587557a5ecab68dcabbb794d2fd06227a9ff25d1285"}, 0xd8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 4.943527421s ago: executing program 3 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x20, r2, 0x99eed70f698ad103, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf1d6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpgid(0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd601081140008110000000000000000000000000000000000ff02000000000000000000000000000100000e2216089078"], 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c02200006060309050710003e8fad670201020708"], 0x0) 3.906277922s ago: executing program 0 (id=177): pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r8, r7, r7, 0x0) keyctl$KEYCTL_MOVE(0x4, r6, r6, 0x0, 0x0) 3.188708467s ago: executing program 6 (id=178): syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xfe}, {[@ra={0x94, 0x4, 0x1}]}}, "4339fba15e24ece1bf7a9bb1d04056ec3215f4d62e0d5f5802dfa28140f6797ff33042ef1838b60b"}}}}, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdir(0x0, 0x1c2) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) write(r1, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) 3.056914699s ago: executing program 5 (id=179): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5632e5f"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000dc0)='virtio_transport_recv_pkt\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x100, 0x90) ioctl$TCFLSH(r4, 0x540b, 0x2) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000004240)={'ip6_vti0\x00', &(0x7f00000041c0)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xc, 0x1, 0x20, @mcast1, @empty, 0x700, 0x7, 0x5, 0xeb76}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.056631409s ago: executing program 6 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) 3.027006969s ago: executing program 3 (id=181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x1fe) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000500)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xb8, 0x4040}}], 0x1, 0x20040080) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) splice(r3, 0x0, r2, 0x0, 0x20000000000007, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 3.00799412s ago: executing program 6 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0xfffffffffffffdc5) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/224, 0xe0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0xfffffffffffffdc5) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/224, 0xe0) (async) 2.902194832s ago: executing program 0 (id=183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x6, "636ff405"}, @local=@item_4={0x3, 0x2, 0x9, "924ef193"}]}}, 0x0}, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x400, 0x0, 0xa, 0x0, 0x20, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x4, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3503}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast2, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) 2.806956854s ago: executing program 6 (id=184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) (async) timer_create(0x2, 0x0, &(0x7f0000000100)) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) gettid() (async) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x5) (async) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x3d6bf7b3fa2b4728, 0x0, {0x7, 0x29, 0x5, 0x8021008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000}}, 0x50) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x2, 0x4, {{0x8, 0x4, 0x0, 0x6, 0x20, 0x64, 0x0, 0x9, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x7c, [@dev={0xac, 0x14, 0x14, 0xd}]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) (async) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r9 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x64000600) unshare(0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRESOCT], 0x0) 2.746781575s ago: executing program 6 (id=185): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.325999244s ago: executing program 1 (id=186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) clock_adjtime(0xc, &(0x7f0000001840)) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.024863089s ago: executing program 1 (id=187): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x82071c, &(0x7f0000000f40)={[{@nobarrier}], [{@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*&'}}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x23}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0xff, 0x48d, &(0x7f0000001500)="$eJzs3MtvVNUfAPDvvX3wpv39RBQEHUUj8dHSgsrChRpNXGhiogtc1rYgMlBDayKEaDUGl4bEvXFp4l/gzo1RF8bErSYsDQlRYgK4qrkvpp1OS1tKBzqfTzKdc+aemXO+c+6ZOfee3gmgY9WyP0nE1oj4PSL6iuzcArXi7tqVc6PXr5wbTWJm5s2/krzc1SvnRqui1fO2lJn9aUT6WRIvJPPrnTxz9sRIvT5+uswPTp18f3DyzNmnj58cOTZ+bPzU8OHDhw4OPffs8DOrEmcW19XdH03s2fXq2xdeHz1y4Z2fvs2atXNvsX12HDd1vUVALdSyd+3vmVzztseW0fa7wbZZ6aS7jQ1hWboiIuuunnz890VXNDqvL175tK2NA26r7Ltpw8Kbp2eAdSyJdrcAaI/qiz47/q1uazT1uCNcfjGiN+LixvL8xrUb8XdHWpbpuY311yLiyPS/X2W3WO55CACAFcjnNk+1mv+lsTO/L9Y6tpdrKP0R8b+I+H9E3BMROyLi3oi87H0RcX/x5Jm+JdZfa8rPn/+klxrprpUFuYhs/vd8OfeLOfO/tLrr7ypz2/L4e5Kjx+vjB8r3ZH/0bMjyQ4vU8f3Lv32x0LbZ87/sltVfzQXLBlzqbjpBNzYyNbJak9LLn0Ts7m7MfRvxJzdWArI9YFdE7F7eS2+vEsef+GbPQoVuHv8iVmGdaebriMeL/p+OpvgryeLrk4Mboz5+YLDaK+b7+dfzbyxU/y3Fvwqy/t8cc/q/qUTfP0mxXtsT9fr46cnl13H+j88XPKZZ6f7fm7yVr1n/8m7x2IcjU1OnhyJ6k9fyfG/Meny48dwqX5XP4t+/r9X+n+afcVH2/wMRke3EeyPiwYh4qGz7wxHxSETsWyT+H1969L1F4k8iibb2/1i0Hv+l/mT2ev0KEl0nfvhuoRXzpfX/oZjOP2sL+effTSy1gbf49gEAAMBdIY2IrZGkA0W6tjXSdGCg+B/+HbE5rU9MTj15dOKDU2PFNQL90ZNWZ7r6Zp0PHUqmy1cs8sPlueJq+8Go5eeNv+zalOcHRifqY22OHTrdlrnjP6rxn/lz9ZdbgDuN67WgczWP/7RN7QDW3lK+/x0LwPrUYvxvakc7gLXn+B86V6vx/3FT3vwf1qf54/9ii5+sA9Yj83/oXMY/dC7jHzrSrVzXv/JEdbHAyl9n45Kv8O+URPWLF7ezrk3ReCTStofcQYlsxKxtpY3fUAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALib/RcAAP//lWnm6g==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001540)={0x14, r7, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.621302958s ago: executing program 5 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86cd6070eae40008000000000000000000000000ffff0a010100fc0200000000000000000000000000010000050000000000"], 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5c4c2, 0x6d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x4, 0x7fff7fff}]}) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000a00), &(0x7f0000000a80)=0x8) epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8a) r4 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) execve(&(0x7f0000000380)='./file0\x00', &(0x7f00000008c0)={[&(0x7f0000000880)='\x00']}, &(0x7f00000009c0)={[&(0x7f0000000900)='$-[}$/\xcd*\x00', &(0x7f0000000980)='.\xda\x00']}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) fcntl$setownex(r1, 0xf, &(0x7f0000000340)={0x2, r4}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000010, &(0x7f0000000040)={[{@noload}]}, 0x1, 0x7ad, &(0x7f0000000fc0)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1, 0x0) openat$incfs(r7, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0xc0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020}, 0xfffffffffffffd88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 1.433066481s ago: executing program 6 (id=189): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000600000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000b40)='./file1\x00', 0x4810, &(0x7f00000001c0), 0x0, 0x507, &(0x7f0000000b80)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r7, &(0x7f0000000240)="19", &(0x7f0000000080)=""/95}, 0x20) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioprio_get$uid(0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0bb8c6383e592e27ea60bec0353f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0x50) 626.397007ms ago: executing program 1 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000040)={0x123c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x535, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @dev, 0x3}}}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff1f7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3c56}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc64}]}, @TIPC_NLA_NODE={0x10c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0x7b, 0x3, "fae7c6b62bf3c4eb60ed7303cb5fbebca733c69af792c7bc12027dea36368254c0cf9ea77b2d1702c8b309142913e1d1cdc6bc8cd0fb056875d960b9388552a3472b5610d18b9e93ee3be39e64f5db525268ceb5e5c8e4c6cc1b43d5ca2879cea78a1043df39c78a899e34b0f1fa37fc73c4b56b4ffc65"}, @TIPC_NLA_NODE_ID={0x21, 0x3, "908e2ac127ff81cb00f1e09f9434083676b32f017f0e058456435b0902"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x689}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf72}]}]}, 0x123c}, 0x1, 0x0, 0x0, 0xc004}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x70, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "37127fc230775abc7b5e6c255d26b6ec416949018ffea757"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040814) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x814) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), r2) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xbb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x20008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x48d4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001a40)={'wpan4\x00'}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xbe}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008080}, 0x4) r12 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001c80)={&(0x7f0000001bc0), 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x30}}, 0x0) pipe2$watch_queue(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fstat(r13, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000001d00)=@nbd={'/dev/nbd', 0x0}, r15, &(0x7f0000001dc0)={0x1000, 0xfffffffffffffff4, 0x1, 0x2}) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000001e00)={'pim6reg\x00', {0x2, 0x4e21, @private=0x400}}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000001ec0)={'wg1\x00', 0x0}) getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f0000001f00)={0x0, @broadcast, @initdev}, &(0x7f0000001f40)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000002580)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002540)={&(0x7f0000002180)={0x3c0, r16, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4b515fb8815c9f93}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x134, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4}, 0x24008014) 156.593637ms ago: executing program 1 (id=191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) chroot(0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @local, 0xff000000, 0x0, 0x5, 0x3, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x8, 0x9, 0xd, 0x6140, '\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x181}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 80.342839ms ago: executing program 1 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="0f20e035200000000f22e066b81b018ed066b8b1000f00d0ee0f5dd8360fc72d090000000fd2954a1600000f0fee90c4e2290d40bf2e660f38809d00000080", 0x3f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(r6, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f00000002c0)=[{r6, 0x9120}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=193): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r7 = dup(r2) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1, 0xb, 0x5, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 21.857594][ T24] audit: type=1400 audit(1757855617.290:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.858988][ T267] cgroup: Unknown subsys name 'net' [ 21.880586][ T24] audit: type=1400 audit(1757855617.290:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.908120][ T24] audit: type=1400 audit(1757855617.320:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.908389][ T267] cgroup: Unknown subsys name 'devices' [ 22.176115][ T267] cgroup: Unknown subsys name 'hugetlb' [ 22.181750][ T267] cgroup: Unknown subsys name 'rlimit' [ 22.382700][ T24] audit: type=1400 audit(1757855617.810:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.406196][ T24] audit: type=1400 audit(1757855617.810:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.430980][ T24] audit: type=1400 audit(1757855617.810:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.438545][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.463133][ T24] audit: type=1400 audit(1757855617.890:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.488761][ T24] audit: type=1400 audit(1757855617.890:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.519356][ T24] audit: type=1400 audit(1757855617.950:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.545545][ T24] audit: type=1400 audit(1757855617.950:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.571718][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.938230][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.945475][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.952926][ T276] device bridge_slave_0 entered promiscuous mode [ 23.961916][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.969178][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.976777][ T276] device bridge_slave_1 entered promiscuous mode [ 23.995994][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.003053][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.010515][ T275] device bridge_slave_0 entered promiscuous mode [ 24.025462][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.032613][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.040295][ T275] device bridge_slave_1 entered promiscuous mode [ 24.059082][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.066262][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.073754][ T279] device bridge_slave_0 entered promiscuous mode [ 24.083516][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.090656][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.098410][ T279] device bridge_slave_1 entered promiscuous mode [ 24.124244][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.131426][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.139044][ T277] device bridge_slave_0 entered promiscuous mode [ 24.146124][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.153174][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.160643][ T277] device bridge_slave_1 entered promiscuous mode [ 24.258554][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.265871][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.273194][ T278] device bridge_slave_0 entered promiscuous mode [ 24.281445][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.288706][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.296213][ T278] device bridge_slave_1 entered promiscuous mode [ 24.361937][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.369022][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.376350][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.383378][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.403588][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.410680][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.417973][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.425006][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.433785][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.441042][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.448334][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.455537][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.466478][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.473560][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.480863][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.487939][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.508771][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.515953][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.523227][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.530390][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.560922][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.568683][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.576289][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.583474][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.590983][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.598214][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.606099][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.613332][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.621064][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.628773][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.636149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.643714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.659133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.667492][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.674564][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.681921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.690588][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.697694][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.705411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.712986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.732650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.740874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.750858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.759577][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.766649][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.796755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.805682][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.812821][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.820571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.828104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.836345][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.843383][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.850791][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.859079][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.866130][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.873561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.881828][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.888899][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.896280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.904314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.912336][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.920360][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.928613][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.935702][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.943460][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.951679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.959731][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.971346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.979867][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.990872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.999682][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.008440][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.015877][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.037123][ T275] device veth0_vlan entered promiscuous mode [ 25.043543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.052711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.060954][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.070136][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.078219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.086637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.095248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.103308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.111490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.119237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.130838][ T276] device veth0_vlan entered promiscuous mode [ 25.139008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.146973][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.155075][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.162528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.178156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.186513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.195124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.203358][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.211592][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.218651][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.226029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.233857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.245223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.252871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.262384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.271246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.287103][ T276] device veth1_macvtap entered promiscuous mode [ 25.294567][ T278] device veth0_vlan entered promiscuous mode [ 25.305326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.313458][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.321799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.330435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.339007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.346741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.355061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.363236][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.371676][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.379866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.387988][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.396238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.403707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.417209][ T275] device veth1_macvtap entered promiscuous mode [ 25.424879][ T277] device veth0_vlan entered promiscuous mode [ 25.432371][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.440626][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.449033][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.466907][ T278] device veth1_macvtap entered promiscuous mode [ 25.476180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.484642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.493041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.501486][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.510669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.519176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.527773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.536238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.556997][ T276] request_module fs-gadgetfs succeeded, but still no fs? [ 25.561309][ T277] device veth1_macvtap entered promiscuous mode [ 25.572557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.581514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.590053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.598538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.607168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.615757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.623860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.636052][ T279] device veth0_vlan entered promiscuous mode [ 25.646580][ T276] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.665380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.676979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.685987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.693946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.702952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.711421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.720152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.728751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.742293][ T279] device veth1_macvtap entered promiscuous mode [ 25.766662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.776925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.785276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.793570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.802324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.847752][ T309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.868862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.878093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.886942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.896346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.972217][ T309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 26.064546][ T333] ====================================================== [ 26.064546][ T333] WARNING: the mand mount option is being deprecated and [ 26.064546][ T333] will be removed in v5.15! [ 26.064546][ T333] ====================================================== [ 26.092005][ T333] erofs: (device loop3): mounted with root inode @ nid 36. [ 27.074333][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 27.074346][ T24] audit: type=1400 audit(1757855622.500:115): avc: denied { create } for pid=373 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.118209][ T24] audit: type=1400 audit(1757855622.530:116): avc: denied { unlink } for pid=275 comm="syz-executor" name="cgroup.freeze" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.141878][ T24] audit: type=1400 audit(1757855622.540:117): avc: denied { create } for pid=374 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.269954][ T24] audit: type=1400 audit(1757855622.540:118): avc: denied { setopt } for pid=374 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.294401][ T24] audit: type=1400 audit(1757855622.550:119): avc: denied { write } for pid=373 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.338811][ T24] audit: type=1400 audit(1757855622.550:120): avc: denied { nlmsg_write } for pid=373 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.409152][ T24] audit: type=1400 audit(1757855622.600:121): avc: denied { read } for pid=383 comm="syz.3.14" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.454359][ T24] audit: type=1400 audit(1757855622.600:122): avc: denied { open } for pid=383 comm="syz.3.14" path="/dev/input/event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.478603][ T24] audit: type=1400 audit(1757855622.620:123): avc: denied { ioctl } for pid=383 comm="syz.3.14" path="/dev/input/event2" dev="devtmpfs" ino=268 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.506178][ T394] netlink: 'syz.4.15': attribute type 4 has an invalid length. [ 27.512865][ T24] audit: type=1400 audit(1757855622.650:124): avc: denied { create } for pid=381 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.513770][ T394] netlink: 17 bytes leftover after parsing attributes in process `syz.4.15'. [ 27.631317][ T398] binder: 397:398 ioctl c00c620f 0 returned -14 [ 28.419482][ T406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 28.428888][ T406] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.502563][ T406] overlayfs: workdir and upperdir must be separate subtrees [ 29.269657][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 29.282203][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.299667][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 29.308233][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.316633][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.324936][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.337251][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.362247][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.413926][ T427] cgroup: syz.1.21 (427) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 29.430880][ T427] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 29.726249][ T422] netlink: 25 bytes leftover after parsing attributes in process `syz.2.24'. [ 29.792989][ T428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 29.807010][ T431] FAULT_INJECTION: forcing a failure. [ 29.807010][ T431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.820432][ T431] CPU: 1 PID: 431 Comm: syz.2.25 Not tainted syzkaller #0 [ 29.827560][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 29.837636][ T431] Call Trace: [ 29.840989][ T431] __dump_stack+0x21/0x24 [ 29.845340][ T431] dump_stack_lvl+0x169/0x1d8 [ 29.850031][ T431] ? thaw_kernel_threads+0x220/0x220 [ 29.855329][ T431] ? show_regs_print_info+0x18/0x18 [ 29.860548][ T431] ? slab_post_alloc_hook+0x7d/0x2f0 [ 29.865937][ T431] dump_stack+0x15/0x1c [ 29.870111][ T431] should_fail+0x3c1/0x510 [ 29.874583][ T431] should_fail_usercopy+0x1a/0x20 [ 29.879630][ T431] _copy_from_iter_full+0x1ac/0x750 [ 29.884852][ T431] ? __check_object_size+0x2f4/0x3c0 [ 29.890273][ T431] netlink_sendmsg+0x6ec/0xb30 [ 29.895053][ T431] ? stack_trace_snprint+0xf0/0xf0 [ 29.900277][ T431] ? netlink_getsockopt+0x530/0x530 [ 29.905492][ T431] ? kasan_set_track+0x4a/0x70 [ 29.910274][ T431] ? security_socket_sendmsg+0x82/0xa0 [ 29.915745][ T431] ? netlink_getsockopt+0x530/0x530 [ 29.920967][ T431] ____sys_sendmsg+0x5a2/0x8c0 [ 29.925748][ T431] ? __sys_sendmsg_sock+0x40/0x40 [ 29.930789][ T431] ? import_iovec+0x7c/0xb0 [ 29.935444][ T431] ___sys_sendmsg+0x1f0/0x260 [ 29.940250][ T431] ? __sys_sendmsg+0x250/0x250 [ 29.945030][ T431] ? rw_verify_area+0x1c0/0x360 [ 29.949903][ T431] ? __fdget+0x1a1/0x230 [ 29.954178][ T431] __x64_sys_sendmsg+0x1e2/0x2a0 [ 29.959123][ T431] ? fput+0x1a/0x20 [ 29.962954][ T431] ? ___sys_sendmsg+0x260/0x260 [ 29.967822][ T431] ? debug_smp_processor_id+0x17/0x20 [ 29.973322][ T431] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 29.979404][ T431] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 29.985044][ T431] do_syscall_64+0x31/0x40 [ 29.989470][ T431] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.995495][ T431] RIP: 0033:0x7f2f0a3ebba9 [ 29.999928][ T431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.019746][ T431] RSP: 002b:00007f2f08e54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.028192][ T431] RAX: ffffffffffffffda RBX: 00007f2f0a632fa0 RCX: 00007f2f0a3ebba9 [ 30.036356][ T431] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 30.044349][ T431] RBP: 00007f2f08e54090 R08: 0000000000000000 R09: 0000000000000000 [ 30.052493][ T431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.060478][ T431] R13: 00007f2f0a633038 R14: 00007f2f0a632fa0 R15: 00007fff7c0d2c98 [ 30.328683][ T438] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 30.342163][ T438] bridge_slave_0: FDB only supports static addresses [ 30.802487][ T445] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 30.825800][ T445] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000, [ 30.855185][ T442] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 30.889307][ T442] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.976709][ T442] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.038732][ T442] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 31.046072][ T442] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.431498][ T478] netlink: 'syz.1.37': attribute type 17 has an invalid length. [ 31.450452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 31.458916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.467894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 31.477305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.486085][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.494336][ T323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.496279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.510846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.519825][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.554450][ T370] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.618649][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.618662][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.638524][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.647433][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.655967][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.663556][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.671671][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.715531][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.731149][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.739403][ T484] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 31.748165][ T483] device bridge_slave_0 entered promiscuous mode [ 31.760979][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.768427][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.776310][ T483] device bridge_slave_1 entered promiscuous mode [ 31.794409][ T370] usb 1-1: Using ep0 maxpacket: 8 [ 31.836355][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.843466][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.850898][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.857966][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.884605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.892223][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.899957][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.904319][ T323] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.915923][ T323] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 31.924323][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.925076][ T323] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.936201][ T370] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.959538][ T323] usb 4-1: config 220 has no interface number 2 [ 31.960060][ T370] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 31.966226][ T323] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.975292][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.988548][ T323] usb 4-1: config 220 interface 0 has no altsetting 0 [ 31.998818][ T370] usb 1-1: config 0 descriptor?? [ 32.005155][ T323] usb 4-1: config 220 interface 76 has no altsetting 0 [ 32.015336][ T323] usb 4-1: config 220 interface 1 has no altsetting 0 [ 32.015615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.030952][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.038027][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.045630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.054367][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.061441][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.073301][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.082853][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.096976][ T24] kauditd_printk_skb: 116 callbacks suppressed [ 32.096989][ T24] audit: type=1326 audit(1757855627.530:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.112200][ T483] device veth0_vlan entered promiscuous mode [ 32.129981][ T24] audit: type=1326 audit(1757855627.560:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.143091][ T483] device veth1_macvtap entered promiscuous mode [ 32.164906][ T24] audit: type=1326 audit(1757855627.600:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.188153][ T24] audit: type=1326 audit(1757855627.620:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.211551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.211577][ T24] audit: type=1326 audit(1757855627.640:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.220123][ T323] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 32.244959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.253193][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.260951][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.275335][ T323] usb 4-1: Product: syz [ 32.275351][ T323] usb 4-1: Manufacturer: syz [ 32.280274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.284802][ T323] usb 4-1: SerialNumber: syz [ 32.292551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.309216][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.322467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.325256][ T24] audit: type=1326 audit(1757855627.760:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.354749][ T24] audit: type=1326 audit(1757855627.760:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.378563][ T24] audit: type=1326 audit(1757855627.760:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc6b7e7ab code=0x7ffc0000 [ 32.401918][ T24] audit: type=1326 audit(1757855627.790:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fc6bb1465 code=0x7ffc0000 [ 32.536162][ T370] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x1 [ 32.542531][ T24] audit: type=1400 audit(1757855627.970:250): avc: denied { mounton } for pid=498 comm="syz.1.43" path="/8/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.543326][ T370] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 32.613459][ T370] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 32.653930][ T370] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x2 [ 32.662844][ T370] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 32.670964][ T370] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 32.708947][ T370] hid-rmi 0003:06CB:81A7.0001: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 32.930660][ T499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43'. [ 32.941455][ T499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 32.951462][ T499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=499 comm=syz.1.43 [ 32.991889][ T489] usb 1-1: USB disconnect, device number 2 [ 33.026124][ T323] usb 4-1: selecting invalid altsetting 0 [ 33.032850][ T323] usb 4-1: selecting invalid altsetting 0 [ 33.039941][ T323] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 33.232800][ T323] uvcvideo: No valid video chain found. [ 33.389266][ T323] usb 4-1: USB disconnect, device number 2 [ 33.397645][ T507] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 33.405244][ T507] EXT4-fs (loop2): Ignoring removed bh option [ 33.507502][ T296] device bridge_slave_1 left promiscuous mode [ 33.514124][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.530906][ T507] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a003c099, mo2=0002] [ 33.539369][ T507] System zones: 0-5 [ 33.547863][ T507] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,inode_readahead_blks=0x0000000000000020,nodioread_nolock,nodelalloc,nombcache,debug_want_extra_isize=0x0000000000000040,minixdf,nodelalloc,bh,debug,noauto_da_alloc,,errors=continue [ 33.759880][ T296] device bridge_slave_0 left promiscuous mode [ 33.866265][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.288674][ T296] device veth1_macvtap left promiscuous mode [ 34.309817][ T296] device veth0_vlan left promiscuous mode [ 34.355417][ T517] fido_id[517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 34.724286][ T489] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.794737][ T531] Zero length message leads to an empty skb [ 34.968350][ T533] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 35.114481][ T489] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.138388][ T489] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.374635][ T489] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.383995][ T489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.392448][ T489] usb 1-1: Product: syz [ 35.400426][ T489] usb 1-1: Manufacturer: syz [ 35.405228][ T489] usb 1-1: SerialNumber: syz [ 35.729086][ T7] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 35.827342][ T489] usb 1-1: 0:2 : does not exist [ 35.832320][ T370] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.876285][ T489] usb 1-1: USB disconnect, device number 3 [ 36.097183][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.134303][ T370] usb 2-1: device descriptor read/64, error -71 [ 36.479740][ T558] FAT-fs (loop0): bogus number of FAT sectors [ 36.487734][ T558] FAT-fs (loop0): Can't find a valid FAT filesystem [ 36.524204][ T370] usb 2-1: device descriptor read/64, error -71 [ 36.748496][ T563] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 36.757927][ T563] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.794218][ T370] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.074209][ T370] usb 2-1: device descriptor read/64, error -71 [ 37.240029][ T577] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 37.295521][ T577] EXT4-fs error (device loop0): ext4_fill_super:4955: inode #2: comm syz.0.61: casefold flag without casefold feature [ 37.308392][ T577] EXT4-fs (loop0): get root inode failed [ 37.314091][ T577] EXT4-fs (loop0): mount failed [ 37.403136][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 37.403149][ T24] audit: type=1400 audit(1757855632.830:275): avc: denied { setopt } for pid=582 comm="syz.2.62" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.429780][ T24] audit: type=1400 audit(1757855632.840:276): avc: denied { setattr } for pid=576 comm="syz.0.61" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 37.460232][ T24] audit: type=1400 audit(1757855632.890:277): avc: denied { write } for pid=582 comm="syz.2.62" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.480540][ T24] audit: type=1400 audit(1757855632.890:278): avc: denied { write } for pid=582 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.500118][ T370] usb 2-1: device descriptor read/64, error -71 [ 37.539250][ T24] audit: type=1400 audit(1757855632.970:279): avc: denied { sys_module } for pid=591 comm="syz.0.63" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.654901][ T370] usb usb2-port1: attempt power cycle [ 37.940871][ T602] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.049227][ T602] EXT4-fs (loop0): unsupported descriptor size 255 [ 38.101197][ T370] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.274571][ T370] usb 2-1: device descriptor read/8, error -71 [ 38.320436][ T602] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.365381][ T602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'. [ 38.381830][ T602] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 38.673410][ T24] audit: type=1400 audit(1757855634.100:280): avc: denied { create } for pid=614 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.705181][ T370] usb 2-1: device descriptor read/8, error -71 [ 38.752551][ T24] audit: type=1400 audit(1757855634.180:281): avc: denied { create } for pid=614 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.812275][ T24] audit: type=1400 audit(1757855634.240:282): avc: denied { ioctl } for pid=623 comm="syz.1.73" path="socket:[15979]" dev="sockfs" ino=15979 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.858198][ T24] audit: type=1400 audit(1757855634.290:283): avc: denied { mount } for pid=625 comm="syz.0.72" name="/" dev="configfs" ino=9337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 38.937410][ T24] audit: type=1400 audit(1757855634.370:284): avc: denied { watch watch_reads } for pid=625 comm="syz.0.72" path="/16" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.983252][ T633] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.996669][ T633] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 39.008738][ T633] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2815: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 39.025542][ T633] EXT4-fs (loop5): 1 truncate cleaned up [ 39.034472][ T633] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,sb=0x0000000000000006,jqfmt=vfsv1,,errors=continue [ 39.449048][ T640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.470998][ T640] EXT4-fs (loop1): 1 truncate cleaned up [ 39.477145][ T640] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue [ 39.729496][ T653] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.736877][ T653] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 39.746029][ T653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 39.754723][ T653] System zones: 2-12, 7-7 [ 39.760100][ T653] EXT4-fs (loop0): 1 truncate cleaned up [ 39.766416][ T653] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nojournal_checksum,jqfmt=vfsold,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 39.787191][ T657] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 39.800098][ T657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=657 comm=syz.2.82 [ 40.178346][ T671] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 40.260310][ T685] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 40.269575][ T685] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.660074][ T703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 41.242747][ T712] overlayfs: unrecognized mount option "verity=require" or missing value [ 41.335090][ T717] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.349405][ T717] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 41.358005][ T717] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.96: invalid indirect mapped block 2683928664 (level 1) [ 41.377401][ T712] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 41.389760][ T717] EXT4-fs (loop2): Remounting filesystem read-only [ 41.396685][ T717] EXT4-fs (loop2): 1 truncate cleaned up [ 41.413018][ T717] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=." [ 41.430314][ T717] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 41.513886][ T740] incfs_lookup_dentry err:-14 [ 41.522521][ T740] incfs: Can't find or create .incomplete dir in ./file0 [ 41.530388][ T740] incfs: mount failed -14 [ 41.744305][ T330] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 41.753839][ T754] SELinux: policydb version 250975555 does not match my version range 15-33 [ 41.762917][ T754] SELinux: failed to load policy [ 41.914272][ T360] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 42.104279][ T330] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 42.112514][ T330] usb 1-1: config 1 has no interface number 0 [ 42.118678][ T330] usb 1-1: config 1 interface 105 has no altsetting 0 [ 42.284291][ T360] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 42.292593][ T330] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 42.301681][ T360] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.312007][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.321137][ T330] usb 1-1: Product: syz [ 42.325379][ T360] usb 6-1: config 0 has no interface number 0 [ 42.331508][ T330] usb 1-1: Manufacturer: syz [ 42.336460][ T360] usb 6-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.349613][ T330] usb 1-1: SerialNumber: syz [ 42.355307][ T360] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 42.364459][ T360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.373638][ T360] usb 6-1: config 0 descriptor?? [ 42.415210][ T360] usbhid 6-1:0.32: couldn't find an input interrupt endpoint [ 42.431716][ T24] kauditd_printk_skb: 117 callbacks suppressed [ 42.431728][ T24] audit: type=1400 audit(1757855637.860:402): avc: denied { bind } for pid=765 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.458823][ T24] audit: type=1400 audit(1757855637.860:403): avc: denied { write } for pid=765 comm="syz.2.114" name="ppp" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.507312][ T769] EXT4-fs (loop1): dax option not supported [ 42.634357][ T330] aqc111: probe of 1-1:1.105 failed with error -71 [ 42.653146][ T330] usb 1-1: USB disconnect, device number 4 [ 42.707593][ T778] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 42.707593][ T778] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.707593][ T778] [ 42.725858][ T778] EXT4-fs (loop0): Ignoring removed oldalloc option [ 42.732595][ T778] EXT4-fs (loop0): Ignoring removed bh option [ 42.741384][ T24] audit: type=1400 audit(1757855638.170:404): avc: denied { setopt } for pid=768 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.749442][ T778] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,noacl,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,sysvgroups,,errors=continue [ 42.781005][ T24] audit: type=1400 audit(1757855638.180:405): avc: denied { bind } for pid=768 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.966904][ T24] audit: type=1400 audit(1757855638.400:406): avc: denied { read } for pid=752 comm="syz.5.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.022538][ T330] usb 6-1: USB disconnect, device number 2 [ 43.035208][ T787] capability: warning: `syz.5.118' uses deprecated v2 capabilities in a way that may be insecure [ 43.047210][ T787] capability: warning: `syz.5.118' uses 32-bit capabilities (legacy support in use) [ 43.127078][ T790] device wireguard0 entered promiscuous mode [ 43.175711][ T24] audit: type=1400 audit(1757855638.610:407): avc: denied { bind } for pid=788 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.230563][ T24] audit: type=1400 audit(1757855638.610:408): avc: denied { listen } for pid=788 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.251912][ T24] audit: type=1400 audit(1757855638.630:409): avc: denied { accept } for pid=788 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.314886][ T24] audit: type=1400 audit(1757855638.630:410): avc: denied { read } for pid=788 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.736418][ T791] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 43.744288][ T791] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 43.752540][ T791] F2FS-fs (loop5): Unrecognized mount option "0xffffffffffffffffdU)BqrwRw+uYm=lɸ)> "*Q0Wb;3O/Lm"h \.X 5" or missing value [ 43.784231][ T323] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 43.950706][ T24] audit: type=1400 audit(1757855639.380:411): avc: denied { read } for pid=789 comm="syz.5.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.164300][ T323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.174924][ T323] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.184282][ T370] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.224755][ T814] FAT-fs (loop5): Unrecognized mount option "ns=nostale_ro" or missing value [ 44.334306][ T323] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.343443][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.351514][ T323] usb 4-1: Product: syz [ 44.356060][ T323] usb 4-1: Manufacturer: syz [ 44.360751][ T323] usb 4-1: SerialNumber: syz [ 44.544295][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.555341][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.565449][ T370] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 44.574532][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.583677][ T370] usb 1-1: config 0 descriptor?? [ 44.694291][ T323] usb 4-1: 0:2 : does not exist [ 44.738547][ T323] usb 4-1: USB disconnect, device number 3 [ 44.944697][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.998628][ T823] netlink: 164 bytes leftover after parsing attributes in process `syz.2.130'. [ 45.012719][ T823] netlink: 164 bytes leftover after parsing attributes in process `syz.2.130'. [ 45.025101][ T823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.130'. [ 45.055995][ T370] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 45.284295][ T313] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 45.424488][ T370] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 45.446866][ T845] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 45.470130][ T845] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.480879][ T370] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 45.488738][ T370] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -32 [ 45.531786][ T296] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 45.546198][ T296] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 45.561432][ T296] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.561432][ T296] [ 45.584711][ T370] usb 1-1: USB disconnect, device number 5 [ 45.744450][ T313] usb 6-1: unable to get BOS descriptor or descriptor too short [ 45.835420][ T313] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 45.844864][ T313] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.857100][ T313] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 45.867617][ T313] usb 6-1: config 1 has no interface number 1 [ 45.874105][ T313] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 45.889534][ T313] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 149, changing to 7 [ 46.044278][ T864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 46.106899][ T866] EXT4-fs (loop2): Ignoring removed nobh option [ 46.128066][ T866] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 46.136818][ T866] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #3: comm syz.2.140: mark_inode_dirty error [ 46.150451][ T866] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 46.159192][ T866] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.140: mark_inode_dirty error [ 46.171429][ T866] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.140: Failed to acquire dquot type 0 [ 46.183682][ T866] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 46.192255][ T866] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #16: comm syz.2.140: mark_inode_dirty error [ 46.204374][ T866] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 46.212887][ T866] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.140: mark_inode_dirty error [ 46.224423][ T866] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 46.233551][ T866] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 46.242205][ T313] usb 6-1: string descriptor 0 read error: -22 [ 46.242299][ T866] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 46.248675][ T313] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.248688][ T313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.274922][ T866] EXT4-fs error (device loop2): ext4_truncate:4390: inode #16: comm syz.2.140: mark_inode_dirty error [ 46.286151][ T866] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 46.294711][ T866] EXT4-fs (loop2): 1 truncate cleaned up [ 46.296024][ T313] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 46.300385][ T866] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue [ 46.300482][ T866] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.322418][ T313] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 46.350953][ T313] usb 6-1: 2:1 : sample bitwidth 76 in over sample bytes 2 [ 46.444065][ T873] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 46.452556][ T873] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 46.461640][ T873] EXT4-fs (loop0): 1 truncate cleaned up [ 46.467418][ T873] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 46.496482][ T876] EXT4-fs error (device loop2): ext4_lookup:1830: inode #15: comm syz.2.140: iget: bad i_size value: 360287970189639690 [ 46.551092][ T313] usb 6-1: USB disconnect, device number 3 [ 46.814253][ T611] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.900400][ T886] F2FS-fs (loop3): invalid crc value [ 46.950454][ T886] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.007414][ T886] F2FS-fs (loop3): Start checkpoint disabled! [ 47.014779][ T886] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 47.094222][ T611] usb 2-1: Using ep0 maxpacket: 32 [ 47.214295][ T611] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.233078][ T611] usb 2-1: config 0 has no interface number 0 [ 47.344919][ T896] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.352105][ T896] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.360699][ T896] device bridge_slave_0 entered promiscuous mode [ 47.370824][ T896] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.378297][ T896] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.386118][ T896] device bridge_slave_1 entered promiscuous mode [ 47.404281][ T611] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.404940][ T361] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 47.423634][ T611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.454912][ T901] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 47.464004][ T901] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.474613][ T611] usb 2-1: Product: syz [ 47.478886][ T611] usb 2-1: Manufacturer: syz [ 47.481678][ T896] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.483545][ T611] usb 2-1: SerialNumber: syz [ 47.490706][ T896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.490792][ T896] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.509920][ T896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.521345][ T611] usb 2-1: config 0 descriptor?? [ 47.565877][ T896] device veth0_vlan entered promiscuous mode [ 47.579813][ T896] device veth1_macvtap entered promiscuous mode [ 47.599268][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.609534][ T611] smsc95xx v2.0.0 [ 47.610504][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 47.610520][ T24] audit: type=1400 audit(1757855643.040:423): avc: denied { mounton } for pid=896 comm="syz-executor" path="/root/syzkaller.L3dKyj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.616655][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.655438][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.672962][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.681582][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.693564][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.702060][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.710639][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.719193][ T361] usb 6-1: Using ep0 maxpacket: 32 [ 47.719469][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.732786][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.740862][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.748699][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.768432][ T914] FAULT_INJECTION: forcing a failure. [ 47.768432][ T914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.782271][ T914] CPU: 0 PID: 914 Comm: syz.6.148 Not tainted syzkaller #0 [ 47.789861][ T914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 47.800140][ T914] Call Trace: [ 47.803438][ T914] __dump_stack+0x21/0x24 [ 47.807780][ T914] dump_stack_lvl+0x169/0x1d8 [ 47.812679][ T914] ? show_regs_print_info+0x18/0x18 [ 47.817890][ T914] ? stack_trace_save+0x98/0xe0 [ 47.822748][ T914] dump_stack+0x15/0x1c [ 47.826918][ T914] should_fail+0x3c1/0x510 [ 47.831444][ T914] should_fail_usercopy+0x1a/0x20 [ 47.836478][ T914] _copy_from_user+0x20/0xd0 [ 47.841069][ T914] __copy_msghdr_from_user+0xaf/0x5e0 [ 47.846442][ T914] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 47.851725][ T914] ? __fsnotify_parent+0x5f5/0x6c0 [ 47.856942][ T914] ___sys_sendmsg+0x156/0x260 [ 47.861705][ T914] ? __sys_sendmsg+0x250/0x250 [ 47.866498][ T914] ? rw_verify_area+0x1c0/0x360 [ 47.871375][ T914] ? __fdget+0x1a1/0x230 [ 47.875660][ T914] __x64_sys_sendmsg+0x1e2/0x2a0 [ 47.880593][ T914] ? fput+0x1a/0x20 [ 47.884401][ T914] ? ___sys_sendmsg+0x260/0x260 [ 47.889251][ T914] ? debug_smp_processor_id+0x17/0x20 [ 47.894613][ T914] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 47.900672][ T914] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 47.906385][ T914] do_syscall_64+0x31/0x40 [ 47.910799][ T914] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.916689][ T914] RIP: 0033:0x7f2d4ed7bba9 [ 47.921102][ T914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.940703][ T914] RSP: 002b:00007f2d4d7e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.949116][ T914] RAX: ffffffffffffffda RBX: 00007f2d4efc2fa0 RCX: 00007f2d4ed7bba9 [ 47.957309][ T914] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 47.965398][ T914] RBP: 00007f2d4d7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 47.973462][ T914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.981438][ T914] R13: 00007f2d4efc3038 R14: 00007f2d4efc2fa0 R15: 00007fff466994c8 [ 48.044274][ T361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.055451][ T361] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.064674][ T361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.082983][ T361] usb 6-1: config 0 descriptor?? [ 48.115227][ T7] device bridge_slave_1 left promiscuous mode [ 48.121574][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.130452][ T361] hub 6-1:0.0: USB hub found [ 48.136061][ T7] device bridge_slave_0 left promiscuous mode [ 48.142553][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.151220][ T7] device veth1_macvtap left promiscuous mode [ 48.167894][ T918] F2FS-fs (loop6): Unrecognized mount option "usrquota=" or missing value [ 48.204627][ T884] udc-core: couldn't find an available UDC or it's busy [ 48.211707][ T884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.296198][ T24] audit: type=1400 audit(1757855643.730:424): avc: denied { connect } for pid=922 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.328944][ T918] netlink: 96 bytes leftover after parsing attributes in process `syz.6.153'. [ 48.339190][ T918] sch_fq: defrate 4294967295 ignored. [ 48.348141][ T24] audit: type=1400 audit(1757855643.780:425): avc: denied { bind } for pid=916 comm="syz.6.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.404304][ T361] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 48.526293][ T936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.156'. [ 48.541234][ T24] audit: type=1326 audit(1757855643.970:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.6.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 48.568030][ T24] audit: type=1326 audit(1757855644.000:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.6.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 48.699710][ T24] audit: type=1326 audit(1757855644.000:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.6.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 48.724574][ T24] audit: type=1326 audit(1757855644.000:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.6.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 49.000355][ T940] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 49.009868][ T940] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.100307][ T940] overlayfs: workdir and upperdir must be separate subtrees [ 49.179743][ T24] audit: type=1326 audit(1757855644.000:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.6.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 49.754829][ T611] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 49.774206][ T611] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 49.785119][ T24] audit: type=1326 audit(1757855644.000:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.6.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 49.808739][ T611] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 49.831035][ T24] audit: type=1326 audit(1757855644.000:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.6.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 49.864310][ T611] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 49.879048][ T611] usb 2-1: USB disconnect, device number 6 [ 49.894354][ T361] usbhid 6-1:0.0: can't add hid device: -71 [ 49.901258][ T361] usbhid: probe of 6-1:0.0 failed with error -71 [ 49.934966][ T361] usb 6-1: USB disconnect, device number 4 [ 50.467068][ T958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 50.555356][ T958] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.161: bg 0: block 234: padding at end of block bitmap is not set [ 50.571258][ T958] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 50.583838][ T958] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.583838][ T958] [ 50.837175][ T959] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 50.846487][ T959] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.132827][ T977] syz.1.165[977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.132890][ T977] syz.1.165[977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.135303][ T976] fuse: Bad value for 'fd' [ 51.324953][ T987] FAT-fs (loop3): Unrecognized mount option "noeumtail=0" or missing value [ 51.347910][ T977] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 51.367999][ T977] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.379220][ T977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.422088][ T977] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 51.429581][ T977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.501600][ T1004] device erspan0 entered promiscuous mode [ 51.554397][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 51.794328][ T489] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 51.804368][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 51.950637][ T1009] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.960230][ T1009] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.994950][ T1009] overlayfs: workdir and upperdir must be separate subtrees [ 52.134842][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 52.157557][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.198285][ T53] usb 6-1: Product: syz [ 52.218108][ T53] usb 6-1: Manufacturer: syz [ 52.222910][ T53] usb 6-1: SerialNumber: syz [ 52.324315][ T489] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 52.353215][ T489] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 52.364275][ T489] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 52.378158][ T489] usb 4-1: config 8 has no interface number 0 [ 52.384477][ T489] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 52.397401][ T489] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.574303][ T489] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 52.590640][ T489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.599445][ T489] usb 4-1: Product: syz [ 52.604466][ T489] usb 4-1: Manufacturer: syz [ 52.609359][ T489] usb 4-1: SerialNumber: syz [ 52.636199][ T1028] SELinux: policydb version 250975555 does not match my version range 15-33 [ 52.653145][ T1028] SELinux: failed to load policy [ 52.661556][ T53] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 52.734199][ T360] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.869353][ T53] usb 6-1: USB disconnect, device number 5 [ 52.953067][ T53] usblp0: removed [ 52.995568][ T489] usb 4-1: USB disconnect, device number 4 [ 53.324516][ T1036] netlink: 'syz.6.178': attribute type 13 has an invalid length. [ 53.332599][ T1036] netlink: 'syz.6.178': attribute type 17 has an invalid length. [ 53.364274][ T360] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 53.372551][ T360] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 53.385536][ T360] usb 2-1: config 0 has no interface number 1 [ 53.391674][ T360] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 53.405305][ T360] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 53.429651][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.438242][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.446795][ T1041] EXT4-fs (loop5): dax option not supported [ 53.452290][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 53.463067][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.479224][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.489390][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.497820][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.506459][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.609892][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 53.609905][ T24] audit: type=1326 audit(1757855649.040:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1049 comm="syz.6.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 53.640279][ T24] audit: type=1326 audit(1757855649.050:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1049 comm="syz.6.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 53.664069][ T24] audit: type=1326 audit(1757855649.050:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1049 comm="syz.6.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 53.688228][ T1051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.692762][ T360] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 53.707648][ T24] audit: type=1326 audit(1757855649.050:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1049 comm="syz.6.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4ed7bba9 code=0x7ffc0000 [ 53.739110][ T1051] EXT4-fs (loop3): 1 truncate cleaned up [ 53.750241][ T1051] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 53.768346][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.776742][ T1064] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.831164][ T1064] EXT4-fs (loop5): 1 truncate cleaned up [ 53.837092][ T1064] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 53.875870][ T360] usb 2-1: Product: syz [ 53.969726][ T360] usb 2-1: Manufacturer: syz [ 53.978102][ T360] usb 2-1: SerialNumber: syz [ 53.999210][ T360] usb 2-1: config 0 descriptor?? [ 54.046786][ T360] usb-storage 2-1:0.127: USB Mass Storage device detected [ 54.081356][ T360] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 54.121297][ T360] usb-storage 2-1:0.0: USB Mass Storage device detected [ 54.134498][ T330] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 54.168134][ T360] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 54.225013][ T360] usb 2-1: USB disconnect, device number 7 [ 54.447197][ T489] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 55.034384][ T489] usb 4-1: Using ep0 maxpacket: 32 [ 55.174589][ T489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.234727][ T1084] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 55.244082][ T1084] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.372282][ T1090] overlayfs: workdir and upperdir must be separate subtrees [ 55.386485][ T489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.649842][ T1093] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.660610][ T489] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 55.671111][ T489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.684589][ T489] usb 4-1: config 0 descriptor?? [ 55.834844][ T330] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 55.843576][ T1089] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.188: inode #1: comm syz.5.188: iget: illegal inode # [ 55.843919][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.857386][ T1089] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.188: error while reading EA inode 1 err=-117 [ 55.867945][ T330] usb 1-1: config 0 descriptor?? [ 55.883258][ T1089] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.188: inode #1: comm syz.5.188: iget: illegal inode # [ 55.897100][ T1089] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.188: error while reading EA inode 1 err=-117 [ 55.910311][ T1089] EXT4-fs (loop5): 1 orphan inode deleted [ 55.919770][ T1089] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue [ 56.228610][ T24] audit: type=1400 audit(1757855651.660:460): avc: denied { create } for pid=1088 comm="syz.5.188" dev="anon_inodefs" ino=17934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.251118][ T24] audit: type=1400 audit(1757855651.660:461): avc: denied { ioctl } for pid=1088 comm="syz.5.188" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17934 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.294393][ T24] audit: type=1400 audit(1757855651.710:462): avc: denied { setopt } for pid=1091 comm="syz.6.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.322645][ T24] audit: type=1400 audit(1757855651.720:463): avc: denied { ioctl } for pid=1100 comm="syz.1.190" path="socket:[18939]" dev="sockfs" ino=18939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.350000][ T24] audit: type=1400 audit(1757855651.720:464): avc: denied { ioctl } for pid=1100 comm="syz.1.190" path="socket:[18943]" dev="sockfs" ino=18943 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.375294][ T24] audit: type=1400 audit(1757855651.720:465): avc: denied { ioctl } for pid=1100 comm="syz.1.190" path="socket:[18944]" dev="sockfs" ino=18944 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.412207][ T1103] x_tables: duplicate underflow at hook 1 [ 56.482680][ T483] EXT4-fs error (device loop5): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 56.506544][ T483] ------------[ cut here ]------------ [ 56.512121][ T483] kernel BUG at fs/namei.c:2786! [ 56.517942][ T483] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 56.524038][ T483] CPU: 1 PID: 483 Comm: syz-executor Not tainted syzkaller #0 [ 56.531537][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 56.541641][ T483] RIP: 0010:may_delete+0x7b1/0x7c0 [ 56.546769][ T483] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 10 24 f5 ff e9 d0 fd ff ff e8 d6 36 bb ff 0f 0b e8 cf 36 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 56.566404][ T483] RSP: 0018:ffffc90000c07ca0 EFLAGS: 00010293 [ 56.572479][ T483] RAX: ffffffff81a86f41 RBX: ffff88810ff4f880 RCX: ffff8881136f93c0 [ 56.580462][ T483] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 56.588435][ T483] RBP: ffffc90000c07d20 R08: 0000000000000004 R09: 0000000000000003 [ 56.596403][ T483] R10: fffff52000180f78 R11: 1ffff92000180f78 R12: ffff88812c5f6018 [ 56.604461][ T483] R13: 1ffff11021fe9f10 R14: ffff88810ff4f898 R15: ffff88810ff659c0 [ 56.612435][ T483] FS: 000055558b9cd500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.621704][ T483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.628371][ T483] CR2: 000055558b9f8528 CR3: 00000001213db000 CR4: 00000000003526a0 [ 56.636429][ T483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.644498][ T483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.652487][ T483] Call Trace: [ 56.655782][ T483] ? __kasan_check_write+0x14/0x20 [ 56.660905][ T483] vfs_rmdir+0x2c/0x3e0 [ 56.665077][ T483] incfs_kill_sb+0xfe/0x210 [ 56.669589][ T483] deactivate_locked_super+0xa0/0x100 [ 56.674967][ T483] deactivate_super+0xaf/0xe0 [ 56.679736][ T483] cleanup_mnt+0x446/0x500 [ 56.684240][ T483] __cleanup_mnt+0x19/0x20 [ 56.688654][ T483] task_work_run+0x127/0x190 [ 56.693246][ T483] exit_to_user_mode_loop+0xcb/0xe0 [ 56.698478][ T483] exit_to_user_mode_prepare+0x76/0xa0 [ 56.703949][ T483] syscall_exit_to_user_mode+0x1d/0x40 [ 56.709416][ T483] do_syscall_64+0x3d/0x40 [ 56.713834][ T483] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.719849][ T483] RIP: 0033:0x7fd318e21ed7 [ 56.724469][ T483] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 56.744253][ T483] RSP: 002b:00007ffd44d6be98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 56.752686][ T483] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd318e21ed7 [ 56.760650][ T483] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd44d6bf50 [ 56.768707][ T483] RBP: 00007ffd44d6bf50 R08: 0000000000000000 R09: 0000000000000000 [ 56.776672][ T483] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd44d6d040 [ 56.784706][ T483] R13: 00007fd318ea3c05 R14: 000000000000dc89 R15: 00007ffd44d6e110 [ 56.792701][ T483] Modules linked in: [ 56.803914][ T483] ---[ end trace 7ae631d1c038058c ]--- [ 56.809717][ T483] RIP: 0010:may_delete+0x7b1/0x7c0 [ 56.816214][ T330] smartjoyplus 0003:0925:8866.0003: item fetching failed at offset 5/7 [ 56.818055][ T483] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 10 24 f5 ff e9 d0 fd ff ff e8 d6 36 bb ff 0f 0b e8 cf 36 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 56.824913][ T330] smartjoyplus 0003:0925:8866.0003: parse failed [ 56.844602][ T483] RSP: 0018:ffffc90000c07ca0 EFLAGS: 00010293 [ 56.851066][ T330] smartjoyplus: probe of 0003:0925:8866.0003 failed with error -22 [ 56.857606][ T483] RAX: ffffffff81a86f41 RBX: ffff88810ff4f880 RCX: ffff8881136f93c0 [ 56.874578][ T483] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 56.884830][ T483] RBP: ffffc90000c07d20 R08: 0000000000000004 R09: 0000000000000003 [ 56.892904][ T483] R10: fffff52000180f78 R11: 1ffff92000180f78 R12: ffff88812c5f6018 [ 56.900972][ T483] R13: 1ffff11021fe9f10 R14: ffff88810ff4f898 R15: ffff88810ff659c0 [ 56.909010][ T483] FS: 000055558b9cd500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 56.918131][ T483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.925028][ T483] CR2: 00007f2d4543b000 CR3: 00000001213db000 CR4: 00000000003506b0 [ 56.933115][ T483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.941263][ T483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.945592][ T1109] EXT4-fs (loop6): Ignoring removed nobh option [ 56.949284][ T483] Kernel panic - not syncing: Fatal exception [ 56.961829][ T483] Kernel Offset: disabled [ 56.966201][ T483] Rebooting in 86400 seconds..