last executing test programs: 1m47.263967607s ago: executing program 1 (id=2): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) (async) r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x5, 0x6, 0x2, 0x4}]}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095", @ANYRES8=r0, @ANYRES64=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) (async, rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) (rerun: 32) syz_usb_connect(0x5, 0x493, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x36, 0xd, 0x9a, 0x40, 0x1bc7, 0x1045, 0x4bbb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x481, 0x4, 0x9a, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x54, 0xa, 0xd, 0xff, 0xba, 0x11, 0x94, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x3}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x1, "aa1ff31b56f4"}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x1, "5ad4"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x4, 0x22, 0x9}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x81, 0x3e, 0x64}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0xf, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x4, 0x4}, @generic={0xf7, 0x8, "1d18bcc0382efaab5e742d6059714182d45799a5b89dd276eb463049fea5f6fa90f265bdfe912391dc5fae7b00db985daf3d592444a9bc4b9391710f1a434b9b51da980f77af56358cdb71eabc5f8b7a1ccfc0c128d538efa5376f8b70c92a9df188f42d1f691a2b5e004f8b57f9b55a28477cbb75f5d912cd3f55e3d64d7bf2d47bff23d666431cdf5418baa70d08409d9e3fbab4223e8b5b10b2c427eb962720b00c435beb7539f58da51c6266596ab90a9e2eb1d7630eb1fdf47722140a5b373c55cc063713beca45d48da1d4895669e88004996f2df1977a56b6e9e5d98d12dee09444517c1281d586a58a5e84efbcb2ed769d"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x2, 0x35, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x800}]}}, {{0x9, 0x5, 0xbe5206031e088ac1, 0x4, 0x220, 0x0, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5b, 0xe000}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x3, 0xde, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xa, 0x9, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x81, 0x4}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xff, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x1000}]}}, {{0x9, 0x5, 0xe, 0x11, 0x400, 0x3, 0xab, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0xfff5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x3, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0xc2, 0x0, 0x3, 0x1, 0x90, 0xa1, 0x4, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x1, 0x7, "0970fd6177565e3e46"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff9, 0x9, 0x4, "7cba4ec258"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x9, "e4bf"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xa, 0x4, 0x5, 0x20, "2854dbfeeef11f3da9"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xc6, 0x2, 0x5, 0x9, "97121fb3a6"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0xfff7, 0x10, "30206a0aaf84"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x80, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}, @generic={0x94, 0x482a45f537af6122, "0d9adbde6404dad1c704fe033d9112486102f3132a380b3c768a654c6c91e78d085f917101411454f3bbe6cbfc8f37f318bb243f6afad39e8ba2e921d0438f2f5b0d548b8fa971352e0d8c4c8018338b4aa621fc147f257f585f04493a6dff58df58530d4ab62326b97eff6ec01c7f9b3db6c50dc592b5d384f7d163511d6deb6516defb55dea7f62e4415160015d91c78f0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x6, 0xfc}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x84, 0x7a, 0x3}}]}}, {{0x9, 0x4, 0xc4, 0x44, 0x3, 0x5b, 0x18, 0xd3, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0xf0a6, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x1, 0x4, 0x401, 0x0, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x5, 0x1, [0x1], 0xd}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x1, "58c646653ecb"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x9, 0x2, "3b85c260"}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x7, 'cG'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x1, 0x0, 0x1, 0x7, 0x2d}]}, @generic={0xf1, 0x31, "6b3bcdb3d2e0a837fda782dd15666c39f09054e6198c99229512d71c637a833db3c51e1b578158a225c5d74267e2aa2bba5dc1b780d78d1c7ad9911c39b17662e96f9e4d4d316b1f7b0cfde94f859570692c635f1c66a028550a5739e906a3e4fe114c9fced0cd6d5212d6868e1fb5bd8822f240ba3741d2bc27aa680abe92f0d6b4506a2f5bc33d1c14c8caed31af856af23c4447848ffe67e6b4bed33791f00ed72d2803985c2cf76cabe7b36732cc434cca52c6894aeb2ef9412051fc76c58e6859a98f53dc1663266409e0e798ce7bb07de423bb3eafe427476ea0bd7afce4e42ce54d4b84b789408147657a65"}], [{{0x9, 0x5, 0xf, 0x3, 0x400, 0x2, 0xf5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xfffa}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x81, 0x80, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x3, 0x9}]}}, {{0x9, 0x5, 0x8, 0x2, 0x220, 0x7, 0x3d}}]}}, {{0x9, 0x4, 0xd, 0x10, 0x1, 0xff, 0xff, 0x60, 0x1, [@hid_hid={0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0xfeb}}], [{{0x9, 0x5, 0x7, 0xc, 0x10, 0x7, 0x1, 0x3}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x8, 0x3, 0x80, 0x20, 0x7f}, 0x55, &(0x7f0000000600)={0x5, 0xf, 0x55, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7b, 0x6, 0x5, 0xf, 0x2, [0xc0c0, 0xfebff0, 0xc0f0, 0x30, 0xc14f, 0xff0f]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8f, 0x51, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0xf6, 0x5, 0x20, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x9, 0xf00f, 0x6, [0x3fc0]}]}, 0x8, [{0x43, &(0x7f0000000680)=@string={0x43, 0x3, "233867398cfc1d9965aeaa56ca0ab12504f1bcac2406d0cd9d6a2068afa26d5d74c7b408091f9cefdb207a26401b3d5b4f1b46dd75e0db3130adb6b39571b3e49e"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x459}}, {0x48, &(0x7f0000000740)=@string={0x48, 0x3, "b28d18c02f53db084910cb5ccc32bec9c92cab1dd417c06e9178e76bb10e070d0e71b8f3a0f8b7e8f69775ec9f5a27a78be96848d23626bfef63af49a593f2b9bb68a798d1fe"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000800)=@lang_id={0x4}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x827}}, {0x29, &(0x7f00000008c0)=@string={0x29, 0x3, "9d2c4deca7129adf157d64eaed724146bce3009b4eb3e4daebb6d24bccf7631a9359ead442c8f6"}}]}) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 1m47.211848029s ago: executing program 1 (id=6): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYBLOB="e07993e594167402679c1545da78213476b8267d184bca77646c1e7fa46cb745bc7d0f64d18a1cdc5b6c31a689b749d2c369527332499e2b12a0e0190dd55e861a128eeb99618692a3812b6928c31373f6a5169a723d911d3af229ea4e897836ae88a2dc50a6bd6bec03878c1a126afceac702e1bf44d14baa30db5de332df9bce6b685fd7d199f6e88da3cd2186cb156783e2756e439c030b2413f1f64a80beb43864fd868af538226a460a9261d075bba2828bfbdecdcbff8163a2aad03611611eb0e460ea570b6b1136ff4f69b095b146", @ANYBLOB="9b6300"/20, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = dup(r0) write$binfmt_elf32(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e0300003800004c05f71e2c881730fb691b96d2d2855600d600000097700000fe03200001000700080007000000000003000000ffffff7f02000000000400000d00000001000080090000000700000084269064e0"], 0x5d) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_pwait(r6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004000014040100000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYBLOB="f7cc6f168a35f83d19c2697b6dbbdb9374", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xfe20, 0x0, 0x41100, 0x0, '\x00', r7, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 1m45.829630049s ago: executing program 1 (id=7): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x5519, &(0x7f00000079c0)="$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") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRESDEC=r3], 0x1, 0x1534, &(0x7f0000002d00)="$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") mkdir(&(0x7f0000000200)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffeffff}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5eda}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffede) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m43.647870504s ago: executing program 1 (id=18): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregs(0x11, r0, 0x4, &(0x7f0000000340)) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x448180, 0x2) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg$unix(r8, &(0x7f0000001680)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/96, 0x60}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000380)}, {&(0x7f00000014c0)=""/181, 0xb5}], 0x6, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x2100, &(0x7f0000001700)={r9, r10+60000000}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) tgkill(r6, r6, 0x21) wait4(r6, 0x0, 0x40000000, 0x0) 1m43.347408877s ago: executing program 1 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="bf46ceed212750e107498056b69b55286000", @ANYBLOB="000126bd7000fddbdf250b0000000a"], 0x28}, 0x1, 0x0, 0x0, 0x24004885}, 0x80) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m43.339187067s ago: executing program 32 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="bf46ceed212750e107498056b69b55286000", @ANYBLOB="000126bd7000fddbdf250b0000000a"], 0x28}, 0x1, 0x0, 0x0, 0x24004885}, 0x80) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 40.147587878s ago: executing program 3 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000400)) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x400) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r4}, 0x8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x7aeccba9bed65b08, &(0x7f0000000040)=0x9, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10}, &(0x7f00000004c0), &(0x7f0000000540)=r8}, 0x20) 39.304643885s ago: executing program 3 (id=410): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x120, 0x12, 0x60d, 0x120, 0x202, 0x260, 0x2e8, 0x2e8, 0x260, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @local, [0xffffff00, 0xff, 0xff000000], [0xffffffff, 0xff, 0x0, 0xff000000], 'dvmrp0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x2f, 0x8, 0x2}, 0x0, 0xf8, 0x238, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x158, 0x207, 0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7496, 0x6, 0x4, 0x0, 0x0, "8d57be07c9a78140aeb72c7a33289378781909e4232f55558b1f0f77b911157c799fc326c6ff23e2a913778151c561e0954443eec2d794e2ba722a995e5db132"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) wait4(r4, 0x0, 0x1000000, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000100)={0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="06", 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x0) 39.18371392s ago: executing program 3 (id=413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x80, @mcast2, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="0c3d7f5cf1e13caeaadac1d9447a7443a1a9b39adc1dd540a4a0973f4406902f586a5e35947034e10aaa1ab1f2a49100d6d38033e3a73cc3872436a5b9c43662203db02d07ca643f81ac5898dfe350d0ab3daa75fd3f5b5e6daf07bded7f177fdf8ab342fe47c4287d8f78cbf2aa7e16f4e6b9cf12d555890e63dc614c114b7962f5f79dfaafeb68f36d14dbb5c753f00f29a5e4295ee82fa8f90064b7c4b8ddeceb04531e5bc01c90b36f67036bde244d", 0xb1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="380000000000000029000000320000000004000300000000fc010000000000000000000000000001ff010000000000000000000000000001780000000000000029000000390000003c0c010500120000fe8000000000000000000000000000aafe880000000000000000000000000001fe880000000000000000000000000101000051db44bd9774eee1000000000001fe880000000000000000000000000001ff010000000000000000000000000001"], 0xb0}}], 0x1, 0x40) listen(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) eventfd2(0x0, 0x1) io_submit(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="280100001700010000000000fedbdf25640101020000000000000000000000000000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000003e000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000bc3b3f8100000000000000aaac1414020000000000002da746fcbf696e4eb6e3cb00000000000000000000000100000a00a020e90000000d85d1290595b3c0d735e2730ee4344f836ae0c96b22c996bdb7d4fedc212703df52a260c7a1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000004000000bb6b6e0000001700000000000800"/128], 0x128}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000500)="542fa6be84eec573696fb9ec10ef421ec64778748eb761d59dad3c746c7b6b40feddd02f38c3ce404d80800c44948c41781c3028c41ac2fd3bd5ab2476736853f0f62be06b383fee72f6603f173b14e90226cf7b5a6bf64378f1a5d5dbbb0b47a96685a43f660909f2f63eec7f8af0375d13a7a7c731472f1fddff899e56f36d913e83caa60bd09e8fd417089687f1be4ccf4a09dac1cf5eabecedc81b6b9352dfb9", 0xa2}, {&(0x7f00000007c0)="2e5a0544a3c57f2d01f31cf66591a40538e2ed7e84035dc1f1df523ad86e41f6a678382276b8cd19dc6269cf2577be27844b2a7b7251fb3877a6ac8f7eb91f15660387aacb020309f36624581c608e50882c1e99d266564eb4f5a0088de982f4b3008063585918e4a65da5de03da817f5d3340e8ad10639fabcc60f307eb190bcdfc6866cd05a7d3a10fdc74e0e87b49e9b572d24e57538c7878337d3ca3555e6ad486349df5e9d4a47a33b82f78d7380418233f43a19dea8c39534561947f831758755af7d12f881db9530cd1e4151d0b58b38809eb24a64f9cc68ce6220a83", 0xe0}, {&(0x7f00000005c0)="7a983ff4803b51a359fa32f0de81c098f27fe441ad7bb050a67b7843093e78931688d9d8cc6e8aee12fb4aec4d4731c5e369f042b68a72ad197edb88652b75c85e9e0477190581145d7fddc84a30c87c89bcfbacf1ebbe22", 0x58}, {&(0x7f00000008c0)="e7662288f10e69522ba59e054e7d359f41e63f7a2122018aac5ca149a3d05171e2a0597ba71d30e4b93b64da65c11fa4811befda66a9629df60ca3177e2d93dfd13ccc1f77f7dc01dc2a31e48fe0187a43fe", 0x52}, {&(0x7f0000000300)="94249d7d9856663af4a8d71950fb11dad3402444e407ff2c1fff93e59753c77bd30f023f559846ce625eedfcc6fe788192f82fb18c2c", 0x36}, {&(0x7f0000000940)="bed52236e5edf622976c3daaf45eb831dd001dd8eb4ca534081530b9339015e3bd0ee6254626b92e25bdb568e98e419a84da9e281e70338e52bffb7dc265b27675f7d2afff82f084bb5eb494d8b63355989f8952565124bc225670cca7c1cfc1c025a2baac5a95a55d28a2cd0d731353e04a83d41bce5751a0c59234e3a90af29dc02ca9358034defb316d9638f1e408b6137f6f4045bec5e780", 0x9a}, {&(0x7f0000000a00)="be400861f5761b8347f92b218ea5ab1ab7153e30609a289427fcdc6130b7d36e0de6a4a552075687f69bea49d73953d1de730d9a378faa02a718029627a770ff7bbf56543627a17c1aabac3a9773f8da", 0x50}], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000275e8b9c7773fe7d8d7124348bfd306c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000030001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f9abcbf010b000"/34], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x10, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) 39.142246962s ago: executing program 3 (id=414): connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(0xee01, 0x0, 0x0) setresgid(0x0, r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="020000091600000025bd7000ffdbdf25010015004e220000030006006c20000002004e24ffffffff000000000000000002001000000004d6000004d5000000000e00180006086300f0ec137ff5789df55d6f0011d6f8676c5a6387b1d8464c8325e7b6cdef0c207e2c339a0605ee77d82f0a8c2f2e70e6889157e9671134522440af6fff057b1eb90cad58cd16824b13f76b87131017b518894e4f78aa32720ffe53de21f821748d0808f8000000000045bff63ef6f6fd6f27daf6b9d7c1eb9699bfddfd27b4ff84f18c75581b87e83ef8396e95c7ff071ffdd9db8958634f554535fce411536a6edc0cc9fd659818995049ee1139648cc768977f5f63d4ab852afff19a641265996be29b13404c9603001424bbde01"], 0xb0}}, 0x24000000) write$P9_RATTACH(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 39.035937667s ago: executing program 3 (id=416): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r0, &(0x7f0000000180)="0000000300000000000000", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 38.593490756s ago: executing program 3 (id=418): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 38.544009598s ago: executing program 33 (id=418): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 5.802042078s ago: executing program 4 (id=639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) connect$pppl2tp(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e6320094", 0x1a7}], 0x1}}], 0x1, 0x400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) 4.479812605s ago: executing program 4 (id=648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mark_victim\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 4.423391638s ago: executing program 4 (id=650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) dup2(r5, r4) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x1000) 3.760175047s ago: executing program 0 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300000000000085000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) close(r8) process_vm_readv(r3, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f00000006c0)=""/85, 0x55}], 0x9, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xed}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) 3.45530487s ago: executing program 4 (id=658): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000980)="a9", 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@grpjquota}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x46d, &(0x7f0000000540)="$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") chdir(&(0x7f0000000400)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.050838138s ago: executing program 5 (id=662): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x50, 0x0, [{@remote}, {@initdev}, {}, {@private}, {@multicast1}]}}) syz_usb_connect(0x3, 0x50, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003305abd40b8222564ae080102030109023e0001ae0510020904b20800020a0006052406000085240000000d240f010200000008000180091524120800a317a88b0404000000"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 2.940339503s ago: executing program 6 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close(r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) (async, rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff29, r5}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x23, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x62}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x7fff, 0x61, &(0x7f00000006c0)=""/97, 0x40f00, 0x64, '\x00', r3, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x5, 0x2, 0x7}, 0x10, r5, r2, 0x2, 0x0, &(0x7f00000008c0)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x4, 0x2, 0x7}], 0x10, 0x8}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r8, 0x111, 0x32, 0x0, &(0x7f0000000380)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x18) 2.879320185s ago: executing program 6 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) pipe(&(0x7f0000000380)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) 2.878571405s ago: executing program 0 (id=666): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xffffffe0}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable_val={'init_itable', 0x3d, 0xb5}}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ptrace$setsig(0x4203, r1, 0x7, &(0x7f0000000300)={0x21, 0x7, 0x8}) 2.7698677s ago: executing program 6 (id=667): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r5, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00bfbe22a3"], 0x48) openat(r0, &(0x7f0000000000)='./file0\x00', 0x24c00, 0x12) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r10}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x12, 0x0, 0x0) io_submit(r9, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) 2.567517758s ago: executing program 4 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000980), 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000000), &(0x7f0000000100)=r2}, 0x20) pipe2$9p(&(0x7f0000001900), 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2.53902784s ago: executing program 5 (id=669): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="4000000000000000000100000000006d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 2.451808524s ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f0000000340), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x100, 0x3, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb46}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaab20d1af5ffffff81"], 0x0) 2.448721274s ago: executing program 0 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r1, 0x4, 0x9, 0x9, 0xdad9, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x80, 0x40, 0x884, 0xd}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x55) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000440)='.\x00', 0x12000021) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r10 = syz_open_procfs(r5, &(0x7f0000000240)='net/ip6_tables_names\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r10, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1000004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112180000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) 2.431157605s ago: executing program 6 (id=672): socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) syz_kvm_add_vcpu$x86(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) recvmmsg(r1, &(0x7f00000078c0)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000880)=[{&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f0000000640)=""/65, 0x41}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f00000006c0)=""/135, 0x87}, {&(0x7f0000000780)=""/214, 0xd6}], 0x6, &(0x7f0000000900)=""/168, 0xa8}, 0x3}, {{&(0x7f00000009c0)=@pppol2tp, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000a40)=""/250, 0xfa}, {&(0x7f0000000b40)=""/70, 0x46}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/144, 0x90}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000001c80)=""/65, 0x41}, {&(0x7f0000001d00)=""/197, 0xc5}, {&(0x7f0000001e00)=""/134, 0x86}, {&(0x7f00000003c0)=""/2, 0x2}], 0x9, &(0x7f0000001f80)=""/48, 0x30}, 0x8}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001fc0)=""/120, 0x78}, {&(0x7f0000002040)=""/200, 0xc8}], 0x2, &(0x7f0000002180)=""/160, 0xa0}, 0xfffffffa}, {{&(0x7f0000002240)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000044c0)=[{&(0x7f00000022c0)=""/76, 0x4c}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/7, 0x7}, {&(0x7f0000003400)=""/125, 0x7d}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)}], 0x7}}, {{&(0x7f0000004540)=@rc={0x1f, @none}, 0x80, &(0x7f0000005a40)=[{&(0x7f00000045c0)=""/246, 0xf6}, {&(0x7f00000046c0)=""/167, 0xa7}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/109, 0x6d}, {&(0x7f0000005800)=""/142, 0x8e}, {&(0x7f00000058c0)=""/88, 0x58}, {&(0x7f0000005940)=""/239, 0xef}], 0x7, &(0x7f0000005ac0)=""/125, 0x7d}}, {{&(0x7f0000005b40)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005bc0)=""/137, 0x89}], 0x1, &(0x7f0000005cc0)=""/160, 0xa0}, 0xc}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000005d80)=""/244, 0xf4}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005ec0)=""/67, 0x43}], 0x1, &(0x7f0000005f80)=""/189, 0xbd}, 0x7ddec4ba}, {{&(0x7f0000006040)=@qipcrtr, 0x80, &(0x7f00000062c0)=[{&(0x7f00000060c0)=""/203, 0xcb}, {&(0x7f00000061c0)=""/46, 0x2e}, {&(0x7f0000006200)=""/96, 0x60}, {&(0x7f0000006280)=""/31, 0x1f}], 0x4, &(0x7f0000006300)=""/99, 0x63}, 0x6}, {{&(0x7f0000006380)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000007780)=[{&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/241, 0xf1}, {&(0x7f0000007500)=""/148, 0x94}, {&(0x7f00000075c0)=""/98, 0x62}, {&(0x7f0000007640)=""/10, 0xa}, {&(0x7f0000007680)=""/230, 0xe6}], 0x6, &(0x7f0000007800)=""/175, 0xaf}, 0x7b}], 0xa, 0x3, &(0x7f0000007b40)={0x77359400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000050000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000040)='%ps \x00'}, 0xfffffffffffffeab) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0xf}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) r6 = dup2(r5, r5) write(r6, &(0x7f0000000300)='O', 0x1) 2.162261696s ago: executing program 6 (id=673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r3, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) 1.781951562s ago: executing program 2 (id=674): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 1.699844026s ago: executing program 2 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x1, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xe4}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0xfffe, 0x6, 0x6b7, 0x1ff, 0x80000080, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x4c96, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x80008, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x5, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x280, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0xb, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x2000008, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa255, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x208, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x40000000, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x48, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0xffffffffffffffff, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.678369087s ago: executing program 2 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000180)="892950e240", 0x5}, {0x0}, {&(0x7f0000000300)="87fb74cf4d67ad", 0x7}], 0x4}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c0002800500010000000000080007"], 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x44080) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0107000000000000000067"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0) unshare(0x22020600) (async, rerun: 32) getrlimit(0xb, &(0x7f0000000440)) (rerun: 32) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 1.651048648s ago: executing program 5 (id=677): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESOCT=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010102, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32], 0x144}}, 0x18) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r11 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r11, &(0x7f0000000140), 0x0, 0x400006, 0x3) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x220, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xe}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xb}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40081}, 0x8001) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r10, 0x0, 0x70bd31, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x80, 0x2000067}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x93}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004841) r13 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r13, 0x0, 0x0) 1.538571213s ago: executing program 2 (id=678): rt_sigpending(&(0x7f0000000000), 0x8) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffffff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x32}, 0x0, 0x250, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x8, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit2={{0x150}, {'pim6reg\x00', {0x46, 0x47, 0x4b, 0x2, 0xfbf, 0xff4, 0x80000000, 0x20, 0x20}, {0xb}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x1, 0x5, 0xa, 0x8, 0x2, 0x20dd80ba, 0x5]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$KDMKTONE(r0, 0x4b30, 0xa0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2c4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000240)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 1.537044553s ago: executing program 0 (id=679): ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800714, &(0x7f00000004c0)={[{@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@nouser_xattr}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0xd60f}}]}, 0xee, 0x443, &(0x7f0000000d00)="$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") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4a, 0x6, 0x6}]}, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000060eb2bc5824af261a3bdce"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 1.516593384s ago: executing program 5 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00r\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x8000000010, 0x2, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x42f0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r8}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94) 1.431931168s ago: executing program 2 (id=681): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="8f9f0200000000f761000700000004000180"], 0x18}}, 0x2000c090) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) 1.39361188s ago: executing program 5 (id=682): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@local]}]}}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8a) fstat(r2, &(0x7f0000000540)) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000180)={0x7, 0x5, 0xbd, 0x5, 0x6, 0x7b6e}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x4}, 0x20) 1.178726559s ago: executing program 5 (id=683): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r8, r8, 0x0, 0x5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) r10 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r10}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r10}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.178281569s ago: executing program 4 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000100000f01000fffff000000000000090200000000002e2e2e", @ANYRES32=r3], 0x0, 0x44}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000001f80)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x9, 0x7, &(0x7f0000002180)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7020079933e0003000010850015479b2f05250e4aaa4b6a5a8e5042f4dc17f6fe5367acbf6752fb23f03ca051e83f824b91cea113f533d9428414e3805326ed0346adac31c2f32c874ab264e679d1a7187de62590b29c802b2f5645d4386c6f1364d90e1d6b3de1464d1590ae9c242dd35fb3970d2d487e77193cc4dfaa5dd36c6bc0e00bb59574f52a31b739298f24557ef469b6a3a0c5aa74bdd0170d8b8077ade60582c635b9227e1c1f5eb96b082041ee549c29c25a90f7a0282709d393a962586d64442f3d1da8"], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) openat$tun(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x84000, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x1}, 0x28) r9 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) sendmsg$key(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x12, 0x7, 0x7, 0x13, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0xe27384ba908648a8, 0x10, 0x4}, @sadb_lifetime={0x4, 0x3, 0x1000, 0x8, 0x7000000000000, 0x7}, @sadb_lifetime={0x4, 0x3, 0x9, 0x2, 0x374b52d1, 0x7fffffff}, @sadb_ident={0x2, 0xb, 0x4, 0x0, 0x80}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x3}]}, 0x98}}, 0x4000) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.169831609s ago: executing program 6 (id=685): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000780)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=0x0], 0x1, 0x26c, &(0x7f0000000340)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x9}, @enum={0x3}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, &(0x7f00000000c0)=""/138, 0x36, 0x8a, 0x1}, 0x28) 39.809408ms ago: executing program 0 (id=686): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000780)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=0x0], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x9}, @enum={0x3}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, &(0x7f00000000c0)=""/138, 0x36, 0x8a, 0x1}, 0x28) 0s ago: executing program 2 (id=687): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="4000000000000000000100000000006d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) kernel console output (not intermixed with test programs): 42][ T611] ? __fdget+0x1a1/0x230 [ 37.169667][ T611] __x64_sys_sendmsg+0x1e2/0x2a0 [ 37.174576][ T611] ? fput+0x1a/0x20 [ 37.178357][ T611] ? ___sys_sendmsg+0x260/0x260 [ 37.183183][ T611] ? debug_smp_processor_id+0x17/0x20 [ 37.188526][ T611] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 37.194566][ T611] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 37.200169][ T611] do_syscall_64+0x31/0x40 [ 37.204557][ T611] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.210420][ T611] RIP: 0033:0x7f53fbc30749 [ 37.214812][ T611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.234387][ T611] RSP: 002b:00007f53fa677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.242768][ T611] RAX: ffffffffffffffda RBX: 00007f53fbe87090 RCX: 00007f53fbc30749 [ 37.250797][ T611] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000d [ 37.258740][ T611] RBP: 00007f53fa677090 R08: 0000000000000000 R09: 0000000000000000 [ 37.266684][ T611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.274625][ T611] R13: 00007f53fbe87128 R14: 00007f53fbe87090 R15: 00007ffceb703ee8 [ 37.294416][ T617] netlink: 'syz.5.78': attribute type 4 has an invalid length. [ 37.316789][ T24] audit: type=1400 audit(1764072953.460:309): avc: denied { read } for pid=620 comm="syz.5.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.397298][ T622] netlink: 'syz.5.79': attribute type 17 has an invalid length. [ 37.409105][ T54] usb 4-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 37.418202][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.428289][ T54] usb 4-1: Product: syz [ 37.432666][ T54] usb 4-1: Manufacturer: syz [ 37.437292][ T54] usb 4-1: SerialNumber: syz [ 37.452192][ T622] device veth0_vlan left promiscuous mode [ 37.458140][ T622] device veth0_vlan entered promiscuous mode [ 37.475020][ T622] device veth1_macvtap left promiscuous mode [ 37.489686][ T622] device veth1_macvtap entered promiscuous mode [ 37.506850][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.519429][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.526910][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.535516][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.542556][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.562278][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.579258][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.597561][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.604612][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.632316][ T316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.642804][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.650905][ T316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.660595][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 37.668599][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.677164][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 37.685306][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.694246][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.702558][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.710884][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.719311][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.727451][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.735841][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.744489][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.753080][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.761732][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.770011][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.778125][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.779295][ T625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.80'. [ 37.786499][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.803452][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.812094][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.820617][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.828587][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.836954][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.844426][ T316] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.853921][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.862277][ T316] usb 3-1: Product: syz [ 37.866521][ T316] usb 3-1: Manufacturer: syz [ 37.869220][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.871558][ T316] usb 3-1: SerialNumber: syz [ 37.883019][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.894727][ T625] EXT4-fs (loop4): Ignoring removed orlov option [ 37.908666][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.921642][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.929669][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.937821][ T625] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 37.984186][ T24] audit: type=1400 audit(1764072954.130:310): avc: denied { ioctl } for pid=624 comm="syz.4.80" path="/17/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.077896][ T633] syz.0.81[633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.078133][ T633] syz.0.81[633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.670768][ T316] usb 3-1: 0:2 : does not exist [ 38.806411][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 38.967236][ T316] usb 3-1: USB disconnect, device number 4 [ 39.191118][ T647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.198351][ T647] IPv6: NLM_F_CREATE should be set when creating new route [ 39.221935][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.84'. [ 39.288078][ T24] audit: type=1400 audit(1764072955.430:311): avc: denied { create } for pid=581 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 39.347621][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.364223][ T54] cdc_ncm 4-1:1.0: bind() failure [ 39.371637][ T24] audit: type=1326 audit(1764072955.520:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 39.399174][ T54] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 39.420184][ T54] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 39.434002][ T54] usb 4-1: USB disconnect, device number 2 [ 39.449160][ T24] audit: type=1326 audit(1764072955.520:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 39.473374][ T24] audit: type=1326 audit(1764072955.520:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 39.496764][ T24] audit: type=1326 audit(1764072955.520:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 39.548509][ T24] audit: type=1326 audit(1764072955.520:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 39.573326][ T659] FAULT_INJECTION: forcing a failure. [ 39.573326][ T659] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.586536][ T659] CPU: 1 PID: 659 Comm: syz.4.85 Not tainted syzkaller #0 [ 39.593633][ T659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.603672][ T659] Call Trace: [ 39.606949][ T659] __dump_stack+0x21/0x24 [ 39.611265][ T659] dump_stack_lvl+0x169/0x1d8 [ 39.615930][ T659] ? thaw_kernel_threads+0x220/0x220 [ 39.621203][ T659] ? vsnprintf+0x186d/0x1960 [ 39.623068][ T657] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 39.625789][ T659] ? show_regs_print_info+0x18/0x18 [ 39.625804][ T659] dump_stack+0x15/0x1c [ 39.644354][ T659] should_fail+0x3c1/0x510 [ 39.648759][ T659] should_fail_usercopy+0x1a/0x20 [ 39.651269][ T657] F2FS-fs (loop2): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 39.653772][ T659] _copy_to_user+0x20/0x90 [ 39.653790][ T659] simple_read_from_buffer+0xe9/0x160 [ 39.672940][ T659] proc_fail_nth_read+0x19a/0x210 [ 39.677946][ T659] ? proc_fault_inject_write+0x2f0/0x2f0 [ 39.683554][ T659] ? rw_verify_area+0x1c0/0x360 [ 39.688378][ T659] ? proc_fault_inject_write+0x2f0/0x2f0 [ 39.693979][ T659] vfs_read+0x1fe/0xa10 [ 39.698105][ T659] ? kernel_read+0x70/0x70 [ 39.702492][ T659] ? __kasan_check_write+0x14/0x20 [ 39.707573][ T659] ? mutex_lock+0x8c/0xe0 [ 39.711870][ T659] ? mutex_trylock+0xa0/0xa0 [ 39.716428][ T659] ? __fget_files+0x2c4/0x320 [ 39.721078][ T659] ? __fdget_pos+0x2d2/0x380 [ 39.725637][ T659] ? ksys_read+0x71/0x240 [ 39.729937][ T659] ksys_read+0x140/0x240 [ 39.734148][ T659] ? vfs_write+0xd60/0xd60 [ 39.738533][ T659] ? __bpf_trace_sys_enter+0x62/0x70 [ 39.743788][ T659] __x64_sys_read+0x7b/0x90 [ 39.748258][ T659] do_syscall_64+0x31/0x40 [ 39.752645][ T659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.758510][ T659] RIP: 0033:0x7f53fbc2f15c [ 39.762897][ T659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 39.782470][ T659] RSP: 002b:00007f53fa656030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.790853][ T659] RAX: ffffffffffffffda RBX: 00007f53fbe87180 RCX: 00007f53fbc2f15c [ 39.798797][ T659] RDX: 000000000000000f RSI: 00007f53fa6560a0 RDI: 0000000000000008 [ 39.806738][ T659] RBP: 00007f53fa656090 R08: 0000000000000000 R09: 00000000fffbff01 [ 39.814679][ T659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.822621][ T659] R13: 00007f53fbe87218 R14: 00007f53fbe87180 R15: 00007ffceb703ee8 [ 39.840885][ T24] audit: type=1326 audit(1764072955.520:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 39.902201][ T24] audit: type=1326 audit(1764072955.590:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 39.926722][ T24] audit: type=1326 audit(1764072955.590:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 40.002880][ T24] audit: type=1326 audit(1764072955.590:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 40.138317][ T666] 9pnet: Insufficient options for proto=fd [ 40.223259][ T673] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.230445][ T673] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.401201][ T684] FAT-fs (loop5): bogus logical sector size 63488 [ 40.409236][ T684] FAT-fs (loop5): Can't find a valid FAT filesystem [ 40.470959][ T687] syz.3.93[687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.471228][ T687] syz.3.93[687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.212286][ T684] FAT-fs (loop5): Directory bread(block 64) failed [ 41.241963][ T686] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 41.297417][ T684] FAT-fs (loop5): Directory bread(block 65) failed [ 41.305058][ T684] FAT-fs (loop5): Directory bread(block 66) failed [ 41.316996][ T684] FAT-fs (loop5): Directory bread(block 67) failed [ 41.323810][ T684] FAT-fs (loop5): Directory bread(block 68) failed [ 41.325567][ T692] EXT4-fs (loop2): dax option not supported [ 41.330509][ T684] FAT-fs (loop5): Directory bread(block 69) failed [ 41.343142][ T684] FAT-fs (loop5): Directory bread(block 70) failed [ 41.350533][ T684] FAT-fs (loop5): Directory bread(block 71) failed [ 41.357372][ T684] FAT-fs (loop5): Directory bread(block 72) failed [ 41.364092][ T684] FAT-fs (loop5): Directory bread(block 73) failed [ 42.230659][ T722] syz.3.107[722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.230713][ T722] syz.3.107[722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.312662][ T727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=727 comm=syz.3.107 [ 42.359985][ T7] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.385070][ T7] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 704 with error 28 [ 42.450653][ T729] syz.0.108[729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.450928][ T729] syz.0.108[729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.578917][ T7] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.578917][ T7] [ 42.975159][ T112] handle_bad_sector: 59774 callbacks suppressed [ 42.991891][ T112] attempt to access beyond end of device [ 42.991891][ T112] loop1: rw=2049, want=45104, limit=40427 [ 43.011944][ T7] EXT4-fs (loop4): Total free blocks count 0 [ 43.037637][ T720] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.064016][ T7] EXT4-fs (loop4): Free/Dirty block details [ 43.182044][ T7] EXT4-fs (loop4): free_blocks=2415919504 [ 43.198604][ T7] EXT4-fs (loop4): dirty_blocks=720 [ 43.204037][ T720] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.214555][ T7] EXT4-fs (loop4): Block reservation details [ 43.220673][ T7] EXT4-fs (loop4): i_reserved_data_blocks=45 [ 43.231939][ T7] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 43.245488][ T7] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.245488][ T7] [ 43.414633][ T746] syz.5.110[746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.415376][ T746] syz.5.110[746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.661535][ T746] FAT-fs (loop5): Unrecognized mount option "00000000000000000009" or missing value [ 43.853892][ T746] device vlan2 entered promiscuous mode [ 43.859559][ T746] device bridge0 entered promiscuous mode [ 44.689010][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 44.689019][ T24] audit: type=1400 audit(1764072960.830:362): avc: denied { remount } for pid=750 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.749895][ T761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 44.765110][ T24] audit: type=1400 audit(1764072960.910:363): avc: denied { bind } for pid=740 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.765830][ T745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 44.899214][ T771] exfat: Bad value for 'time_offset' [ 45.268619][ T24] audit: type=1326 audit(1764072961.410:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 45.333485][ T780] FAULT_INJECTION: forcing a failure. [ 45.333485][ T780] name failslab, interval 1, probability 0, space 0, times 0 [ 45.344230][ T24] audit: type=1326 audit(1764072961.470:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 45.385056][ T780] CPU: 1 PID: 780 Comm: syz.5.120 Not tainted syzkaller #0 [ 45.387668][ T24] audit: type=1326 audit(1764072961.480:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 45.392250][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.392254][ T780] Call Trace: [ 45.392269][ T780] __dump_stack+0x21/0x24 [ 45.392278][ T780] dump_stack_lvl+0x169/0x1d8 [ 45.392293][ T780] ? thaw_kernel_threads+0x220/0x220 [ 45.435774][ T24] audit: type=1326 audit(1764072961.480:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6918160f90 code=0x7ffc0000 [ 45.437591][ T780] ? show_regs_print_info+0x18/0x18 [ 45.454571][ T24] audit: type=1326 audit(1764072961.480:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f69181611ff code=0x7ffc0000 [ 45.465894][ T780] dump_stack+0x15/0x1c [ 45.465903][ T780] should_fail+0x3c1/0x510 [ 45.465919][ T780] ? audit_log_start+0x3df/0x860 [ 45.507580][ T780] __should_failslab+0xa4/0xe0 [ 45.512327][ T780] should_failslab+0x9/0x20 [ 45.516812][ T780] __kmalloc_track_caller+0x5f/0x320 [ 45.522079][ T780] ? kmem_cache_alloc+0x165/0x2e0 [ 45.527082][ T780] ? __alloc_skb+0x9e/0x520 [ 45.531569][ T780] ? audit_log_start+0x3df/0x860 [ 45.536488][ T780] __alloc_skb+0xdc/0x520 [ 45.541327][ T780] audit_log_start+0x3df/0x860 [ 45.546079][ T780] ? ____kasan_slab_free+0x130/0x160 [ 45.551348][ T780] ? audit_serial+0x30/0x30 [ 45.555834][ T780] ? kstrtouint_from_user+0x1a0/0x200 [ 45.561186][ T780] ? kmem_cache_free+0x2ac/0x2d0 [ 45.566109][ T780] ? memset+0x35/0x40 [ 45.570074][ T780] audit_seccomp+0x62/0x160 [ 45.574559][ T780] __seccomp_filter+0xb4c/0x1990 [ 45.579481][ T780] ? proc_fail_nth_read+0x210/0x210 [ 45.584661][ T780] ? rw_verify_area+0x1c0/0x360 [ 45.589502][ T780] ? preempt_count_add+0x90/0x1b0 [ 45.594519][ T780] ? __secure_computing+0x290/0x290 [ 45.599702][ T780] ? vfs_write+0xac8/0xd60 [ 45.604099][ T780] ? __bpf_trace_kmem_free+0x6f/0x90 [ 45.609373][ T780] ? kernel_write+0x3c0/0x3c0 [ 45.614031][ T780] ? __kasan_check_write+0x14/0x20 [ 45.619124][ T780] ? mutex_lock+0x8c/0xe0 [ 45.623434][ T780] ? mutex_trylock+0xa0/0xa0 [ 45.628003][ T780] ? __fget_files+0x2c4/0x320 [ 45.632660][ T780] ? __kasan_check_write+0x14/0x20 [ 45.637754][ T780] ? fput_many+0x15a/0x1a0 [ 45.642158][ T780] ? fput+0x1a/0x20 [ 45.645952][ T780] ? ksys_write+0x1eb/0x240 [ 45.650441][ T780] __secure_computing+0xea/0x290 [ 45.655366][ T780] syscall_trace_enter+0xb5/0x170 [ 45.660373][ T780] syscall_enter_from_user_mode+0x20/0x30 [ 45.666070][ T780] do_syscall_64+0x13/0x40 [ 45.670469][ T780] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.676341][ T780] RIP: 0033:0x7f6918162749 [ 45.680738][ T780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.700327][ T780] RSP: 002b:00007f6916bca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e1 [ 45.708723][ T780] RAX: ffffffffffffffda RBX: 00007f69183b8fa0 RCX: 00007f6918162749 [ 45.716674][ T780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.724629][ T780] RBP: 00007f6916bca090 R08: 0000000000000000 R09: 0000000000000000 [ 45.732581][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.740540][ T780] R13: 00007f69183b9038 R14: 00007f69183b8fa0 R15: 00007fffec31bf78 [ 45.769290][ T780] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 45.812151][ T780] audit: out of memory in audit_log_start [ 45.824793][ T24] audit: type=1326 audit(1764072961.970:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f691816115c code=0x7ffc0000 [ 46.127370][ T817] FAULT_INJECTION: forcing a failure. [ 46.127370][ T817] name failslab, interval 1, probability 0, space 0, times 0 [ 46.140863][ T817] CPU: 0 PID: 817 Comm: syz.3.133 Not tainted syzkaller #0 [ 46.148050][ T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.158088][ T817] Call Trace: [ 46.161373][ T817] __dump_stack+0x21/0x24 [ 46.165692][ T817] dump_stack_lvl+0x169/0x1d8 [ 46.170356][ T817] ? thaw_kernel_threads+0x220/0x220 [ 46.175625][ T817] ? show_regs_print_info+0x18/0x18 [ 46.180806][ T817] dump_stack+0x15/0x1c [ 46.184940][ T817] should_fail+0x3c1/0x510 [ 46.189344][ T817] ? getname_flags+0xb9/0x500 [ 46.194003][ T817] __should_failslab+0xa4/0xe0 [ 46.198752][ T817] should_failslab+0x9/0x20 [ 46.203238][ T817] kmem_cache_alloc+0x3d/0x2e0 [ 46.207983][ T817] getname_flags+0xb9/0x500 [ 46.212469][ T817] user_path_at_empty+0x2f/0x50 [ 46.217299][ T817] __se_sys_mount+0x2e3/0x380 [ 46.221958][ T817] ? fput+0x1a/0x20 [ 46.225747][ T817] ? __x64_sys_mount+0xd0/0xd0 [ 46.230487][ T817] ? do_mknodat+0x366/0x5a0 [ 46.234969][ T817] __x64_sys_mount+0xbf/0xd0 [ 46.239537][ T817] do_syscall_64+0x31/0x40 [ 46.243936][ T817] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.249808][ T817] RIP: 0033:0x7f15e89d6749 [ 46.254204][ T817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.273793][ T817] RSP: 002b:00007f15e743e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 46.282191][ T817] RAX: ffffffffffffffda RBX: 00007f15e8c2cfa0 RCX: 00007f15e89d6749 [ 46.290151][ T817] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 46.298109][ T817] RBP: 00007f15e743e090 R08: 0000200000000240 R09: 0000000000000000 [ 46.306075][ T817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.314035][ T817] R13: 00007f15e8c2d038 R14: 00007f15e8c2cfa0 R15: 00007ffecfcdf6b8 [ 47.254334][ T826] capability: warning: `syz.5.130' uses deprecated v2 capabilities in a way that may be insecure [ 47.267387][ T825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 47.690672][ T825] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.824602][ T831] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.131: bg 0: block 393: padding at end of block bitmap is not set [ 47.840385][ T831] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 47.851209][ T831] EXT4-fs (loop4): 2 truncates cleaned up [ 47.856952][ T831] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 47.973785][ T825] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #2: comm syz.0.135: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 47.992238][ T825] EXT4-fs (loop0): Remounting filesystem read-only [ 47.998817][ T825] EXT4-fs (loop0): get root inode failed [ 48.004477][ T825] EXT4-fs (loop0): mount failed [ 48.214424][ T847] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 48.225582][ T842] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.137: bg 0: block 248: padding at end of block bitmap is not set [ 48.264876][ T842] EXT4-fs error (device loop5): ext4_acquire_dquot:6224: comm syz.5.137: Failed to acquire dquot type 1 [ 48.309254][ T842] EXT4-fs (loop5): 1 truncate cleaned up [ 48.314908][ T842] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 48.329074][ T842] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.870079][ T868] overlayfs: failed to resolve './file0': -2 [ 48.874754][ T866] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 48.889630][ T872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.147'. [ 49.457124][ T880] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.466256][ T880] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.491236][ T880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46025 sclass=netlink_route_socket pid=880 comm=syz.2.149 [ 49.840457][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 49.840467][ T24] audit: type=1400 audit(1764072965.830:420): avc: denied { accept } for pid=895 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 49.897273][ T24] audit: type=1400 audit(1764072965.990:421): avc: denied { getopt } for pid=878 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.917255][ T905] netlink: 348 bytes leftover after parsing attributes in process `syz.5.154'. [ 50.302171][ T24] audit: type=1400 audit(1764072966.450:422): avc: denied { setopt } for pid=907 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.321398][ T24] audit: type=1400 audit(1764072966.450:423): avc: denied { remount } for pid=909 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.446191][ T24] audit: type=1400 audit(1764072966.590:424): avc: denied { write } for pid=907 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.494433][ T24] audit: type=1400 audit(1764072966.620:425): avc: denied { write } for pid=917 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.514965][ T24] audit: type=1400 audit(1764072966.620:426): avc: denied { nlmsg_write } for pid=917 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.535952][ T24] audit: type=1400 audit(1764072966.620:427): avc: denied { ioctl } for pid=917 comm="syz.4.160" path="socket:[17156]" dev="sockfs" ino=17156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.564147][ T915] FAT-fs (loop2): Unrecognized mount option "check=relaxdd" or missing value [ 50.574350][ T24] audit: type=1400 audit(1764072966.630:428): avc: denied { create } for pid=907 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 51.290521][ T24] audit: type=1400 audit(1764072967.440:429): avc: denied { map } for pid=929 comm="syz.0.164" path="socket:[18020]" dev="sockfs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.517922][ T924] FAT-fs (loop3): Directory bread(block 64) failed [ 51.533215][ T924] FAT-fs (loop3): Directory bread(block 65) failed [ 51.548125][ T924] FAT-fs (loop3): Directory bread(block 66) failed [ 51.555043][ T924] FAT-fs (loop3): Directory bread(block 67) failed [ 51.562134][ T924] FAT-fs (loop3): Directory bread(block 68) failed [ 51.568679][ T924] FAT-fs (loop3): Directory bread(block 69) failed [ 51.587498][ T947] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.169: inode has both inline data and extents flags [ 51.604285][ T924] FAT-fs (loop3): Directory bread(block 70) failed [ 51.611854][ T924] FAT-fs (loop3): Directory bread(block 71) failed [ 51.618495][ T947] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.169: couldn't read orphan inode 15 (err -117) [ 51.631171][ T924] FAT-fs (loop3): Directory bread(block 72) failed [ 51.637917][ T924] FAT-fs (loop3): Directory bread(block 73) failed [ 51.650884][ T947] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue [ 51.653734][ T947] capability: warning: `syz.4.169' uses 32-bit capabilities (legacy support in use) [ 51.681004][ T924] tmpfs: Unknown parameter 'grpquota' [ 52.001399][ T960] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 52.009271][ T960] EXT4-fs (loop5): Test dummy encryption mode enabled [ 52.016089][ T960] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 52.023228][ T960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.036511][ T960] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.121291][ T960] EXT4-fs (loop5): 1 truncate cleaned up [ 52.126983][ T960] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,bsdgroups,inlinecrypt,test_dummy_encryption=v1,user_xattr,mblk_io_submit,nogrpid,,errors=continue [ 52.147158][ T960] FAULT_INJECTION: forcing a failure. [ 52.147158][ T960] name failslab, interval 1, probability 0, space 0, times 0 [ 52.160065][ T960] CPU: 1 PID: 960 Comm: syz.5.172 Not tainted syzkaller #0 [ 52.167248][ T960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.177287][ T960] Call Trace: [ 52.180566][ T960] __dump_stack+0x21/0x24 [ 52.184880][ T960] dump_stack_lvl+0x169/0x1d8 [ 52.189563][ T960] ? show_regs_print_info+0x18/0x18 [ 52.194742][ T960] dump_stack+0x15/0x1c [ 52.198886][ T960] should_fail+0x3c1/0x510 [ 52.203294][ T960] ? __d_alloc+0x2d/0x6a0 [ 52.207607][ T960] __should_failslab+0xa4/0xe0 [ 52.212353][ T960] should_failslab+0x9/0x20 [ 52.216842][ T960] kmem_cache_alloc+0x3d/0x2e0 [ 52.221585][ T960] __d_alloc+0x2d/0x6a0 [ 52.225712][ T960] d_alloc_parallel+0xe1/0x1390 [ 52.230536][ T960] ? preempt_schedule_common+0xbe/0xf0 [ 52.235968][ T960] ? preempt_schedule+0xa7/0xb0 [ 52.240789][ T960] ? schedule_preempt_disabled+0x20/0x20 [ 52.246390][ T960] ? d_hash_and_lookup+0x1f0/0x1f0 [ 52.251476][ T960] path_openat+0x9fe/0x3160 [ 52.255951][ T960] ? do_filp_open+0x3e0/0x3e0 [ 52.260716][ T960] do_filp_open+0x1b3/0x3e0 [ 52.265196][ T960] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 52.270801][ T960] ? vfs_tmpfile+0x2c0/0x2c0 [ 52.275371][ T960] ? get_unused_fd_flags+0x92/0xa0 [ 52.280455][ T960] do_sys_openat2+0x14c/0x6d0 [ 52.285104][ T960] ? __kasan_check_read+0x11/0x20 [ 52.290097][ T960] ? do_sys_open+0xe0/0xe0 [ 52.294487][ T960] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 52.300523][ T960] __x64_sys_openat+0x136/0x160 [ 52.305342][ T960] do_syscall_64+0x31/0x40 [ 52.309733][ T960] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.315597][ T960] RIP: 0033:0x7f6918162749 [ 52.319987][ T960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.339560][ T960] RSP: 002b:00007f6916b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.347949][ T960] RAX: ffffffffffffffda RBX: 00007f69183b9180 RCX: 00007f6918162749 [ 52.355895][ T960] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 52.363840][ T960] RBP: 00007f6916b88090 R08: 0000000000000000 R09: 0000000000000000 [ 52.371785][ T960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.379734][ T960] R13: 00007f69183b9218 R14: 00007f69183b9180 R15: 00007fffec31bf78 [ 52.701546][ T970] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 52.716592][ T977] EXT4-fs (loop5): Ignoring removed orlov option [ 52.730003][ T977] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 52.779159][ T15] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.156813][ T994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 53.559167][ T15] usb 5-1: too many configurations: 23, using maximum allowed: 8 [ 53.687551][ T999] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 53.733754][ T999] F2FS-fs (loop0): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 54.339333][ T15] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 54.353867][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 54.362917][ T15] usb 5-1: SerialNumber: syz [ 54.368300][ T15] usb 5-1: config 0 descriptor?? [ 54.445338][ T1024] kvm: pic: non byte write [ 54.520109][ T1027] netlink: 'syz.5.186': attribute type 7 has an invalid length. [ 54.639809][ T363] usb 5-1: USB disconnect, device number 2 [ 54.763267][ T1036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 55.139220][ T54] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 55.382855][ T1043] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 55.396910][ T1049] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 55.406837][ T1043] F2FS-fs (loop4): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 55.416829][ T1049] F2FS-fs (loop5): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 55.509052][ T54] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.519228][ T54] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.629070][ T54] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.638315][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.646573][ T54] usb 3-1: SerialNumber: syz [ 55.693017][ T24] kauditd_printk_skb: 80 callbacks suppressed [ 55.693029][ T24] audit: type=1400 audit(1764072971.840:510): avc: denied { read } for pid=1056 comm="syz.0.200" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.726849][ T24] audit: type=1400 audit(1764072971.870:511): avc: denied { open } for pid=1056 comm="syz.0.200" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.949847][ T54] usb 3-1: 0:2 : does not exist [ 55.958219][ T24] audit: type=1400 audit(1764072972.100:512): avc: denied { connect } for pid=1067 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.981869][ T54] usb 3-1: USB disconnect, device number 5 [ 56.033168][ T24] audit: type=1400 audit(1764072972.180:513): avc: denied { setopt } for pid=1071 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.080392][ T1070] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 56.118544][ T1070] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.199666][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.680522][ T1091] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 56.719115][ T1091] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.736655][ T24] audit: type=1400 audit(1764072972.880:514): avc: denied { mount } for pid=1085 comm="syz.2.207" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 56.808900][ T316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.817090][ T1091] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: comm syz.0.208: lblock 0 mapped to illegal pblock 0 (length 6) [ 56.839480][ T1091] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 56.852154][ T1091] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.852154][ T1091] [ 56.862791][ T1097] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: comm syz.0.208: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.881899][ T1097] EXT4-fs error (device loop0): ext4_ext_remove_space:2924: inode #15: comm syz.0.208: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 56.901687][ T1097] EXT4-fs error (device loop0) in ext4_setattr:5721: Corrupt filesystem [ 56.918708][ T1091] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: block 7: comm syz.0.208: lblock 7 mapped to illegal pblock 7 (length 9) [ 56.933140][ T1091] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 56.945483][ T1091] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.945483][ T1091] [ 57.136622][ T1105] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 57.149843][ T1105] F2FS-fs (loop5): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 57.169420][ T316] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 57.178476][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.187314][ T316] usb 5-1: config 0 descriptor?? [ 57.229517][ T316] usb 5-1: Invalid firmware size=18. [ 57.269002][ T364] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.380746][ T1110] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 57.390996][ T1110] F2FS-fs (loop2): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 57.689013][ T364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.763085][ T24] audit: type=1326 audit(1764072973.910:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e89d6749 code=0x7ffc0000 [ 57.786442][ T364] usb 1-1: config 174 has an invalid interface number: 178 but max is 0 [ 57.795594][ T364] usb 1-1: config 174 has an invalid descriptor of length 133, skipping remainder of the config [ 57.807029][ T364] usb 1-1: config 174 has no interface number 0 [ 57.813610][ T24] audit: type=1326 audit(1764072973.910:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e89d6749 code=0x7ffc0000 [ 57.838197][ T364] usb 1-1: config 174 interface 178 has no altsetting 0 [ 57.848866][ T24] audit: type=1326 audit(1764072973.940:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e89d6749 code=0x7ffc0000 [ 57.898641][ T24] audit: type=1326 audit(1764072973.940:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e89d6749 code=0x7ffc0000 [ 57.923870][ T24] audit: type=1326 audit(1764072973.940:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e89d6749 code=0x7ffc0000 [ 57.959837][ T1122] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 58.019100][ T364] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 58.029085][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.037277][ T364] usb 1-1: Product: syz [ 58.041581][ T364] usb 1-1: Manufacturer: syz [ 58.046200][ T364] usb 1-1: SerialNumber: syz [ 58.300963][ T1103] input: syz1 as /devices/virtual/input/input5 [ 58.409436][ T364] usb 1-1: bad CDC descriptors [ 58.414463][ T364] usb 1-1: unsupported MDLM descriptors [ 58.420925][ T364] usb 1-1: USB disconnect, device number 3 [ 58.778440][ T1140] netlink: 'syz.3.223': attribute type 11 has an invalid length. [ 58.786590][ T1140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 58.822242][ T1142] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003] [ 58.832229][ T1142] System zones: 0-5 [ 58.852810][ T1142] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,usrquota,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 59.321324][ T25] usb 5-1: USB disconnect, device number 3 [ 59.370222][ T1160] FAULT_INJECTION: forcing a failure. [ 59.370222][ T1160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.414201][ T1160] CPU: 1 PID: 1160 Comm: syz.5.227 Not tainted syzkaller #0 [ 59.421492][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.431552][ T1160] Call Trace: [ 59.434860][ T1160] __dump_stack+0x21/0x24 [ 59.439195][ T1160] dump_stack_lvl+0x169/0x1d8 [ 59.443871][ T1160] ? thaw_kernel_threads+0x220/0x220 [ 59.449150][ T1160] ? vsnprintf+0x186d/0x1960 [ 59.453740][ T1160] ? show_regs_print_info+0x18/0x18 [ 59.458937][ T1160] dump_stack+0x15/0x1c [ 59.463090][ T1160] should_fail+0x3c1/0x510 [ 59.467502][ T1160] should_fail_usercopy+0x1a/0x20 [ 59.472521][ T1160] _copy_to_user+0x20/0x90 [ 59.476927][ T1160] simple_read_from_buffer+0xe9/0x160 [ 59.482288][ T1160] proc_fail_nth_read+0x19a/0x210 [ 59.487287][ T1160] ? proc_fault_inject_write+0x2f0/0x2f0 [ 59.492894][ T1160] ? rw_verify_area+0x1c0/0x360 [ 59.497713][ T1160] ? proc_fault_inject_write+0x2f0/0x2f0 [ 59.503313][ T1160] vfs_read+0x1fe/0xa10 [ 59.507450][ T1160] ? kernel_read+0x70/0x70 [ 59.511837][ T1160] ? __kasan_check_write+0x14/0x20 [ 59.516917][ T1160] ? mutex_lock+0x8c/0xe0 [ 59.521219][ T1160] ? mutex_trylock+0xa0/0xa0 [ 59.525777][ T1160] ? __fget_files+0x2c4/0x320 [ 59.530428][ T1160] ? __fdget_pos+0x2d2/0x380 [ 59.534988][ T1160] ? ksys_read+0x71/0x240 [ 59.539288][ T1160] ksys_read+0x140/0x240 [ 59.543498][ T1160] ? vfs_write+0xd60/0xd60 [ 59.547882][ T1160] ? __fdget+0x1b3/0x230 [ 59.552097][ T1160] ? debug_smp_processor_id+0x17/0x20 [ 59.557438][ T1160] __x64_sys_read+0x7b/0x90 [ 59.561911][ T1160] do_syscall_64+0x31/0x40 [ 59.566300][ T1160] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.572170][ T1160] RIP: 0033:0x7f691816115c [ 59.576559][ T1160] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.596136][ T1160] RSP: 002b:00007f6916ba9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.604616][ T1160] RAX: ffffffffffffffda RBX: 00007f69183b9090 RCX: 00007f691816115c [ 59.612571][ T1160] RDX: 000000000000000f RSI: 00007f6916ba90a0 RDI: 0000000000000004 [ 59.620517][ T1160] RBP: 00007f6916ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 59.628457][ T1160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.636399][ T1160] R13: 00007f69183b9128 R14: 00007f69183b9090 R15: 00007fffec31bf78 [ 59.724535][ T1173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.233'. [ 59.742997][ T1158] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 59.779578][ T1158] F2FS-fs (loop3): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 59.963659][ T1175] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 59.984229][ T1175] F2FS-fs (loop0): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 60.261552][ T1190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 60.445467][ T1201] overlayfs: failed to resolve './file0': -2 [ 60.458506][ T1201] usb usb1: usbfs: process 1201 (syz.3.240) did not claim interface 0 before use [ 61.353457][ T24] kauditd_printk_skb: 141 callbacks suppressed [ 61.366990][ T24] audit: type=1400 audit(1764072977.500:661): avc: denied { write } for pid=1218 comm="syz.3.247" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 63.909649][ T1232] EXT4-fs (loop2): Ignoring removed oldalloc option [ 63.916316][ T1232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.935212][ T1232] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 63.948267][ T1232] EXT4-fs (loop2): 1 truncate cleaned up [ 63.954267][ T1232] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue [ 64.013133][ T24] audit: type=1400 audit(1764072980.160:662): avc: denied { write } for pid=1239 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 65.291916][ T1255] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 65.568563][ T7] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.649860][ T7] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 65.662401][ T7] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.662401][ T7] [ 65.672048][ T7] EXT4-fs (loop0): Total free blocks count 0 [ 65.678083][ T7] EXT4-fs (loop0): Free/Dirty block details [ 65.698889][ T7] EXT4-fs (loop0): free_blocks=2415919504 [ 65.708263][ T7] EXT4-fs (loop0): dirty_blocks=2864 [ 65.719793][ T1241] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(83968) [ 65.728437][ T7] EXT4-fs (loop0): Block reservation details [ 65.734616][ T1241] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.742926][ T7] EXT4-fs (loop0): i_reserved_data_blocks=179 [ 65.749469][ T1241] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 65.768568][ T1241] F2FS-fs (loop3): LFS not compatible with checkpoint=disable [ 65.790281][ T7] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 798 with error 28 [ 65.808161][ T1279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.264'. [ 65.883922][ T7] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.883922][ T7] [ 66.537816][ T1280] FAT-fs (loop5): Unrecognized mount option "0x000000000000000b00000000000000000000000" or missing value [ 66.730841][ T1292] FAT-fs (loop3): Directory bread(block 64) failed [ 66.737609][ T1292] FAT-fs (loop3): Directory bread(block 65) failed [ 66.744417][ T1292] FAT-fs (loop3): Directory bread(block 66) failed [ 66.751452][ T1292] FAT-fs (loop3): Directory bread(block 67) failed [ 66.758137][ T1292] FAT-fs (loop3): Directory bread(block 68) failed [ 66.769694][ T1292] FAT-fs (loop3): Directory bread(block 69) failed [ 66.778474][ T1292] FAT-fs (loop3): Directory bread(block 70) failed [ 66.786147][ T1292] FAT-fs (loop3): Directory bread(block 71) failed [ 66.793769][ T1292] FAT-fs (loop3): Directory bread(block 72) failed [ 66.805059][ T1292] FAT-fs (loop3): Directory bread(block 73) failed [ 66.812403][ T1278] F2FS-fs (loop4): invalid crc value [ 66.851851][ T1278] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.859093][ T1296] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,stripe=0x0000000000000002,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000002000,,errors=continue [ 67.007890][ T1296] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.071305][ T1278] F2FS-fs (loop4): Start checkpoint disabled! [ 67.093990][ T1278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 67.525451][ T24] audit: type=1400 audit(1764072983.560:663): avc: denied { audit_read } for pid=1294 comm="syz.2.268" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.572015][ T1302] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.609115][ T316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.632866][ T24] audit: type=1400 audit(1764072983.780:664): avc: denied { watch } for pid=1301 comm="syz.0.269" path="/43/file1/file2" dev="loop0" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 67.748272][ T112] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 345: padding at end of block bitmap is not set [ 67.780547][ T112] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 67.799678][ T7] attempt to access beyond end of device [ 67.799678][ T7] loop4: rw=2049, want=45104, limit=40427 [ 67.849098][ T112] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.849098][ T112] [ 67.916561][ T112] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 67.949106][ T112] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.949106][ T112] [ 67.989243][ T112] EXT4-fs (loop2): Total free blocks count 0 [ 67.995217][ T112] EXT4-fs (loop2): Free/Dirty block details [ 68.002323][ T112] EXT4-fs (loop2): free_blocks=0 [ 68.007264][ T112] EXT4-fs (loop2): dirty_blocks=2032 [ 68.014822][ T112] EXT4-fs (loop2): Block reservation details [ 68.027432][ T112] EXT4-fs (loop2): i_reserved_data_blocks=127 [ 68.033978][ T316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.044992][ T316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.055538][ T1311] FAULT_INJECTION: forcing a failure. [ 68.055538][ T1311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.087720][ T1311] CPU: 0 PID: 1311 Comm: syz.5.272 Not tainted syzkaller #0 [ 68.095015][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.105061][ T1311] Call Trace: [ 68.108327][ T1311] __dump_stack+0x21/0x24 [ 68.112642][ T1311] dump_stack_lvl+0x169/0x1d8 [ 68.117318][ T1311] ? show_regs_print_info+0x18/0x18 [ 68.122513][ T1311] ? __sys_recvmsg_sock+0x50/0x50 [ 68.127527][ T1311] dump_stack+0x15/0x1c [ 68.131676][ T1311] should_fail+0x3c1/0x510 [ 68.136068][ T1311] should_fail_usercopy+0x1a/0x20 [ 68.141067][ T1311] _copy_from_user+0x20/0xd0 [ 68.145633][ T1311] ___sys_recvmsg+0x129/0x4f0 [ 68.150282][ T1311] ? __sys_recvmsg+0x250/0x250 [ 68.155018][ T1311] ? __fsnotify_parent+0x5f5/0x6c0 [ 68.160099][ T1311] ? __fdget+0x1a1/0x230 [ 68.164307][ T1311] ? do_recvmmsg+0x15b/0x790 [ 68.168864][ T1311] do_recvmmsg+0x347/0x790 [ 68.173250][ T1311] ? __sys_recvmmsg+0x280/0x280 [ 68.178074][ T1311] ? __kasan_check_write+0x14/0x20 [ 68.183156][ T1311] ? mutex_lock+0x8c/0xe0 [ 68.187461][ T1311] ? fput_many+0x15a/0x1a0 [ 68.191846][ T1311] __x64_sys_recvmmsg+0x18d/0x240 [ 68.196839][ T1311] ? do_recvmmsg+0x790/0x790 [ 68.201401][ T1311] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 68.207454][ T1311] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 68.213082][ T1311] do_syscall_64+0x31/0x40 [ 68.217484][ T1311] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.223357][ T1311] RIP: 0033:0x7f6918162749 [ 68.227744][ T1311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.247319][ T1311] RSP: 002b:00007f6916bca038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 68.255704][ T1311] RAX: ffffffffffffffda RBX: 00007f69183b8fa0 RCX: 00007f6918162749 [ 68.263647][ T1311] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000009 [ 68.271589][ T1311] RBP: 00007f6916bca090 R08: 0000000000000000 R09: 0000000000000000 [ 68.279533][ T1311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.287473][ T1311] R13: 00007f69183b9038 R14: 00007f69183b8fa0 R15: 00007fffec31bf78 [ 68.332521][ T316] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.341838][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.349874][ T316] usb 4-1: SerialNumber: syz [ 68.672157][ T316] usb 4-1: 0:2 : does not exist [ 68.722070][ T316] usb 4-1: USB disconnect, device number 3 [ 68.820435][ T1316] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.878773][ T1316] EXT4-fs error (device loop4): __ext4_iget:5022: inode #2: block 13: comm syz.4.271: invalid block [ 68.890502][ T1316] EXT4-fs (loop4): get root inode failed [ 68.896151][ T1316] EXT4-fs (loop4): mount failed [ 68.989334][ T1324] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35612 sclass=netlink_xfrm_socket pid=1324 comm=syz.5.274 [ 69.060733][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.307705][ T24] audit: type=1400 audit(1764072985.450:665): avc: denied { bind } for pid=1325 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.390662][ T1329] netlink: 'syz.5.274': attribute type 4 has an invalid length. [ 69.398356][ T1329] netlink: 17 bytes leftover after parsing attributes in process `syz.5.274'. [ 70.700726][ T1359] FAT-fs (loop2): Unrecognized mount option "0x000000000000000b00000000000000000000000" or missing value [ 71.292682][ T24] audit: type=1326 audit(1764072987.440:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 71.294425][ T1373] FAULT_INJECTION: forcing a failure. [ 71.294425][ T1373] name failslab, interval 1, probability 0, space 0, times 0 [ 71.809360][ T1375] syz.4.287[1375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.809417][ T1375] syz.4.287[1375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.858326][ T1373] CPU: 1 PID: 1373 Comm: syz.0.288 Not tainted syzkaller #0 [ 72.876927][ T1373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.886975][ T1373] Call Trace: [ 72.890248][ T1373] __dump_stack+0x21/0x24 [ 72.895116][ T1373] dump_stack_lvl+0x169/0x1d8 [ 72.899783][ T1373] ? show_regs_print_info+0x18/0x18 [ 72.904971][ T1373] dump_stack+0x15/0x1c [ 72.909111][ T1373] should_fail+0x3c1/0x510 [ 72.913513][ T1373] ? sidtab_sid2str_get+0x120/0x2c0 [ 72.918698][ T1373] __should_failslab+0xa4/0xe0 [ 72.923444][ T1373] should_failslab+0x9/0x20 [ 72.927932][ T1373] __kmalloc_track_caller+0x5f/0x320 [ 72.933207][ T1373] kmemdup+0x26/0x60 [ 72.937087][ T1373] sidtab_sid2str_get+0x120/0x2c0 [ 72.942096][ T1373] security_sid_to_context_core+0x2ac/0x480 [ 72.947972][ T1373] security_sid_to_context+0x33/0x40 [ 72.953239][ T1373] selinux_secid_to_secctx+0x2c/0x40 [ 72.958505][ T1373] security_secid_to_secctx+0x74/0xb0 [ 72.963869][ T1373] audit_log_task_context+0xc6/0x1e0 [ 72.969138][ T1373] ? audit_log_key+0x130/0x130 [ 72.973886][ T1373] ? audit_log_start+0x76b/0x860 [ 72.978806][ T1373] audit_log_task+0x185/0x2e0 [ 72.983490][ T1373] ? audit_core_dumps+0x110/0x110 [ 72.988515][ T1373] audit_seccomp+0x7f/0x160 [ 72.993011][ T1373] __seccomp_filter+0xb4c/0x1990 [ 72.997941][ T1373] ? proc_fail_nth_read+0x210/0x210 [ 73.003122][ T1373] ? rw_verify_area+0x1c0/0x360 [ 73.007956][ T1373] ? preempt_count_add+0x90/0x1b0 [ 73.012965][ T1373] ? __secure_computing+0x290/0x290 [ 73.018145][ T1373] ? vfs_write+0xac8/0xd60 [ 73.022545][ T1373] ? kernel_write+0x3c0/0x3c0 [ 73.027213][ T1373] ? __kasan_check_write+0x14/0x20 [ 73.032304][ T1373] ? mutex_lock+0x8c/0xe0 [ 73.036616][ T1373] ? mutex_trylock+0xa0/0xa0 [ 73.041188][ T1373] ? __fget_files+0x2c4/0x320 [ 73.045847][ T1373] ? __kasan_check_write+0x14/0x20 [ 73.050940][ T1373] ? fput_many+0x15a/0x1a0 [ 73.055341][ T1373] ? fput+0x1a/0x20 [ 73.059131][ T1373] ? ksys_write+0x1eb/0x240 [ 73.063621][ T1373] __secure_computing+0xea/0x290 [ 73.068539][ T1373] syscall_trace_enter+0xb5/0x170 [ 73.073557][ T1373] syscall_enter_from_user_mode+0x20/0x30 [ 73.079255][ T1373] do_syscall_64+0x13/0x40 [ 73.083653][ T1373] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 73.089527][ T1373] RIP: 0033:0x7f1dbc46c749 [ 73.093930][ T1373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.113516][ T1373] RSP: 002b:00007f1dbaed4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 73.121917][ T1373] RAX: ffffffffffffffda RBX: 00007f1dbc6c2fa0 RCX: 00007f1dbc46c749 [ 73.129872][ T1373] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000200000000340 [ 73.137826][ T1373] RBP: 00007f1dbaed4090 R08: 0000000000000002 R09: 0000000000000000 [ 73.145779][ T1373] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 73.153733][ T1373] R13: 00007f1dbc6c3038 R14: 00007f1dbc6c2fa0 R15: 00007ffc929f1158 [ 73.265029][ T24] audit: type=1326 audit(1764072987.440:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.412856][ T24] audit: type=1326 audit(1764072987.440:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.438960][ T24] audit: type=1326 audit(1764072987.440:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.462455][ T24] audit: type=1326 audit(1764072987.440:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.479203][ T1373] audit: error in audit_log_task_context [ 73.495263][ T24] audit: type=1326 audit(1764072987.440:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.521482][ T24] audit: type=1326 audit(1764072987.440:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.550881][ T24] audit: type=1326 audit(1764072987.440:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.574655][ T24] audit: type=1326 audit(1764072987.440:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.575363][ T734] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.606024][ T24] audit: type=1326 audit(1764072987.440:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 73.644663][ T1398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 73.791759][ T1401] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 73.969072][ T734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.969575][ T1406] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 73.980092][ T283] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 73.989540][ T1406] F2FS-fs (loop0): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 73.998178][ T734] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 74.025626][ T734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.088607][ T734] usb 4-1: config 0 descriptor?? [ 74.094601][ T1409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 74.193578][ T1416] overlayfs: failed to resolve './file0': -2 [ 74.260544][ T1418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.309652][ T734] usbhid 4-1:0.0: can't add hid device: -71 [ 74.377228][ T734] usbhid: probe of 4-1:0.0 failed with error -71 [ 74.389416][ T283] usb 5-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 74.485274][ T734] usb 4-1: USB disconnect, device number 4 [ 74.491364][ T283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.579028][ T283] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 74.592145][ T283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.600277][ T283] usb 5-1: SerialNumber: syz [ 74.639458][ T283] usb 5-1: 0:2 : does not exist [ 74.644341][ T283] usb 5-1: unit 255 not found! [ 74.899397][ T734] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 74.911659][ T1426] FAT-fs (loop0): Unrecognized mount option "0x000000000000000b00000000000000000000000" or missing value [ 75.031717][ T1402] udc-core: couldn't find an available UDC or it's busy [ 75.069671][ T1402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.288979][ T734] usb 4-1: device descriptor read/64, error -71 [ 75.678978][ T734] usb 4-1: device descriptor read/64, error -71 [ 75.949087][ T734] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 76.248979][ T364] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.308984][ T734] usb 4-1: device descriptor read/64, error -71 [ 76.488991][ T364] usb 1-1: Using ep0 maxpacket: 32 [ 76.619054][ T364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.629228][ T364] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 76.639992][ T364] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 76.653392][ T364] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.660070][ T364] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 76.669365][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.718969][ T734] usb 4-1: device descriptor read/64, error -71 [ 76.720426][ T364] usb 1-1: config 0 descriptor?? [ 76.737377][ T54] usb 5-1: USB disconnect, device number 4 [ 76.859044][ T734] usb usb4-port1: attempt power cycle [ 76.929663][ T1465] 9pnet: Insufficient options for proto=fd [ 76.992798][ T54] usb 1-1: USB disconnect, device number 4 [ 77.369157][ T734] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 77.382763][ T1479] device veth0_vlan left promiscuous mode [ 77.388752][ T1479] device veth0_vlan entered promiscuous mode [ 77.395533][ T1479] device veth1_macvtap left promiscuous mode [ 77.402180][ T1479] device veth1_macvtap entered promiscuous mode [ 77.409484][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.416966][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.428643][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.437058][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.444129][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.452150][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.460723][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.469235][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.476354][ T733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.484316][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.493474][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 77.502067][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.529029][ T734] usb 4-1: device descriptor read/8, error -71 [ 77.537167][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 77.545724][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.556159][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.565894][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.574125][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.582586][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.591090][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.599617][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.608022][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.616568][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.625413][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.633969][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.642420][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.651100][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.661830][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.670560][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.679310][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.701345][ T1487] mmap: syz.3.325 (1487) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.701702][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.749259][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.756917][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.764789][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.766445][ T734] usb 4-1: device descriptor read/8, error -71 [ 77.779495][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.787775][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.826389][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.880130][ T1495] overlayfs: failed to clone lowerpath [ 77.914601][ T1486] device veth0_vlan left promiscuous mode [ 77.921225][ T1486] device veth0_vlan entered promiscuous mode [ 77.928915][ T1486] device veth1_macvtap left promiscuous mode [ 77.935951][ T1486] device veth1_macvtap entered promiscuous mode [ 77.945105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.954036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.971018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.987465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.996133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.004776][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.011843][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.019983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.028253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 78.037036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.047695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 78.050537][ T1493] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 78.056008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.072500][ T1493] F2FS-fs (loop2): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 78.074749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.092563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.105471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.113721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.122297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.134152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.157862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.179236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.202793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.215491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.223867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.232153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.240714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.249716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.258161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.266559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.275265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.283034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.290854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.299334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.307672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.316793][ T1500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.329'. [ 78.326229][ T1500] netem: change failed [ 78.337760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.515083][ T1511] netlink: 'syz.3.332': attribute type 12 has an invalid length. [ 79.490876][ T1525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.335'. [ 79.500103][ T1525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.335'. [ 79.672069][ T1518] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.673033][ T24] kauditd_printk_skb: 92 callbacks suppressed [ 79.673044][ T24] audit: type=1326 audit(1764072995.820:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.4.338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53fbc30749 code=0x0 [ 79.690160][ T1518] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.769525][ T730] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.990700][ T1538] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 80.313210][ T24] audit: type=1326 audit(1764072996.460:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.411190][ T24] audit: type=1326 audit(1764072996.480:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.472309][ T24] audit: type=1326 audit(1764072996.480:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.500160][ T1561] netlink: 'syz.2.345': attribute type 6 has an invalid length. [ 80.521098][ T24] audit: type=1326 audit(1764072996.480:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.563745][ T24] audit: type=1326 audit(1764072996.480:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.605351][ T24] audit: type=1326 audit(1764072996.480:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.682526][ T24] audit: type=1326 audit(1764072996.480:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.728387][ T24] audit: type=1326 audit(1764072996.480:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 80.768232][ T24] audit: type=1326 audit(1764072996.480:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 81.225811][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 81.263715][ T1567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 81.272645][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 81.298414][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.298414][ T9] [ 81.368455][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 81.374792][ T9] EXT4-fs (loop3): Free/Dirty block details [ 81.381589][ T9] EXT4-fs (loop3): free_blocks=2415919504 [ 81.387862][ T9] EXT4-fs (loop3): dirty_blocks=3952 [ 81.394686][ T9] EXT4-fs (loop3): Block reservation details [ 81.400823][ T9] EXT4-fs (loop3): i_reserved_data_blocks=247 [ 81.427753][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1886 with error 28 [ 81.462973][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.462973][ T9] [ 81.510150][ T1574] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.544522][ T1574] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #17: comm syz.0.350: inline data xattr refers to an external xattr inode [ 81.572344][ T1574] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.350: couldn't read orphan inode 17 (err -117) [ 81.597328][ T1574] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue [ 82.098072][ T1592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.354'. [ 83.056174][ T1600] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.355: inode has both inline data and extents flags [ 83.111597][ T1600] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.355: couldn't read orphan inode 15 (err -117) [ 83.306351][ T1611] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 83.596605][ T1600] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue [ 84.153001][ T7] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 84.392211][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 84.405186][ T7] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.405186][ T7] [ 84.414921][ T7] EXT4-fs (loop3): Total free blocks count 0 [ 84.421059][ T7] EXT4-fs (loop3): Free/Dirty block details [ 84.434659][ T7] EXT4-fs (loop3): free_blocks=2415919504 [ 84.440697][ T7] EXT4-fs (loop3): dirty_blocks=10512 [ 84.446165][ T7] EXT4-fs (loop3): Block reservation details [ 84.453011][ T7] EXT4-fs (loop3): i_reserved_data_blocks=657 [ 84.471583][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 84.504043][ T7] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.504043][ T7] [ 84.534176][ T1630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 84.636511][ T1649] incfs: Options parsing error. -22 [ 84.641857][ T1649] incfs: mount failed -22 [ 85.720276][ T1672] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 85.729425][ T1672] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.745952][ T1672] netlink: 'syz.3.363': attribute type 13 has an invalid length. [ 85.756555][ T1672] gretap0: refused to change device tx_queue_len [ 85.763399][ T1672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 86.099037][ T24] kauditd_printk_skb: 121 callbacks suppressed [ 86.099047][ T24] audit: type=1400 audit(1764073002.230:899): avc: denied { bind } for pid=1680 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.337136][ T1688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 86.825774][ T1697] device bridge_slave_1 left promiscuous mode [ 86.832395][ T1697] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.840450][ T1697] device bridge_slave_0 left promiscuous mode [ 86.852313][ T1697] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.193823][ T24] audit: type=1400 audit(1764073003.340:900): avc: denied { write } for pid=1714 comm="syz.3.388" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.218482][ T1716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 87.222762][ T24] audit: type=1400 audit(1764073003.360:901): avc: denied { map } for pid=1714 comm="syz.3.388" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.257191][ T24] audit: type=1326 audit(1764073003.400:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 87.280774][ T24] audit: type=1326 audit(1764073003.400:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 87.305203][ T54] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.312945][ T24] audit: type=1326 audit(1764073003.400:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 87.337303][ T24] audit: type=1326 audit(1764073003.400:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 87.361133][ T24] audit: type=1326 audit(1764073003.400:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 87.384672][ T24] audit: type=1326 audit(1764073003.400:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 87.416695][ T24] audit: type=1326 audit(1764073003.400:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 87.541987][ T1724] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 87.624306][ T1730] x_tables: unsorted underflow at hook 3 [ 87.679061][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.691118][ T54] usb 1-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 87.704431][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.711110][ T54] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 87.951492][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.963264][ T54] usb 1-1: config 0 descriptor?? [ 87.999766][ T54] hub 1-1:0.0: bad descriptor, ignoring hub [ 88.006147][ T54] hub: probe of 1-1:0.0 failed with error -5 [ 88.676145][ T1761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 88.685926][ T1761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1761 comm=syz.4.404 [ 88.827412][ T1764] binfmt_misc: register: failed to install interpreter file ./file0 [ 89.203221][ T1786] overlayfs: unrecognized mount option "verity=require" or missing value [ 89.290144][ T276] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 89.333481][ T276] FAT-fs (loop3): Filesystem has been set read-only [ 89.346125][ T5] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 89.560496][ T276] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 89.599147][ T5] usb 1-1: device reset changed ep0 maxpacket size! [ 89.608323][ T5] usb 1-1: USB disconnect, device number 5 [ 89.719357][ T1796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'. [ 89.979193][ T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.984893][ T1800] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.994103][ T1800] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.002655][ T1800] device bridge_slave_0 entered promiscuous mode [ 90.011469][ T1800] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.021715][ T1800] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.045463][ T1800] device bridge_slave_1 entered promiscuous mode [ 90.269836][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 90.389208][ T5] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.403209][ T5] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.897974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.911769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.942142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.012429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.030220][ T1816] fuse: Bad value for 'group_id' [ 91.035428][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.042469][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.069089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.088092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.099351][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.106409][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.129062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.172661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.181365][ T24] kauditd_printk_skb: 2810 callbacks suppressed [ 91.181375][ T24] audit: type=1400 audit(1764073007.330:3719): avc: denied { getopt } for pid=1817 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.192595][ T5] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 91.217720][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.227414][ T5] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.237289][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.250395][ T5] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 91.259360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.259467][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.275932][ T5] usb 1-1: config 0 descriptor?? [ 91.287858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.309245][ T24] audit: type=1326 audit(1764073007.450:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dbc46c34b code=0x7ffc0000 [ 91.373928][ T1800] device veth0_vlan entered promiscuous mode [ 91.399090][ T24] audit: type=1326 audit(1764073007.450:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dbc46c34b code=0x7ffc0000 [ 91.429508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.437983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.445789][ T24] audit: type=1326 audit(1764073007.450:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dbc46c34b code=0x7ffc0000 [ 91.446044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.946187][ T24] audit: type=1326 audit(1764073007.450:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dbc46c34b code=0x7ffc0000 [ 92.018899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.055296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.091406][ T5] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 92.119371][ T24] audit: type=1326 audit(1764073007.450:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dbc46c34b code=0x7ffc0000 [ 92.126583][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.151725][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.174910][ T1800] device veth1_macvtap entered promiscuous mode [ 92.300259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.309005][ T24] audit: type=1326 audit(1764073007.480:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1dbc49f005 code=0x7ffc0000 [ 92.315566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.361902][ T24] audit: type=1326 audit(1764073007.690:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1822 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 92.391523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.419100][ T24] audit: type=1326 audit(1764073007.690:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1822 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 92.443892][ T1841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.452812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.462053][ T363] usb 1-1: USB disconnect, device number 6 [ 92.463178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.478939][ C0] usblp0: nonzero read bulk status received: -108 [ 92.687678][ T1781] usblp0: removed [ 92.726862][ T1845] netlink: 96 bytes leftover after parsing attributes in process `syz.4.431'. [ 92.740684][ T1847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.419'. [ 92.757168][ T7] device bridge_slave_1 left promiscuous mode [ 92.763653][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.771891][ T7] device veth1_macvtap left promiscuous mode [ 92.778024][ T7] device veth0_vlan left promiscuous mode [ 92.997496][ T1859] syz.4.434[1859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.997783][ T1859] syz.4.434[1859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.496430][ T1863] fuse: Bad value for 'fd' [ 93.914063][ T1878] syz.5.439[1878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.914117][ T1878] syz.5.439[1878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.029386][ T1880] 9pnet: Insufficient options for proto=fd [ 94.079065][ T283] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 94.412377][ T1868] F2FS-fs (loop2): Test dummy encryption mode enabled [ 94.423888][ T1868] F2FS-fs (loop2): invalid crc value [ 94.442458][ T1868] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.466126][ T1868] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.486986][ T1868] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 94.548999][ T283] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.629127][ T283] usb 1-1: config 174 has an invalid interface number: 178 but max is 0 [ 94.637781][ T283] usb 1-1: config 174 has an invalid descriptor of length 133, skipping remainder of the config [ 94.653512][ T283] usb 1-1: config 174 has no interface number 0 [ 94.662406][ T283] usb 1-1: config 174 interface 178 has no altsetting 0 [ 95.069206][ T283] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 95.092865][ T283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.115293][ T283] usb 1-1: Product: syz [ 95.119504][ T283] usb 1-1: Manufacturer: syz [ 95.124146][ T283] usb 1-1: SerialNumber: syz [ 95.258952][ T5] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 95.370872][ T1871] input: syz1 as /devices/virtual/input/input6 [ 95.449246][ T283] usb 1-1: bad CDC descriptors [ 95.454147][ T283] usb 1-1: unsupported MDLM descriptors [ 95.462326][ T283] usb 1-1: USB disconnect, device number 7 [ 95.659070][ T5] usb 7-1: unable to get BOS descriptor or descriptor too short [ 95.739091][ T5] usb 7-1: config 174 has an invalid interface number: 178 but max is 0 [ 96.489012][ T317] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.809033][ T317] usb 3-1: Using ep0 maxpacket: 8 [ 96.875704][ T1955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.462'. [ 96.919898][ T1953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 96.945539][ T24] kauditd_printk_skb: 122 callbacks suppressed [ 96.945557][ T24] audit: type=1400 audit(1764073013.090:3848): avc: denied { bind } for pid=1931 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.003579][ T24] audit: type=1400 audit(1764073013.120:3849): avc: denied { name_bind } for pid=1931 comm="syz.4.455" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 97.024027][ T5] usb 7-1: config 174 has an invalid descriptor of length 133, skipping remainder of the config [ 97.025209][ T317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.035237][ T5] usb 7-1: config 174 has no interface number 0 [ 97.035256][ T5] usb 7-1: config 174 interface 178 has no altsetting 0 [ 97.045717][ T24] audit: type=1400 audit(1764073013.120:3850): avc: denied { node_bind } for pid=1931 comm="syz.4.455" saddr=172.20.20.29 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 97.051686][ T317] usb 3-1: config 0 has no interfaces? [ 97.230888][ T5] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 97.399379][ T317] usb 3-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 97.430388][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.494197][ T317] usb 3-1: Product: syz [ 97.494363][ T5] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.520019][ T5] usb 7-1: Product: syz [ 97.524243][ T5] usb 7-1: Manufacturer: syz [ 97.528847][ T5] usb 7-1: SerialNumber: syz [ 97.551117][ T317] usb 3-1: Manufacturer: syz [ 97.555787][ T317] usb 3-1: SerialNumber: syz [ 97.561593][ T317] usb 3-1: config 0 descriptor?? [ 97.613135][ T1970] fuse: Bad value for 'rootmode' [ 97.809477][ T5] usb 7-1: bad CDC descriptors [ 97.814449][ T5] usb 7-1: unsupported MDLM descriptors [ 97.821481][ T5] usb 7-1: USB disconnect, device number 2 [ 98.589094][ T24] audit: type=1400 audit(1764073014.710:3851): avc: denied { append } for pid=1986 comm="syz.0.472" name="ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.758574][ T1995] syz.6.475[1995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.761217][ T1995] syz.6.475[1995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.851493][ T283] usb 3-1: USB disconnect, device number 6 [ 98.876578][ T1995] tipc: Started in network mode [ 98.886659][ T1995] tipc: Own node identity a6ff3ce94d28, cluster identity 4711 [ 98.911602][ T1995] tipc: Enabled bearer , priority 0 [ 98.963230][ T1994] tipc: Disabling bearer [ 98.990580][ T1997] EXT4-fs (loop2): Ignoring removed bh option [ 98.996711][ T1997] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.040499][ T1997] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000005,delalloc,bh,dioread_nolock, [ 100.676830][ T24] audit: type=1400 audit(1764073016.820:3852): avc: denied { mount } for pid=2052 comm="syz.5.495" name="/" dev="ramfs" ino=21504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.777297][ T24] audit: type=1400 audit(1764073016.920:3853): avc: denied { read } for pid=2038 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.935485][ T2057] netlink: 56 bytes leftover after parsing attributes in process `syz.5.497'. [ 101.333782][ T24] audit: type=1400 audit(1764073017.480:3854): avc: denied { mounton } for pid=2070 comm="syz.5.502" path="/108/file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.333805][ T2071] fuse: Bad value for 'user_id' [ 101.617584][ T24] audit: type=1400 audit(1764073017.760:3855): avc: denied { write } for pid=2070 comm="syz.5.502" name="file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.678967][ T24] audit: type=1326 audit(1764073017.800:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 101.702876][ T24] audit: type=1326 audit(1764073017.800:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 101.838384][ T2075] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 101.857387][ T2075] F2FS-fs (loop6): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 102.115651][ T2099] tipc: Failed to remove local publication {66,1,1}/4203560003 [ 102.123309][ T2099] tipc: Failed to remove local publication {66,1,1}/4203560003 [ 102.131123][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 102.131133][ T24] audit: type=1326 audit(1764073018.260:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.164873][ T24] audit: type=1326 audit(1764073018.260:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.198603][ T24] audit: type=1326 audit(1764073018.260:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.242635][ T24] audit: type=1326 audit(1764073018.260:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.290703][ T24] audit: type=1326 audit(1764073018.260:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.318094][ T24] audit: type=1326 audit(1764073018.260:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.319041][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 102.341728][ T24] audit: type=1326 audit(1764073018.260:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.364640][ T2106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.512'. [ 102.372935][ T24] audit: type=1326 audit(1764073018.260:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.381560][ T2106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.512'. [ 102.405180][ T24] audit: type=1326 audit(1764073018.260:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 102.491561][ T24] audit: type=1326 audit(1764073018.260:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2096 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbc30749 code=0x7ffc0000 [ 103.309197][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.352280][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.459064][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.468961][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.476940][ T25] usb 1-1: SerialNumber: syz [ 104.427821][ T2142] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 104.441434][ T2147] netlink: 108 bytes leftover after parsing attributes in process `syz.4.519'. [ 104.701366][ T2159] EXT4-fs (loop2): Ignoring removed nobh option [ 104.707814][ T2159] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.718976][ T734] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 104.869352][ T2159] EXT4-fs (loop2): orphan cleanup on readonly fs [ 104.878796][ T2159] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 104.895299][ T2159] EXT4-fs (loop2): Remounting filesystem read-only [ 104.902415][ T2159] EXT4-fs error (device loop2): ext4_acquire_dquot:6224: comm syz.2.530: Failed to acquire dquot type 0 [ 104.935170][ T2159] EXT4-fs (loop2): 1 truncate cleaned up [ 104.941562][ T2159] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012 [ 105.099656][ T25] usb 1-1: 0:2 : does not exist [ 105.140360][ T25] usb 1-1: USB disconnect, device number 8 [ 105.159226][ T734] usb 7-1: unable to get BOS descriptor or descriptor too short [ 105.219081][ T734] usb 7-1: not running at top speed; connect to a high speed hub [ 105.329009][ T734] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.339256][ T734] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.759021][ T734] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.768150][ T734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.776175][ T734] usb 7-1: Product: syz [ 105.780427][ T734] usb 7-1: Manufacturer: syz [ 105.785024][ T734] usb 7-1: SerialNumber: syz [ 106.236223][ T734] usb 7-1: 0:2 : does not exist [ 106.250829][ T734] usb 7-1: USB disconnect, device number 3 [ 107.898966][ T54] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 108.138958][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 108.138969][ T24] audit: type=1326 audit(1764073024.200:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 108.208990][ T24] audit: type=1326 audit(1764073024.200:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 108.232302][ T24] audit: type=1326 audit(1764073024.200:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 108.261543][ T24] audit: type=1326 audit(1764073024.200:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 108.309003][ T24] audit: type=1326 audit(1764073024.200:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 108.348950][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 108.354100][ T24] audit: type=1326 audit(1764073024.200:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d9f102f90 code=0x7ffc0000 [ 108.377606][ T24] audit: type=1326 audit(1764073024.200:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5d9f105f77 code=0x7ffc0000 [ 108.409147][ T24] audit: type=1326 audit(1764073024.200:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d9f104749 code=0x7ffc0000 [ 108.438150][ T24] audit: type=1326 audit(1764073024.200:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5d9f105f77 code=0x7ffc0000 [ 108.461689][ T24] audit: type=1326 audit(1764073024.200:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2202 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5d9f1033aa code=0x7ffc0000 [ 108.498993][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.510673][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.520716][ T54] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.530776][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.539995][ T54] usb 1-1: config 0 descriptor?? [ 109.174157][ T2194] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 109.183753][ T2194] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 109.193261][ T2194] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #3: block 1: comm syz.0.540: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.207627][ T2194] EXT4-fs error (device loop0): ext4_acquire_dquot:6224: comm syz.0.540: Failed to acquire dquot type 0 [ 109.219378][ T2194] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm syz.0.540: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.232625][ T2224] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 109.233727][ T2194] EXT4-fs error (device loop0): ext4_acquire_dquot:6224: comm syz.0.540: Failed to acquire dquot type 0 [ 109.251919][ T2194] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.540: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.265800][ T2194] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm syz.0.540: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.280125][ T2194] EXT4-fs error (device loop0): ext4_acquire_dquot:6224: comm syz.0.540: Failed to acquire dquot type 0 [ 109.280653][ T2224] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0,user_xattr, [ 109.291758][ T2194] EXT4-fs (loop0): 1 orphan inode deleted [ 109.320416][ T2194] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noload,noauto_da_alloc,sb=0x0000000000000002,usrjquota=./file0,nomblk_io_submit,,errors=continue [ 109.469008][ T54] usbhid 1-1:0.0: can't add hid device: -71 [ 109.475062][ T54] usbhid: probe of 1-1:0.0 failed with error -71 [ 109.504116][ T54] usb 1-1: USB disconnect, device number 9 [ 109.517913][ T2236] netlink: 'syz.0.552': attribute type 3 has an invalid length. [ 109.967039][ T2241] incfs: Options parsing error. -22 [ 109.973072][ T2241] incfs: mount failed -22 [ 110.948963][ T54] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.668957][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 112.129046][ T54] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 112.137304][ T54] usb 1-1: config 1 has no interface number 0 [ 112.143605][ T54] usb 1-1: config 1 interface 242 has no altsetting 0 [ 112.409984][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 112.719017][ T54] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 112.728121][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.736382][ T54] usb 1-1: Product: syz [ 113.039064][ T54] usb 1-1: can't set config #1, error -71 [ 113.045673][ T54] usb 1-1: USB disconnect, device number 10 [ 113.102887][ T2303] tipc: Failed to remove local publication {66,1,1}/376238677 [ 113.111193][ T2303] tipc: Failed to remove local publication {66,1,1}/376238677 [ 113.180474][ T2306] xt_TCPMSS: Only works on TCP SYN packets [ 114.020750][ T54] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.048592][ T2323] overlayfs: failed to resolve './bus': -2 [ 114.259231][ T24] kauditd_printk_skb: 73 callbacks suppressed [ 114.259243][ T24] audit: type=1400 audit(1764073030.400:4019): avc: denied { associate } for pid=2326 comm="syz.2.580" name="121" dev="tmpfs" ino=695 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 114.366600][ T2333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'. [ 114.390508][ T24] audit: type=1400 audit(1764073030.530:4020): avc: denied { shutdown } for pid=2326 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.528952][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 114.649030][ T54] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 114.657171][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.667322][ T54] usb 1-1: config 0 has no interface number 0 [ 114.673435][ T54] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 114.682505][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.691287][ T54] usb 1-1: config 0 descriptor?? [ 114.729794][ T54] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 114.736794][ T54] uvcvideo: No valid video chain found. [ 114.932178][ T20] usb 1-1: USB disconnect, device number 11 [ 115.063357][ T2342] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.087448][ T2342] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 115.097729][ T2342] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 115.192632][ T2346] raw_sendmsg: syz.2.585 forgot to set AF_INET. Fix it! [ 115.305616][ T2349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'. [ 115.340370][ T2351] device syzkaller0 entered promiscuous mode [ 116.262261][ T24] audit: type=1400 audit(1764073032.410:4021): avc: denied { read } for pid=2363 comm="syz.5.591" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.948957][ T24] audit: type=1326 audit(1764073034.070:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 118.012856][ T24] audit: type=1326 audit(1764073034.070:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 118.068942][ T24] audit: type=1326 audit(1764073034.070:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 118.221759][ T24] audit: type=1326 audit(1764073034.070:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 118.310893][ T24] audit: type=1326 audit(1764073034.070:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 118.334469][ T24] audit: type=1326 audit(1764073034.070:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 118.371754][ T24] audit: type=1326 audit(1764073034.070:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 118.797327][ T2408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.604'. [ 118.915254][ T2414] netlink: 96 bytes leftover after parsing attributes in process `syz.4.608'. [ 118.952165][ T2424] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.052662][ T2424] FAT-fs (loop9): unable to read boot sector [ 120.016711][ T2446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2446 comm=syz.4.617 [ 120.155119][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 120.155129][ T24] audit: type=1400 audit(1764073036.300:4068): avc: denied { setopt } for pid=2453 comm="syz.6.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.538444][ T2465] loop6: p1 < > p4 < > [ 120.552575][ T2454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.620'. [ 120.755770][ T2474] 9pnet: Insufficient options for proto=fd [ 120.847807][ T2477] overlayfs: failed to resolve './bus': -2 [ 121.017787][ T2478] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 121.024368][ T2478] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 121.055927][ T2478] F2FS-fs (loop0): Unrecognized mount option "00000000000000000000007" or missing value [ 121.656878][ T2493] syz.6.631[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.657135][ T2493] syz.6.631[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.541442][ T2501] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 122.900370][ T2513] netlink: 'syz.6.640': attribute type 12 has an invalid length. [ 122.952947][ T2492] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 122.973864][ T2492] F2FS-fs (loop2): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 123.569370][ T2534] syz.2.646[2534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.569643][ T2534] syz.2.646[2534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.071612][ T2528] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 124.093902][ T2528] F2FS-fs (loop0): Unrecognized mount option "prjjta=noflush_merge" or missing value [ 124.129964][ T2547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.137210][ T2547] IPv6: NLM_F_CREATE should be set when creating new route [ 124.179128][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.649'. [ 124.544964][ T24] audit: type=1400 audit(1764073040.690:4069): avc: denied { mounton } for pid=2560 comm="syz.5.654" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 124.545043][ T2561] incfs: mount failed -22 [ 124.974238][ T24] audit: type=1326 audit(1764073041.120:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 124.998662][ T24] audit: type=1326 audit(1764073041.120:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f69181611ff code=0x7ffc0000 [ 125.023464][ T24] audit: type=1326 audit(1764073041.120:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.047942][ T24] audit: type=1326 audit(1764073041.120:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.071579][ T24] audit: type=1326 audit(1764073041.120:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.103053][ T24] audit: type=1326 audit(1764073041.120:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.126621][ T24] audit: type=1326 audit(1764073041.120:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.150270][ T24] audit: type=1326 audit(1764073041.120:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.180113][ T24] audit: type=1326 audit(1764073041.120:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.228322][ T24] audit: type=1326 audit(1764073041.120:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.251923][ T24] audit: type=1326 audit(1764073041.120:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.275721][ T24] audit: type=1326 audit(1764073041.120:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.5.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6918162749 code=0x7ffc0000 [ 125.380328][ T24] audit: type=1400 audit(1764073041.530:4082): avc: denied { load_policy } for pid=2588 comm="syz.6.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.380725][ T2589] SELinux: failed to load policy [ 125.460302][ T24] audit: type=1326 audit(1764073041.610:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 125.485059][ T24] audit: type=1326 audit(1764073041.610:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 125.522281][ T24] audit: type=1326 audit(1764073041.630:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 125.546967][ T2584] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 125.558807][ T2584] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.569863][ T24] audit: type=1326 audit(1764073041.650:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 125.593380][ T24] audit: type=1326 audit(1764073041.650:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbc46c749 code=0x7ffc0000 [ 125.653073][ T2603] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.654257][ T2596] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x00000000ffffffe0" or missing value [ 125.676580][ T2603] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.829800][ T2603] syz.6.667[2603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.829854][ T2603] syz.6.667[2603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.856115][ T2638] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 126.856115][ T2638] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 126.856115][ T2638] [ 126.887301][ T2638] EXT4-fs (loop0): #blocks per group too big: 65535 [ 228.438811][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 228.445789][ C1] (detected by 1, t=10002 jiffies, g=12021, q=194) [ 228.452362][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294960066-4294950063), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 228.465707][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g12021 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 228.476873][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 228.486822][ C1] rcu: RCU grace-period kthread stack dump: [ 228.492689][ C1] task:rcu_preempt state:R running task stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 228.503448][ C1] Call Trace: [ 228.506735][ C1] __schedule+0xb47/0x1310 [ 228.511136][ C1] ? release_firmware_map_entry+0x18d/0x18d [ 228.517012][ C1] ? __mod_timer+0x7ae/0xb30 [ 228.521581][ C1] schedule+0x13c/0x1d0 [ 228.525722][ C1] schedule_timeout+0x12c/0x2d0 [ 228.530554][ C1] ? console_conditional_schedule+0x10/0x10 [ 228.536428][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 228.541867][ C1] ? run_local_timers+0x160/0x160 [ 228.546877][ C1] ? prepare_to_swait_event+0x320/0x340 [ 228.552404][ C1] rcu_gp_kthread+0x100a/0x26a0 [ 228.557241][ C1] ? rcu_barrier_callback+0x50/0x50 [ 228.562427][ C1] ? __kasan_check_read+0x11/0x20 [ 228.567434][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 228.572356][ C1] kthread+0x346/0x3d0 [ 228.576407][ C1] ? rcu_barrier_callback+0x50/0x50 [ 228.581585][ C1] ? kthread_blkcg+0xd0/0xd0 [ 228.586158][ C1] ret_from_fork+0x1f/0x30 [ 285.388983][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 156s! [ 285.397903][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 156s! [ 285.406352][ C0] Showing busy workqueues and worker pools: [ 285.412252][ C0] workqueue events: flags=0x0 [ 285.416919][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.424550][ C0] pending: psi_avgs_work [ 285.429155][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.436792][ C0] pending: vmstat_shepherd [ 285.441576][ C0] workqueue events_long: flags=0x0 [ 285.446668][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.454297][ C0] pending: br_fdb_cleanup [ 285.458986][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.466614][ C0] pending: br_fdb_cleanup [ 285.471326][ C0] workqueue events_unbound: flags=0x2 [ 285.476697][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/512 refcnt=3 [ 285.483894][ C0] pending: toggle_allocation_gate [ 285.489350][ C0] workqueue events_power_efficient: flags=0x80 [ 285.495479][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.503113][ C0] pending: wg_ratelimiter_gc_entries [ 285.508764][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 285.516442][ C0] pending: neigh_periodic_work, neigh_periodic_work, check_lifetime, gc_worker [ 285.525762][ C0] workqueue rcu_gp: flags=0x8 [ 285.530435][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.538065][ C0] pending: srcu_invoke_callbacks [ 285.543360][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.548534][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.556165][ C0] pending: vmstat_update [ 285.560756][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.568387][ C0] pending: vmstat_update [ 285.572989][ C0] workqueue writeback: flags=0x4a [ 285.577990][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 285.585184][ C0] pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 285.592330][ C0] workqueue kblockd: flags=0x18 [ 285.597158][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.604963][ C0] pending: blk_mq_timeout_work [ 285.610081][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 285.617886][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 285.624845][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.630207][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.637840][ C0] pending: work_fn [ 285.641975][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.647583][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 285.655037][ C0] pending: addrconf_dad_work [ 285.659966][ C0] delayed: addrconf_verify_work [ 285.665178][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.670454][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.678081][ C0] pending: wg_packet_encrypt_worker [ 285.683630][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.691262][ C0] pending: wg_packet_encrypt_worker [ 285.696821][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.702097][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.709727][ C0] pending: wg_packet_encrypt_worker [ 285.715279][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.722905][ C0] pending: wg_packet_encrypt_worker [ 285.728460][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.733732][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.741365][ C0] pending: wg_packet_encrypt_worker [ 285.746924][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.754553][ C0] pending: wg_packet_encrypt_worker [ 285.760116][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.765381][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.773014][ C0] pending: wg_packet_encrypt_worker [ 285.778563][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.786194][ C0] pending: wg_packet_encrypt_worker [ 285.791749][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.797010][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.804639][ C0] pending: wg_packet_encrypt_worker [ 285.810189][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.817816][ C0] pending: wg_packet_encrypt_worker [ 285.823370][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.828368][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 285.835565][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 285.844604][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.849620][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.856811][ C0] pending: wg_packet_handshake_send_worker [ 285.862971][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.868236][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.875865][ C0] pending: wg_packet_encrypt_worker [ 285.881423][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.889052][ C0] pending: wg_packet_encrypt_worker [ 285.894607][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.899622][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.906815][ C0] pending: wg_packet_handshake_send_worker [ 285.912974][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.918235][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.925865][ C0] pending: wg_packet_encrypt_worker [ 285.931422][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.939053][ C0] pending: wg_packet_encrypt_worker [ 285.944609][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.949886][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.957517][ C0] pending: wg_packet_encrypt_worker [ 285.963123][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.970761][ C0] pending: wg_packet_encrypt_worker