last executing test programs: 50.104298777s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r5}, 0x38) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d0000001801000020646c2500000000002620207b1af5ff00000000bfa100000000000007018410233719c4b9dbe80000f8ffffffb702000008000000b703000000000000850000006d00000095f732c2b2bbc0afb4e266e7e0ea945fd99a6089d251865630b67affa156126234b7f4f43d27d2e17a163f4d1e0999d85366"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000038500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0xe, 0x0, &(0x7f0000000e00)="ffffff005a1f33f29db5123986dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r6, 0x0, 0x0}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)={0x6, 0x0, [{0x219, 0x0, 0x5}, {0xac2, 0x0, 0x2}, {0x8e5, 0x0, 0xfffffffffffffffb}, {0x3c2, 0x0, 0x80000000}, {0x345, 0x0, 0x3}, {0xcd, 0x0, 0x3}]}) 49.63302786s ago: executing program 3 (id=8): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") lchown(&(0x7f0000000380)='./file0\x00', 0xee00, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x15, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000280)='./file0\x00', 0xce) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r9}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b001808003950323030302e4c"], 0x15) r12 = dup(r11) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) 49.326727242s ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000001080)=""/4096, 0x1000) 49.218611002s ago: executing program 3 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r8, 0x0) 49.218189072s ago: executing program 32 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r8, 0x0) 30.310606867s ago: executing program 1 (id=145): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) (fail_nth: 5) 30.013638798s ago: executing program 1 (id=147): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xa000, 0x4) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18004b64ffec9500"/17], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x0, 0x7, 0x1}) r3 = syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mlockall(0x4) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r7 = syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_on}, {@redirect_dir_nofollow}, {@metacopy_off}], [{@permit_directio}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'lo\xc4\\\xeb\x01qr'}}], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r8, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000100)='./file2\x00', 0x0) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0xffffffffffffff68, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000", @ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0x69) 28.178079058s ago: executing program 1 (id=153): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2010, 0x0) 28.056635568s ago: executing program 1 (id=157): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x100800) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000240)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x2, @desc3}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a7c9a640115d99d981b3886420589c6695d4982a83b7906769e737201a3fb7a7804454156569cb03a5be811debc957b5831b89b59d703e74a37c00", 0x25}, 0x48, 0xfffffffffffffffd) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000094e80379dbddc3f0000009500000000000000467b49e39b9a2b980c9a1343998a9fd3bc25ff1bb07021b4b113a5b78fc288d2cdbde8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 27.449208161s ago: executing program 5 (id=160): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2dc, 0x0, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2c0, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x1d4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback={0xffffffffffffff80}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 27.312257572s ago: executing program 1 (id=162): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000580)=""/197, &(0x7f0000000680)=""/201, &(0x7f0000000280)=""/63, 0xdddd0000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="204e4dcb239b00000010003704ec089b2e5e01000000000000002d0000000000000000000000008680d8e6b90f19de2a507fe6e475db7901aaed45df01d5419ad0083aef9714a46a723cfe3beb61302a935e62999426dd27d0faea9c796c2147b57c66e170bae03281b49addde37", @ANYRES32, @ANYBLOB="9201000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2044040}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x3, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8a024, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f2564df650e42c459d28335f293ee4593eb9801ee25697e12b064465b96caa233deea7fd509b23559bb0849cc0d16551657803d151b0fb94e564e8ed656726cb5a6acaf4c397a4707582559bba64273385f17879b57983339104c18a5268d23dd954e4515200dee98447a0e2069a9a8331894bc300152bfcb5b53cd891e29bb1af55e6160f375332d19dac8d2f4a8676b559e7ab46fa62404d8ae0b475f89469116f94e55e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 26.638610595s ago: executing program 1 (id=165): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r3 = dup2(r2, r2) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x40000, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 26.638366975s ago: executing program 33 (id=165): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r3 = dup2(r2, r2) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x40000, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 26.526071346s ago: executing program 5 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r8, 0x0) 25.645191621s ago: executing program 5 (id=173): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000040)="33bd54fd33612ca6ceef4da246f82aca95f8177bbe184d4a57d8d8fa55eb4aa2328040c2b83e2f8243bd3169e48b76639be0764b1f4bc7b98be63c9a7d50", 0x3e, 0x48894, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r5 = dup2(r4, r4) fcntl$setflags(r3, 0x2, 0x0) write$tun(r5, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 25.614372521s ago: executing program 5 (id=174): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x2, @desc3}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 25.441712431s ago: executing program 5 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="090000000000082000000100000000000000a812a7d9d419325aa80f5b7a7d3e4f944a83c5b7948abeb0d0b02058a3ce0ad7954b7a6d179781b538b918d7eb7eef2e624669f5893918792efb4ac50d82d5d5ff62a1cdd137e76e34", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001a3000/0x4000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1}) 25.103984263s ago: executing program 5 (id=179): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x7, 0x4f6, &(0x7f0000004cc0)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffc, 0x3f}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) 25.099368293s ago: executing program 34 (id=179): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x7, 0x4f6, &(0x7f0000004cc0)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffc, 0x3f}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) 20.492276567s ago: executing program 0 (id=202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) 20.472017816s ago: executing program 0 (id=204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x2, '_h'}, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) 19.429130332s ago: executing program 2 (id=209): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 19.236714393s ago: executing program 2 (id=210): r0 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000380)=0x8, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, 0x0, 0x0) timer_getoverrun(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB, @ANYRESOCT=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[], 0x15) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wflno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000240), 0xfe, 0x49e, &(0x7f0000000580)="$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") 18.253441388s ago: executing program 2 (id=215): read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'ext3\x00'}}, {@appraise}]}, 0x1, 0x780, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbDdNk1YTQfDHKSBooHRjamwVPFQ8iGChoGfbZbMNNZtsyW5KEwK2iOBFUPEg6KVnf9SbV39c9b/wIC1V02LFg0Rms9tum910k2Z3A/l8YLLvzczmve++mTdvdoadAPassfRPJuKpiPg4iRipz08iYqCWykacWF/v9upKIZ2SWFt768+kts6t1ZVCNL0ndbCeeTIifvog4nBmY7mVpeXZfKlUXKjnJ6pz5ycqS8tHzs3lZ4ozxfljk1NTR4+/ePzYzsX696/Lh65/8vpz35749/0nrn70cxIn4lB9WXMcO2UsxuqfyUD6Ed7jtZ0urM+SfleAbWnsmtlI+4CR2FdLtTHUq1oBAN30XkSsAQB7TOL4DwB7TON7gFurK4XG1N9vJHrrxqsRcWA9/sb1zfUl2fo1uwO166DDt5J7rowkETG6A+WPRcSX37/zdTpFl65DArRy6XJEnBkd29j/JxvuWdiq5zdbuDZYexm7b7b+D3rnh3T881Kr8V/mzvgnWox/Blvsu9vx4P0/c20HimkrHf+90nRv2+2m+OtG99Vzj9TGfAPJ2XOlYtq3PRoR4zEwmOYna6u2vgtq/OZ/N9uV3zz+++vTd79Ky09f766RuZYdvPc90/lq/mHjbrhxOeLpbKv4kzvtn7QZ/57qsIw3Xv7wi3bL0vjTeBvTxvi7a+1KxLMt2/9uWyab3p84UdscJhobRQvf/fb5cLvym9s/ndLyG+cCvZC2//Dm8Y8mzfdrVrZexi9XRn5st+zB8bfe/vcnb9fS++vzLuar1YXJiP3JmxvnH7373ka+sX4a//gzrff/zbb/9JzwTIfxZ6//8c324++uNP7pLbX/1hNXb8/ua1d+Z+0/VUuN1+d00v91WsGH+ewAAAAAAAAAAAAAAAAAAAAAAAAAoFOZiDgUSSZ3J53J5HLrz/B+PIYzpXKlevhseXF+OmrPyh6NgUzjpy5Hmn4PdbL+e/iN/NH78i9ExGMR8dngUC2fK5RL0/0OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqDrZ5/n/q98F+1w4A6JoD/a4AANBzjv8AsPds7fg/1LV6AAC94/wfAPaejo//Z7pbDwCgd5z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GWnTp5Mp7V/VlcKaX76wtLibPnCkeliZTY3t1jIFcoL53Mz5fJMqZgrlOfa/qNL6y+lcvn8VMwvXpyoFivVicrS8um58uJ89fS5ufxM8XRxoGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnKkvLs/lSqbggsWliaHdUY9cksrErqiHRtURzLzHUvw4KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJf7PwAA//8OBCrW") (async) syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'ext3\x00'}}, {@appraise}]}, 0x1, 0x780, &(0x7f00000007c0)="$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") 18.022474369s ago: executing program 2 (id=216): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x100800) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000240)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x2, @desc3}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a7c9a640115d99d981b3886420589c6695d4982a83b7906769e737201a3fb7a7804454156569cb03a5be811debc957b5831b89b59d703e74a37c00", 0x25}, 0x48, 0xfffffffffffffffd) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 17.934866999s ago: executing program 2 (id=217): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="643c87cf", 0x4}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[], 0x0) 17.597200771s ago: executing program 2 (id=218): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000004"], 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061109b0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002400)=@newtaction={0xfa4, 0x30, 0x12f, 0x0, 0x0, {}, [{0xf90, 0x1, [@m_pedit={0xf8c, 0x3, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x200, 0x5, 0x0, 0xfff, 0x3}, 0x6, 0x6, [{0x8, 0x7, 0x89, 0x2, 0xfffffffe, 0x5}, {0x1e4, 0x4, 0x3, 0x5, 0x300000, 0x7}, {0x200, 0x4, 0x80000000, 0x2, 0x5, 0x9}]}, [{0xd, 0x8, 0x40, 0x6, 0x3, 0x8001}, {0x8, 0x0, 0x8, 0x2, 0x9, 0x5}, {0x9, 0x5, 0x5, 0x1, 0x6, 0x1}, {0x5, 0x5, 0xc8, 0x2f3cf40, 0x5, 0x7}, {0x1000, 0xfffffffb, 0x9, 0xe, 0x6, 0xfffffffc}, {0x8, 0x8, 0xd00, 0x7, 0x5, 0x6}, {0x20, 0x7, 0x0, 0x7, 0x1, 0x7}, {0x3, 0x1, 0x2, 0x0, 0xfffffffc, 0x2}, {0x5, 0x5, 0xfffffffc, 0x8, 0x5, 0x3}, {0x1ff, 0x991, 0x5, 0x800, 0x3, 0x1}, {0x80000001, 0x8, 0x2, 0x6, 0x0, 0x7265}, {0x0, 0x8, 0x0, 0x8, 0x7, 0x2}, {0x3, 0x16bd, 0x8, 0x4, 0x5, 0xd2bd}, {0x7ff, 0x3, 0xe, 0xfffffffe, 0x5, 0x6}, {0x7fff, 0x6, 0x7f, 0x9, 0x174, 0x200}, {0x0, 0x4, 0x7, 0x8001, 0x8, 0x4}, {0x6, 0x796, 0x2, 0x3, 0x13, 0x2}, {0x2, 0xfffffff9, 0x8, 0xfffffff1, 0x7, 0x8}, {0x370, 0x81, 0x6, 0x9, 0xff}, {0x2, 0x6, 0xfffffffb, 0xc, 0x66b2ce04, 0x4}, {0x4, 0x25, 0x3ff, 0x26594e1d, 0x100a, 0x7b}, {0x1, 0xa, 0x9, 0x1, 0x10, 0x3c5d}, {0x36, 0x9, 0x3, 0x800000d4, 0x9, 0x1}, {0x85, 0x9f17, 0x40, 0x3, 0x3, 0x9}, {0x6e1, 0x8f, 0x1, 0x1, 0x7, 0x2}, {0x2, 0x3, 0x5, 0x6bf, 0xe4f, 0x3ff}, {0x1ff, 0x0, 0x208, 0x9, 0x9, 0x843f}, {0x3, 0xa, 0x6, 0xfffffa81, 0x7, 0x6}, {0x73, 0x7fffffff, 0x3, 0xb84, 0x7fff, 0x8}, {0x9, 0x288, 0x8, 0x4, 0x4, 0x6}, {0x2d, 0x3, 0x1, 0x3, 0x10, 0x7c3}, {0x48, 0x8000, 0xffff769b, 0x9, 0x800, 0x10001}, {0xe8fa, 0x1, 0x7, 0x9, 0x4, 0x3}, {0xfffffff9, 0x10, 0x8, 0x3, 0xd4b3, 0x8}, {0x7fffffff, 0x7, 0xfffffff7, 0x8, 0xd, 0x8}, {0xffffffff, 0x4, 0x5, 0x3, 0x8, 0x3}, {0xf6, 0xa6e9, 0x2, 0x8, 0x72d, 0x3}, {0x2, 0x3, 0x9, 0x11f20, 0x10000, 0x1}, {0x0, 0x6, 0x8000, 0x7, 0x5, 0x1}, {0x6, 0x101, 0x9, 0x7fffffff, 0x2, 0x2}, {0x7f, 0x0, 0x8, 0x4, 0x1, 0xb}, {0xd, 0xa738, 0xeedc, 0xfffffffa, 0xe, 0x7}, {0x1531, 0x9b, 0x7fff, 0x2, 0x5, 0x6}, {0x40, 0x8a0, 0x5, 0x3, 0x8}, {0x2, 0x7, 0x8001, 0x7, 0x0, 0x40}, {0xff, 0x6, 0x1, 0x3, 0x8, 0x8001}, {0x7, 0x2, 0x1000, 0x5, 0x80000000, 0x7}, {0xd2b, 0x5, 0x3, 0x8, 0x12000, 0xfffffc01}, {0x4, 0x0, 0xfffffff7, 0x800, 0x5, 0x7}, {0x3, 0x4, 0x566, 0x7fffffff, 0xe, 0x8}, {0x0, 0x5, 0x2, 0x7, 0x2, 0xfffffffb}, {0x3, 0x0, 0x6, 0x80, 0x29, 0x40}, {0x5, 0x35, 0x1, 0x3, 0x4, 0x40000}, {0x4a, 0x9, 0x1, 0xfffffffd, 0x0, 0x10}, {0xad8, 0x0, 0x2d, 0x0, 0xe, 0x3}, {0x7, 0x6, 0x40, 0x3, 0xfffffffe, 0xfffffffb}, {0x4cc3, 0x4, 0x100, 0xb800000, 0x2, 0xfffffffd}, {0x6, 0x3, 0x7, 0x3c807ceb, 0x8, 0x7ff}, {0x3, 0x4, 0x7, 0x8, 0x7, 0xe}, {0x7, 0x2, 0x7ff, 0x0, 0x1a9, 0x6}, {0x1000, 0x17800839, 0x3, 0x224d, 0x8, 0x8}, {0x47, 0x3, 0xffffffc0, 0x8, 0x7ff, 0x81}, {0xfffffffc, 0x4, 0x2, 0x200, 0x80, 0x704}, {0x200, 0x7, 0xfffffffa, 0x9, 0xdd1d, 0x3}, {0xbf67, 0x7ff, 0x0, 0xa2ee, 0x0, 0x400}, {0x3ff, 0x4, 0x9, 0x1, 0xe74, 0x5}, {0x8001, 0xd, 0xc61b, 0x6, 0x8, 0x6}, {0x6, 0x4, 0x1, 0xe1, 0x3, 0x20}, {0x6, 0x7, 0x10001, 0x2, 0x9, 0x3}, {0xea0, 0x10001, 0x4, 0x5, 0xc6}, {0x6, 0x5, 0x1, 0xd, 0x7ff, 0x6}, {0x8, 0x5, 0x2, 0x7, 0x8, 0x4}, {0xfffffffb, 0x9, 0x80, 0x0, 0x9, 0x1ff}, {0x8, 0x400, 0x8, 0x8, 0x9b00, 0x8}, {0xfffffffb, 0xfffffffe, 0x6, 0x0, 0x1, 0x9}, {0xc0000000, 0x1, 0xffff8000, 0x5, 0x2, 0x6}, {0x7f, 0x2, 0x0, 0x3, 0xbd, 0x8d9}, {0x8000, 0x24000000, 0x7, 0x40, 0x3}, {0x9, 0x59, 0x80000001, 0x1, 0x40, 0x5}, {0x8, 0x400, 0xd6, 0xec4, 0xc52, 0x2}, {0x8, 0x4, 0x0, 0x0, 0x8, 0x6d8c001d}, {0x0, 0x7, 0xae, 0x11, 0x101, 0x10001}, {0x1, 0x8, 0x7, 0x6, 0x80000000, 0x10001}, {0x1, 0x9, 0xf89, 0x7fb1, 0xfffffff7}, {0xfffffff7, 0x401, 0xfffff278, 0x7fff, 0x8, 0xfffffffb}, {0x9, 0x3, 0xe8c, 0x5, 0x3, 0x8}, {0x1, 0x4, 0x4, 0x3, 0x322d80e3, 0xc}, {0xff, 0x1, 0x3, 0x0, 0x58, 0xeb}, {0x3bf0, 0x0, 0x3ff, 0x0, 0x9, 0x5}, {0x3, 0xfffffff8, 0x1, 0x8, 0x0, 0xfff}, {0x2, 0x1, 0xffffffff, 0x0, 0x1, 0x74f0}, {0x4, 0xfffffff7, 0x7, 0x3, 0x6, 0x6}, {0x8000, 0x7, 0x0, 0xfff, 0x4, 0x6}, {0x0, 0xd7d, 0xfffffff8, 0x10001, 0x918, 0x8}, {0x7fffffff, 0x0, 0x9, 0x4, 0x2, 0x6}, {0x9, 0x4, 0x3578, 0xfffffe01, 0x6, 0x4}, {0x1, 0x13df, 0x8e3, 0x5, 0x80000000, 0x5}, {0x4, 0x81, 0x2, 0x5, 0xffff, 0xfff}, {0x34fc, 0x7, 0x8000, 0x7, 0x1, 0xf3ae}, {0xb, 0xffff588e, 0x71bf, 0x0, 0x1b40000, 0x9}, {0xfffffffc, 0x4, 0x80, 0xd6a, 0x5}, {0x7, 0x9, 0x3ff, 0x8, 0x7f, 0xea}, {0x9, 0x2, 0x5, 0xc00000, 0x7, 0xfffffff6}, {0x9f, 0x3f57, 0x5, 0x6, 0x3, 0x7}, {0x253f, 0x1, 0x2, 0xd12, 0x10000, 0xfd3}, {0x2, 0x2, 0x2, 0x50b9, 0xc3, 0x1}, {0x1, 0x7, 0x9, 0xfffffffd, 0xe0e5, 0x3}, {0x4, 0xddf, 0x8, 0x3a, 0x6, 0x7fff}, {0x3, 0xcc, 0xd, 0x4, 0x9, 0x8}, {0x3, 0x6, 0xf, 0x64, 0x8, 0x3}, {0x5, 0x9, 0x65, 0xfffffe01, 0x7, 0x6c6}, {0x1, 0x8, 0x4, 0x5, 0x0, 0x4}, {0x5, 0x3, 0x9, 0x10001, 0x1, 0x3}, {0x7, 0x9, 0x8000, 0x7, 0xe005, 0x8}, {0xffff, 0x8, 0x80000000, 0x62a1239d, 0x7, 0x1c0}, {0x6, 0x3, 0x5, 0x6, 0x0, 0x84}, {0x8, 0xf, 0x1, 0x4, 0x619}, {0x61c, 0x8, 0x5, 0xe7d3, 0x1, 0x7fff}, {0x800, 0x3, 0x3, 0x50, 0x400, 0x6}, {0x6, 0x6, 0x2, 0x0, 0xd, 0xffff}, {0x6, 0x9, 0x449d7135, 0x2, 0xe16, 0x81}, {0x2c0, 0x6, 0x0, 0x6, 0x9, 0x1ff}, {0x3, 0x2, 0x7, 0xe, 0x6, 0x7fffffff}, {0xe52, 0x7, 0x10000000, 0xfffeffff, 0x2}, {0x4, 0x800, 0x1, 0xfa, 0x2, 0x9}, {0x6, 0x4, 0x6, 0x6846, 0x0, 0x3f}, {0x7f, 0x596, 0xe, 0x9, 0x5, 0x3}, {0xfffffffe, 0xc36, 0x7, 0x10, 0x4, 0x5}], [{0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {0x2}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}]}, {0xf6, 0x6, "acc6c4ae82e0c413cb5c87363205aa3c2fad9c32355c1cad80b937cab704cadf3073fcf5956d7505af94c88fd116f9925c4dee4b8178c81921837f1afb37b17889799971fff349c8b1711a6f9c8b4a5bdd3682304dfba11ef7efbd024a3ed836e78a9fbf023dbf89b203d9afbc926026ba4784d5a235787ee2d4eb3681927f3d2ee6b1f6a7fe9521d86212b77e335fa26194d49afae415592381b0c3fac82b17c28136a1146e488b594caf703093d99d5222c9c8e45aeae860490e41cb7e5ea9771ab633f3a24d7f026ce9cc607504d3fef381675a2d48c02cd5e09009926abd75ab69ffde51f4110e270eca83b6c3e17f52"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xfa4}}, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x3, 0x453, &(0x7f0000000a00)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") bind$inet(r1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4401701}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002100200025bd7000fbdbdf250214a0060400100811000000"], 0x1c}}, 0x8890) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3, 0x3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x82013, r7, 0x81c5e000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) uname(0x0) 17.565030291s ago: executing program 35 (id=218): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000004"], 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061109b0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002400)=@newtaction={0xfa4, 0x30, 0x12f, 0x0, 0x0, {}, [{0xf90, 0x1, [@m_pedit={0xf8c, 0x3, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x200, 0x5, 0x0, 0xfff, 0x3}, 0x6, 0x6, [{0x8, 0x7, 0x89, 0x2, 0xfffffffe, 0x5}, {0x1e4, 0x4, 0x3, 0x5, 0x300000, 0x7}, {0x200, 0x4, 0x80000000, 0x2, 0x5, 0x9}]}, [{0xd, 0x8, 0x40, 0x6, 0x3, 0x8001}, {0x8, 0x0, 0x8, 0x2, 0x9, 0x5}, {0x9, 0x5, 0x5, 0x1, 0x6, 0x1}, {0x5, 0x5, 0xc8, 0x2f3cf40, 0x5, 0x7}, {0x1000, 0xfffffffb, 0x9, 0xe, 0x6, 0xfffffffc}, {0x8, 0x8, 0xd00, 0x7, 0x5, 0x6}, {0x20, 0x7, 0x0, 0x7, 0x1, 0x7}, {0x3, 0x1, 0x2, 0x0, 0xfffffffc, 0x2}, {0x5, 0x5, 0xfffffffc, 0x8, 0x5, 0x3}, {0x1ff, 0x991, 0x5, 0x800, 0x3, 0x1}, {0x80000001, 0x8, 0x2, 0x6, 0x0, 0x7265}, {0x0, 0x8, 0x0, 0x8, 0x7, 0x2}, {0x3, 0x16bd, 0x8, 0x4, 0x5, 0xd2bd}, {0x7ff, 0x3, 0xe, 0xfffffffe, 0x5, 0x6}, {0x7fff, 0x6, 0x7f, 0x9, 0x174, 0x200}, {0x0, 0x4, 0x7, 0x8001, 0x8, 0x4}, {0x6, 0x796, 0x2, 0x3, 0x13, 0x2}, {0x2, 0xfffffff9, 0x8, 0xfffffff1, 0x7, 0x8}, {0x370, 0x81, 0x6, 0x9, 0xff}, {0x2, 0x6, 0xfffffffb, 0xc, 0x66b2ce04, 0x4}, {0x4, 0x25, 0x3ff, 0x26594e1d, 0x100a, 0x7b}, {0x1, 0xa, 0x9, 0x1, 0x10, 0x3c5d}, {0x36, 0x9, 0x3, 0x800000d4, 0x9, 0x1}, {0x85, 0x9f17, 0x40, 0x3, 0x3, 0x9}, {0x6e1, 0x8f, 0x1, 0x1, 0x7, 0x2}, {0x2, 0x3, 0x5, 0x6bf, 0xe4f, 0x3ff}, {0x1ff, 0x0, 0x208, 0x9, 0x9, 0x843f}, {0x3, 0xa, 0x6, 0xfffffa81, 0x7, 0x6}, {0x73, 0x7fffffff, 0x3, 0xb84, 0x7fff, 0x8}, {0x9, 0x288, 0x8, 0x4, 0x4, 0x6}, {0x2d, 0x3, 0x1, 0x3, 0x10, 0x7c3}, {0x48, 0x8000, 0xffff769b, 0x9, 0x800, 0x10001}, {0xe8fa, 0x1, 0x7, 0x9, 0x4, 0x3}, {0xfffffff9, 0x10, 0x8, 0x3, 0xd4b3, 0x8}, {0x7fffffff, 0x7, 0xfffffff7, 0x8, 0xd, 0x8}, {0xffffffff, 0x4, 0x5, 0x3, 0x8, 0x3}, {0xf6, 0xa6e9, 0x2, 0x8, 0x72d, 0x3}, {0x2, 0x3, 0x9, 0x11f20, 0x10000, 0x1}, {0x0, 0x6, 0x8000, 0x7, 0x5, 0x1}, {0x6, 0x101, 0x9, 0x7fffffff, 0x2, 0x2}, {0x7f, 0x0, 0x8, 0x4, 0x1, 0xb}, {0xd, 0xa738, 0xeedc, 0xfffffffa, 0xe, 0x7}, {0x1531, 0x9b, 0x7fff, 0x2, 0x5, 0x6}, {0x40, 0x8a0, 0x5, 0x3, 0x8}, {0x2, 0x7, 0x8001, 0x7, 0x0, 0x40}, {0xff, 0x6, 0x1, 0x3, 0x8, 0x8001}, {0x7, 0x2, 0x1000, 0x5, 0x80000000, 0x7}, {0xd2b, 0x5, 0x3, 0x8, 0x12000, 0xfffffc01}, {0x4, 0x0, 0xfffffff7, 0x800, 0x5, 0x7}, {0x3, 0x4, 0x566, 0x7fffffff, 0xe, 0x8}, {0x0, 0x5, 0x2, 0x7, 0x2, 0xfffffffb}, {0x3, 0x0, 0x6, 0x80, 0x29, 0x40}, {0x5, 0x35, 0x1, 0x3, 0x4, 0x40000}, {0x4a, 0x9, 0x1, 0xfffffffd, 0x0, 0x10}, {0xad8, 0x0, 0x2d, 0x0, 0xe, 0x3}, {0x7, 0x6, 0x40, 0x3, 0xfffffffe, 0xfffffffb}, {0x4cc3, 0x4, 0x100, 0xb800000, 0x2, 0xfffffffd}, {0x6, 0x3, 0x7, 0x3c807ceb, 0x8, 0x7ff}, {0x3, 0x4, 0x7, 0x8, 0x7, 0xe}, {0x7, 0x2, 0x7ff, 0x0, 0x1a9, 0x6}, {0x1000, 0x17800839, 0x3, 0x224d, 0x8, 0x8}, {0x47, 0x3, 0xffffffc0, 0x8, 0x7ff, 0x81}, {0xfffffffc, 0x4, 0x2, 0x200, 0x80, 0x704}, {0x200, 0x7, 0xfffffffa, 0x9, 0xdd1d, 0x3}, {0xbf67, 0x7ff, 0x0, 0xa2ee, 0x0, 0x400}, {0x3ff, 0x4, 0x9, 0x1, 0xe74, 0x5}, {0x8001, 0xd, 0xc61b, 0x6, 0x8, 0x6}, {0x6, 0x4, 0x1, 0xe1, 0x3, 0x20}, {0x6, 0x7, 0x10001, 0x2, 0x9, 0x3}, {0xea0, 0x10001, 0x4, 0x5, 0xc6}, {0x6, 0x5, 0x1, 0xd, 0x7ff, 0x6}, {0x8, 0x5, 0x2, 0x7, 0x8, 0x4}, {0xfffffffb, 0x9, 0x80, 0x0, 0x9, 0x1ff}, {0x8, 0x400, 0x8, 0x8, 0x9b00, 0x8}, {0xfffffffb, 0xfffffffe, 0x6, 0x0, 0x1, 0x9}, {0xc0000000, 0x1, 0xffff8000, 0x5, 0x2, 0x6}, {0x7f, 0x2, 0x0, 0x3, 0xbd, 0x8d9}, {0x8000, 0x24000000, 0x7, 0x40, 0x3}, {0x9, 0x59, 0x80000001, 0x1, 0x40, 0x5}, {0x8, 0x400, 0xd6, 0xec4, 0xc52, 0x2}, {0x8, 0x4, 0x0, 0x0, 0x8, 0x6d8c001d}, {0x0, 0x7, 0xae, 0x11, 0x101, 0x10001}, {0x1, 0x8, 0x7, 0x6, 0x80000000, 0x10001}, {0x1, 0x9, 0xf89, 0x7fb1, 0xfffffff7}, {0xfffffff7, 0x401, 0xfffff278, 0x7fff, 0x8, 0xfffffffb}, {0x9, 0x3, 0xe8c, 0x5, 0x3, 0x8}, {0x1, 0x4, 0x4, 0x3, 0x322d80e3, 0xc}, {0xff, 0x1, 0x3, 0x0, 0x58, 0xeb}, {0x3bf0, 0x0, 0x3ff, 0x0, 0x9, 0x5}, {0x3, 0xfffffff8, 0x1, 0x8, 0x0, 0xfff}, {0x2, 0x1, 0xffffffff, 0x0, 0x1, 0x74f0}, {0x4, 0xfffffff7, 0x7, 0x3, 0x6, 0x6}, {0x8000, 0x7, 0x0, 0xfff, 0x4, 0x6}, {0x0, 0xd7d, 0xfffffff8, 0x10001, 0x918, 0x8}, {0x7fffffff, 0x0, 0x9, 0x4, 0x2, 0x6}, {0x9, 0x4, 0x3578, 0xfffffe01, 0x6, 0x4}, {0x1, 0x13df, 0x8e3, 0x5, 0x80000000, 0x5}, {0x4, 0x81, 0x2, 0x5, 0xffff, 0xfff}, {0x34fc, 0x7, 0x8000, 0x7, 0x1, 0xf3ae}, {0xb, 0xffff588e, 0x71bf, 0x0, 0x1b40000, 0x9}, {0xfffffffc, 0x4, 0x80, 0xd6a, 0x5}, {0x7, 0x9, 0x3ff, 0x8, 0x7f, 0xea}, {0x9, 0x2, 0x5, 0xc00000, 0x7, 0xfffffff6}, {0x9f, 0x3f57, 0x5, 0x6, 0x3, 0x7}, {0x253f, 0x1, 0x2, 0xd12, 0x10000, 0xfd3}, {0x2, 0x2, 0x2, 0x50b9, 0xc3, 0x1}, {0x1, 0x7, 0x9, 0xfffffffd, 0xe0e5, 0x3}, {0x4, 0xddf, 0x8, 0x3a, 0x6, 0x7fff}, {0x3, 0xcc, 0xd, 0x4, 0x9, 0x8}, {0x3, 0x6, 0xf, 0x64, 0x8, 0x3}, {0x5, 0x9, 0x65, 0xfffffe01, 0x7, 0x6c6}, {0x1, 0x8, 0x4, 0x5, 0x0, 0x4}, {0x5, 0x3, 0x9, 0x10001, 0x1, 0x3}, {0x7, 0x9, 0x8000, 0x7, 0xe005, 0x8}, {0xffff, 0x8, 0x80000000, 0x62a1239d, 0x7, 0x1c0}, {0x6, 0x3, 0x5, 0x6, 0x0, 0x84}, {0x8, 0xf, 0x1, 0x4, 0x619}, {0x61c, 0x8, 0x5, 0xe7d3, 0x1, 0x7fff}, {0x800, 0x3, 0x3, 0x50, 0x400, 0x6}, {0x6, 0x6, 0x2, 0x0, 0xd, 0xffff}, {0x6, 0x9, 0x449d7135, 0x2, 0xe16, 0x81}, {0x2c0, 0x6, 0x0, 0x6, 0x9, 0x1ff}, {0x3, 0x2, 0x7, 0xe, 0x6, 0x7fffffff}, {0xe52, 0x7, 0x10000000, 0xfffeffff, 0x2}, {0x4, 0x800, 0x1, 0xfa, 0x2, 0x9}, {0x6, 0x4, 0x6, 0x6846, 0x0, 0x3f}, {0x7f, 0x596, 0xe, 0x9, 0x5, 0x3}, {0xfffffffe, 0xc36, 0x7, 0x10, 0x4, 0x5}], [{0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {0x2}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}]}, {0xf6, 0x6, "acc6c4ae82e0c413cb5c87363205aa3c2fad9c32355c1cad80b937cab704cadf3073fcf5956d7505af94c88fd116f9925c4dee4b8178c81921837f1afb37b17889799971fff349c8b1711a6f9c8b4a5bdd3682304dfba11ef7efbd024a3ed836e78a9fbf023dbf89b203d9afbc926026ba4784d5a235787ee2d4eb3681927f3d2ee6b1f6a7fe9521d86212b77e335fa26194d49afae415592381b0c3fac82b17c28136a1146e488b594caf703093d99d5222c9c8e45aeae860490e41cb7e5ea9771ab633f3a24d7f026ce9cc607504d3fef381675a2d48c02cd5e09009926abd75ab69ffde51f4110e270eca83b6c3e17f52"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xfa4}}, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x3, 0x453, &(0x7f0000000a00)="$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") bind$inet(r1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4401701}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002100200025bd7000fbdbdf250214a0060400100811000000"], 0x1c}}, 0x8890) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3, 0x3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x82013, r7, 0x81c5e000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) uname(0x0) 17.438506512s ago: executing program 0 (id=220): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000180)={[{@data_journal}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x5, 0x76f, &(0x7f0000000780)="$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") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000f40)={0x1f, 0x0, @none, 0x2, 0x2}, 0xe) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001f80)={0x0, 0x0, "1a8ad8306a17085f037a965173d32417b0c762acea33060ca4db61f4186fb0d828006300c7337764ce27d2eb9a01c535535bf5f9ca8aaf9c82645366f201d747375cbfa65e810af81cc330d54533dae0dc9c11e3c416d4e285b92b173e1fae514ac5eb47c2448eb5624a226ba27d899e047ec87d377e812cca5e745f12cceb8ad165f9361d83ce781ad246368171a0e367ebd599ed53062e95b161423f7f3abd33c165927754cfa5a5432b30acd5edfa7eb65e7dcd9301a33cf859f9891036bfc79122b3cd957e24380f05d8ae538ad41baa502726a3872ca584e905e14c15645bdc6a60c5417b896af53b1e1baf3bd6e9c58ba52ea7fd05fae3e9a0b8feed01", "51cae57bd64393c422473ac13e90e55bd45a1e311ba64ca20926a6e7f7782df93829ed7c4cf97b7f3778b1b2adf49b738b6e395de4d4e2a7b21788874a1ab4db35281992df67561eece54e2b3a842acfcc4d86963ac4261c8530df9a07daeabbc5e5e10748f675c0eb7d9c3e829ae70ac3e959c9083256ba43cc8b4190c63e30a40734c6a47029c8665fe298f237298a6776248b0a2e20f4be32100d3cca581725d16904fc136263bc521a2f9c9dead9139a15e73fdb42e039c595547283330be2a645fb4890d11323d3cab9ddaa1c076b0e90a998e8049a95ba705887fc48316f5930e73e5066cbba6f59ba48c9ae601ea14d55390e2b87024fd2a1760d3f10a21ae0983f575d86395c233c1e1795231d6326978bbf1658fb448c5934f7ecc3aaccb7f715b3396bf389986fff156412c7b397d14b6f06fa0f64ccf4fd4cce224dcd7e4cb32d30eb945cd74efa81c404c7ddcbc73829f347a6c42db546c45d5a3ae455e699b45a77905954f74acf3c96a6f9ebeeac23586ad95a2e756782fee7d2f761bd97300541544592c094ecbb38fa2fb6d14908c490bb67372ad04ff6cfe9e9801da7ce5ff53af10cf1e9d9db3bdb3ba64b8ab53e79a1dc016c796188329c5828ca4a89feae83b74f3458f04bb043602771c5a7053125f0be558a42a35324eedc09c46b2f3a1c065b53c073d2e21ec35f5f7df0b1a80a3aa917ee0a2e40d77370f3fb7d395b33d73dcc202c6bbcde351b84d438b0570f4992e303af3a49f0b2e14acf9bc4ee064ecf6174de4713e94e53e49d9a9d3f4d409efccbdb7fc4d7092e203c40ab2515be9fa3dec2d87450f4cb83479717d0a39349d84ecb6316ceac59a20bccee168ee1856c452b2032b45816708ce657639e37414b6f78c874bf937538e727a38fe38a0cdb6903f689560b55469279d7b859ddccdddb49c7f16013c196399f26b0760a9371affa1fc31c6f7fbbe2cdebe5261a8c14cbd395a121bd43ee42ff7529f63e1b8406606c4c1cf52131fda043427b0ff9e0fa9620efb77827cbe2ef706b910889b18cb4cc0bc94979e737e45fed6d2d14981e188af8b488c75c72df536efb256945b4d9e442dbec5bb0ce3e5e7321c92caf4f53384e6223316414a64bd42bda036f8e20b6a557815b7a33d4365aa976a6575ebd10b76d1a359234046557afa6fbe7c67a3b9e66255f682f67c8ad74e86016b01ed37a8e318c0adba51d512cc7cf68f0e4ee8079f543e4612124e95a1b3aba6331efcaff6c502b24c6524bed36a74061d38b90285765c1a7ee22b2f3af7f0a2838254357d4580873c3656b14302bc75f9f4e8fcf2bdbfabf2ce7cd74a4c0d9360c5559a8725619703d457b3e7a11d6e3076a3b9a0dabef129a694e8425b3820704483e447db2b96102e298880ecf8eccb6cf1b1f6e4970d3a6802bd3c83259008283b5f5496720b597da9adf7a1efe71f95466345ad35211b158f54afd91e3a73d0c809b04b7a539cdece22b71fd84a09b047bae8a95f60b1ad771c4e92f8db23273db94348a1fe5630e526104ca66ca309f2e7acc79b382e6ad709259bde9f2f5bb1312d7195ae668c3fb85b1b581421cdab1b0a9b561428cfd2c9bbfabd3172b2ddf325b3f138026102a372a7caf98ab45d8195350eec6c1069f8b8b33731ce19863995778a2015313387193525ecc00ad753822589fa08b9308fe5e097a92c2b61c3b28cee6c6ad4276aff9100505563f09b2bee3e3ffc8a0e3b37fc6814fac7c29cf10459317b6294cd991001d85fd8e9e4999c3453339ba3c7554ebabd794a82f2fe004820ffa57f636663ae2531f46a025740449eda07c00b56b8ee9d2069b75237749165187db4f3365819844138a2875bd36b4457d1068f12451f81bc18bbcf3d55578e67b85687a4d9bbc427e3e3c250d1cc20345507c7f769ce87f542854b64229ec92d555a895fb9f72c3d63896006d87e89844dce4c5b16104d57a6a3dd5e10eca088e6028079e2f3af4ced185608ed573e7b680b9a0dd81da6ca963b2f24fe585f22c19b5468773faed5880ff89f8bfa709c9008820d2a9027ca07b3ba7c52c3345bddcc0d0cec6fa5f81432f117f0d2f08ea969d91e9b37437f4213e7603e908aa51138e1a5ac02755da3ca48034d1ed8139691dfb589b2856ab41e672a2a2370898a5ce6da01b4a4b2623775b0bdac4aff7c8cc9af63f71efa879ee137c8d7586331cbb7ac64271f03c413682ce675bb0bad65f74e7e8899d8c51cea6287798b727159876c1b31dafeaddaa2a3d46291e66a75831ada79c3fc53433868c2dd159dddf30f69d740ee2d3bb5cae8a943a9eebcb9fa627df46b0cf57d39bb812c1b585260855c23502a0d9f519c76bd819e4df002512362ce16c67aa65baebaebad6f609e2be6b444c0b0cd7dd7f6c02676c9f9cab0e047065efa86b92d6a253a510ccc5853ad553ec1e56522be55d266ebf42ea78807ca2dd258c61768b51938d551814cec80e994c1f7dcc3b91c7f1b0c9b0f19f1a4ecddc08ee3ed5fbf9d6d3409571dab04eb7682903217908ca4242c39ca1a42d761bae0d01425f9f29f1a072f26d77c5abfc44c82eb22bacf7608c3d2717cf3b4148911e6c661047c8617e12da07aff175046e862c2b9b676a6eaad171638bed616c8bb1571a0c8a2fc05524765cddbf6b8ffbbb85665aa78bd61b72d6de949c848747147e49ded3f7a0e5c2793afe0528c0235a3af8cd90d16d583ec6ee182da6bb51c32b95e9ef1de3be956a487a73adf36e60aaa4cf72d6adb2ff277288585b54c4a133608e1fa858953dc14832a7ad77333c273f6c005d8aeceaedb18b369bda28668994270cf3272efc206af116afb696acf612c20460c47a43d6d2b5ac49e906f5822fbe8a764ce4dce26538268d48bb3489edc7cebba0e09d401d91ad5a503308a53ec83e35fe87ffa05c7272f3717a30503154dfac59fa8b098fff61791f3438ea6d292e95ff0ade51b5312afb699e6c5a11e64519b5e3b77bf703088c9e5a19c7129d3e09a276437640d02c08acb7b1d4ce751765f46f4dec42f7d4fedd7ea335737ad735005d4e8f91595bdef6778356b5ccac3a5351a098d9afe5edb15db0ab089ef6076a247f545e64d9e0c46a3ba0d6c026354602253dc37a281a49323495dd2a5ca0a8078fdf576826cc6936975c900e19b4e3f6800861ef5986f3270393fada25131e407210f5074d6c9e7a025ca25b93e50d0c0efd457c28439122fd565bccadb21b9b704cb89021f096f412cd60af2a8ddeb983788e743c97f33764a01cc4692260b0ad63c6586701466f8a5bd0232565a3bdc9e918ddee15d1960791c6bca6723aae139fd7570efac63eb10425fef02046c8bacff0d080f8d8718caa300cdf1cedf5782856a851c0f5c75d3a411a68804b6512e51a6d4747b7b9b9f4346e9f09066662ba6308a2d042a5ad56601f7137c23d85655fcc9aa47014e4e967fc940eb9652ba848ca24ea5b388adb47700964b23b96e2df4bc6466b76c156ad60f0e68b6a78821b82e6b71505b79bf085b532bb1bdd6e74f3edae137eb5e13a6306ba99a570bb0666171aaa4e61fb618bac926b5d06602922ae08bd61a69845917876a4a2775777b92a1bb1f1cca225cea35b641ac2e3d510eb75b53728735c805783221b7accaa3521b4cb2f5fa30d1c21f40f4b9d5feefcf4412aadf91e82dd174d94a0de34db2e8ca4ab7d8d1953cb1c6bec7d84e55584a1f700bcc1e1c3b0753d0422ab2007175dc8b30dfb7a72ffc780fd8b3596ba0303a2f3fe6d9c027f4f67084b056f578d61b8c1e709ea48131bf8049170f2bac481c1047a8f1a808fb57041a08f3b9789c80342dc6ff5d0ad1549f270e122ab5157c24475ff9c79857aabdaf5b2d6b30c5472fd1d4b90cbc5c6e456d857ba79ef80c336b93a2a15c7bab6900aaa6fc7cfd2e42597d46aade79e5a0b3a3e4a6aec53c8785af96a9a579316b6eab165c502037273f9027c586cc6bf78c9e03ad19fd3734ee686aacc826e4b62f4fa1a4cfcdd54ab4c94b88176343b7aa323dbbb04bc15dbcec35a7e32304034815c93663c6992bc2c099b7a16c3245aa39d24b103711dc6a9d4e9e6017e38065dca3d76767438ec138a2290ee3d53f6879b3a9444af500018ad173edc212831abeefbee210449127e593dc028e4f325d2351d4c45a2324fc879cfa6ee8555a61730484ac8bf4800b57fb41970affb39fc6f7f0b1782a075ce879f02b0c9023e6a9937cbfc114c8aa2af40b7e206c511eddbcd44fa530c2bb6117ffe6bcfcc4bb992bac21cc0c368e4109b4987fe7cf4156f0a3c627442f90a813b6641f657c036e287148fd6af01023640dba4bc45524ccd91b08c486fe9344fb0dd4953512af14bfbbdb857e9790581772f82b5296640636e0e39aaf0d2612dcf1c8830cee1ea5e2a42d31e67633dca24e52bc49b9e3ae285b6154526f362c44f2df38c67c7d1fb15dddb1f230f934bfab7895ce352c940a04d61eb29701586e6a2e871606e71544570b6f87a805fbcbb3360d03073ce0addf8e2632ef70b9ddc1bd77679940307104cd9ea4db0dce2cd9bc35972d32bfd86ccecc0c004c29642648eadb31de51c779769e035ad7049f99ec930c78d7401543bce9f054bf73eb2c007490f11175c325ba5b315f435a159921963d35dbcab4c7f44dec43df8fe902afff7401c835107940466b61f68ff51e97c8ae8c8a1598ed86c511b24009fafc6554f963b0523819d05fe468c34c41b75a32da92981abc5eb3d7b8ea3b330963ee939453411b02b3de11ed088a7cbdbb6bbe23c091f34c916969c97c25da8657c79427b864f9fa887b987b820f6de1dbbf3b30530a80bcdb5b14f6d09963e187c25d5bed84ce38c9d2ab6977604cd085dd623eb03924c0f4a2dcbd44943b93bed64a004b2cf62711961741f5b00a617f2defcd01c3227b813bef6b1f784c6c9ce19fb60d09e6873fc4124add38fe42730a2e2a33bb81fb1bb46b9e04e5b8887d5c0f261727c70f0764018b183a435fedaa5fb6ee24634a978fdd702de6d054748186f09eb8e04f5153e8cdf7abdac1700dafa313c8c035c1e16a4dc85a7080102b37ec85362d8248be9b9dcbdd4415691cc1b618416d3677cf1112afd9db3c386456f7963bc3c6ee1ab00e372b34f7a1d3d662d5ba31bec8db12318da09e3311cad13a273eba64958ed459d99f89e830938bf94c854e15034d02871ed70a6bb660e45ddf67ba4c8850d9bc8728a0d6d9a314f3cff3bbbf2c6471b89f8a4d3e9918da505d662bc8fe269942f1213689f66b2ff3e3f955418865f8868811f4fd30b7e45c4a11748059333e10645427e7d532afc4e29103eb6d5e86b94c25a76870fa20251148ffe8f67b4c139400a16bce7a6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000f80)={0x9906, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0xf5, "2fe208111aa044"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000001c0)={{r4, 0x7e3, 0x200, 0x200, 0xffffffff00000000, 0x5, 0x6, 0x5, 0x40003, 0xb, 0x3, 0x3ff, 0x3, 0xffffffffffffa9f0, 0x7}, 0x10, [0x0, 0x0]}) waitid(0x0, r2, &(0x7f00000000c0), 0x8, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffee0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=ANY=[@ANYBLOB="05000000010000000a0000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x810c90, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_continue}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0xc}}, {@namecase}, {@gid}, {@dmask={'dmask', 0x3d, 0x7}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1520, &(0x7f0000000440)="$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") setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f030e03f007120006001e1f89e9aaa911d7c2290f0089061327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 17.156095063s ago: executing program 0 (id=221): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x100800) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000240)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x2, @desc3}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a7c9a640115d99d981b3886420589c6695d4982a83b7906769e737201a3fb7a7804454156569cb03a5be811debc957b5831b89b59d703e74a37c00", 0x25}, 0x48, 0xfffffffffffffffd) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000094e80379dbddc3f0000009500000000000000467b49e39b9a2b980c9a1343998a9fd3bc25ff1bb07021b4b113a5b78fc288d2cdbde8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 16.941650344s ago: executing program 0 (id=224): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) timer_create(0x3, 0x0, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x9, 0x8}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x2, 0x2, @thr={&(0x7f0000000200)="5cfba9cfb5e3115baa77fa580c087ebbe22d619da2ced83f6c4563d64e39fe7f5ee8a400de15510cb7bbecd0ac4eca7770200777e5b09fe73a2d7817ed73f79dfcb7c23c556be3665c1f16ae1b48bf11543008b7f14f234b0e1c3073c65afa4ab93a0282c32822e828", &(0x7f0000000280)="99770d5de1953a5c7eb4104cc3cf8a77668bcbea78489a63c9f941e8f71d6f02cf6c0cb1508f9cb1da470624b098bd73a135d0b876093614fa9bb315310facfd588687df21b1234062eae2601e32e306c6017ebe07d125eae4472e45772cc2598ce369eaccd1c9e03e05ec9061f2cf539e3fa2617105cbbdb7df8df4284200f4f34b36a7b71c68bfbc70a3272cb91e71d4d085c951b8"}}, &(0x7f00000000c0)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan0\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f00000006c0)=ANY=[@ANYBLOB='dodir,shortname=winnt,uni_xlate=0,uni_xlate=1,utf8=0,utf8=1,discard,utf8=0,uni_xlate=0,flush,shortname=mixed,shortname=lower,dos1xfloppy,shortnameVwinnt,shortname=lower,utf8=1,\x00'], 0xfe, 0x2aa, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0xfffffffffffffedd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x9, 0x6a, 0xea, 0x8}, {0x9, 0xe6, 0x5, 0x7}, {0x3, 0x12, 0xab}]}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000140)={{}, {r5, r6+10000000}}, 0x0) timer_gettime(r2, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x0, 0xffffffff, 0x6}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000002240)=0x2) clock_adjtime(0x6, &(0x7f0000002140)={0x1000, 0x100, 0x7fffffffffffffff, 0x1, 0x1ff, 0x56f, 0x0, 0x20000002, 0x1004, 0x1d, 0x1, 0x98, 0x2, 0x9, 0x7, 0xc8, 0x3, 0x22f0, 0x100000000001, 0x6, 0x14d, 0x400, 0x100000000, 0x1, 0x6, 0x4000000000000008}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) socket(0x1e, 0x4, 0x0) 15.978360289s ago: executing program 0 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/241, 0xf1}, {0x0}, {&(0x7f0000000600)=""/67, 0x3d}, {&(0x7f0000000ac0)=""/91, 0xffa4}], 0x5}, 0x8}], 0x1, 0x40000000, &(0x7f0000000800)={0x77359400}) fcntl$setlease(r0, 0x400, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getown(r0, 0x9) (async) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r3 = timerfd_create(0x0, 0x0) readv(r3, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r2, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+60000000}}, 0x0) readv(r2, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0xfee, 0x1, {{0x1d, 0x4, 0x3, 0x2, 0x74, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0xb7, [@local, @multicast2, @private=0xa010101, @empty, @loopback, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x7, [{@broadcast, 0x8}, {@multicast1, 0x5}, {@local, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3247b7d3}, {@local, 0x6}, {@multicast2, 0xe544}]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0xfee, 0x1, {{0x1d, 0x4, 0x3, 0x2, 0x74, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0xb7, [@local, @multicast2, @private=0xa010101, @empty, @loopback, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x7, [{@broadcast, 0x8}, {@multicast1, 0x5}, {@local, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3247b7d3}, {@local, 0x6}, {@multicast2, 0xe544}]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000804000000040003000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000804000000040003000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r7, @fallback=0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r10}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r7, @fallback=0x33, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r7, @fallback=0x33, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) 15.977905719s ago: executing program 36 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/241, 0xf1}, {0x0}, {&(0x7f0000000600)=""/67, 0x3d}, {&(0x7f0000000ac0)=""/91, 0xffa4}], 0x5}, 0x8}], 0x1, 0x40000000, &(0x7f0000000800)={0x77359400}) fcntl$setlease(r0, 0x400, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getown(r0, 0x9) (async) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r3 = timerfd_create(0x0, 0x0) readv(r3, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r2, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+60000000}}, 0x0) readv(r2, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0xfee, 0x1, {{0x1d, 0x4, 0x3, 0x2, 0x74, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0xb7, [@local, @multicast2, @private=0xa010101, @empty, @loopback, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x7, [{@broadcast, 0x8}, {@multicast1, 0x5}, {@local, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3247b7d3}, {@local, 0x6}, {@multicast2, 0xe544}]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0xfee, 0x1, {{0x1d, 0x4, 0x3, 0x2, 0x74, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0xb7, [@local, @multicast2, @private=0xa010101, @empty, @loopback, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x7, [{@broadcast, 0x8}, {@multicast1, 0x5}, {@local, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3247b7d3}, {@local, 0x6}, {@multicast2, 0xe544}]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000804000000040003000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000804000000040003000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r7, @fallback=0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r10}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r7, @fallback=0x33, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r7, @fallback=0x33, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) 12.299960808s ago: executing program 8 (id=240): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100001d1e00040000", 0x31) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7fffffff, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) 11.425261802s ago: executing program 8 (id=247): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="989c0b86fbe0cad80a08d3483a6fe74c", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x3, 0x3, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x4}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) dup(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 10.508841647s ago: executing program 8 (id=251): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x7, 0x4f6, &(0x7f0000004cc0)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffc, 0x3f}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) 9.76206263s ago: executing program 8 (id=257): syz_emit_ethernet(0xda, &(0x7f0000000580)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@llc={0x4, {@llc={0x4e, 0x3c, "a6", "cf527adad86607838b151715117c446e791aae4f8aa79d8d2dfca1ab807344a9c59bee3e60a41e3eab4559d83f43c47ebe1162bfd64bec72e88bef950317c9d787f2eb53d6c9a4efa95903226a22755a888b2290b4b20ab26b529b9c15ab0203287a4285abc658436304583995a62b23157a04d88a812e716f76dd4b78edfe39e642d5b9ccbc71e2c3be8c855c2be1f92647824d51965cb759a7dba3b17bcf02a39dfc27306c165ba5e0dd5195a265162331c39719e3078eca8f733548bd8fe9a9136c05a25bc1624a"}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@random="b99c26f0977a", @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000000000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x2, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfffd}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {0xfffd}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.366323837s ago: executing program 8 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x201805a, &(0x7f0000000100)={[{@abort}, {@bh}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x11c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @loopback, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private1, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000240)=0x30) setpriority(0x1, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018140000", @ANYRES32=r4, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = getpid() syz_clone3(&(0x7f0000001240)={0x1000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xffffff3b}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000000)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r8, 0x0, 0x0, 0x10000000, 0x0, 0x0) mount$incfs(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000280), 0x1, &(0x7f0000000380)=ANY=[@ANYRES64=r1]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) 7.233067643s ago: executing program 8 (id=266): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) 4.762457725s ago: executing program 6 (id=279): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xc, [@volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @restrict={0xd}, @union={0xc, 0x0, 0x0, 0x5, 0x0, 0x7}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0xa, [{0xa, 0xb, 0x5}, {0xa, 0x5c53, 0xa}, {0x8, 0x4, 0x8}, {0x6, 0x11, 0x7fff}, {0xb, 0x5, 0xfffffffa}, {0x10, 0x10000, 0x1}]}]}, {0x0, [0x17, 0x0, 0x3e, 0x0, 0x0, 0x2e, 0x51, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000400)=""/233, 0x9c, 0xe9, 0x0, 0xa, 0x0, @void, @value}, 0x28) r1 = dup3(r0, r0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1c, 0x2, 0x8, 0x1, 0x200, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x87, 0x4, 0x1, 0x100, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r5, &(0x7f0000001a40), 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) splice(r6, &(0x7f00000012c0)=0x7, r6, 0x0, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000380)={[{@bsdgroups}, {@noload}, {@lazytime}, {@sysvgroups}, {@test_dummy_encryption}, {@resuid}, {@usrquota}, {@jqfmt_vfsv1}]}, 0x3e, 0x518, &(0x7f00000013c0)="$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") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f0000000380), 0x0}, 0x20) 4.709379946s ago: executing program 6 (id=280): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2dc, r7, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2c0, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x1d4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback={0xffffffffffffff80}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 4.700315416s ago: executing program 4 (id=281): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000008010040"]) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000eec5f07729fbf97fbced32b8c149ab343fd3431d6affa3304a09613d88e9a284cb83b3d2ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d05003000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000680)=0x2200, 0x4) sendto$inet(r9, 0x0, 0x0, 0x2404c7fc, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000001940)="8b8b92c9dd4228f4", 0x8, 0x40080, 0x0, 0x0) recvmmsg(r9, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0}, 0x0) 3.82332929s ago: executing program 6 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000001580)='blacklist\x00', &(0x7f00000015c0)={'syz', 0x1}, &(0x7f0000001600)="d4da150aa2a7aec3a6640e04dbe3ee443a2307a7b4e2d97dfff5103571fcc75b9544d172cc4fcbb6eee50b3ea8a3112b9ac9378e76d8558c855d32a1fef366c5ef09384420540cd59478fdbc267c89303d6c552a386c99bf61a645e95e2218c916d30ddc955fe201e3076a4dee32d94084a41747d72d6b4344aaf1ba981d36ec08016da2dc1bd8b377629db166879bef568d1c776d0fc0d93a6fb76294627ac91d4ef2b3b598afb489bd627defcc5e6079ce7d9bc0f0a034b72c808f05e086d6d8e641a9c0d48221c46361a428d4a85855e08e8ab481b32e0ac7f3836efeddb29867e23184bb648e58139ec655", 0xed, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001500), 0x0, r3) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000140)={[{@nobh}, {@nodioread_nolock}]}, 0x1, 0x7a3, &(0x7f0000000880)="$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") r4 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000140)={0x2a, 0x29, 0x4, {0x5, [{{0x80, 0x5, 0x8}, 0x10001, 0x8, 0x7, './file0'}]}}, 0x2a) sendfile(r4, r4, &(0x7f0000000240)=0x9, 0x7f06) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x8, 0x1, [{{0x9, 0x4, 0x0, 0x4f, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x1ff, 0x81, 0x1, {0x22, 0x368}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x40, 0x8}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x6, 0x0) r9 = memfd_create(&(0x7f0000000080), 0x0) splice(r7, 0x0, r9, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "09f0c6564b6ac6413304000000d9f8f22f81ae81c2bd7edd9aeaf6fd91c25227", "60326eacce5de87bf00be86b3ebbb957", {"fcc68dd1b5242bdc6466eba8cab8d7b2", "05fef0e9b077b6c6639938f9db7c621b"}}}}}}}, 0x0) 2.774675486s ago: executing program 4 (id=288): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x1, &(0x7f00000001c0)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x100000001}}, {@six_active_logs}, {@background_gc_off}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1f000000000000800400000006000000410301", @ANYRES32=r0, @ANYBLOB="faffffff000000000000000000", @ANYRES32, @ANYBLOB="000000000100000002000000000000000000", @ANYRES32=r0, @ANYBLOB="4dafd43b16de7bdce03cac5c93da29bc43eb8d0865eec7ace4e53a7a942e130ec7bf9ba69d7b580a4286f27a4b3ea3ab06ab458724066db2a2b6422f71"], 0x50) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x7}}]}}]}, 0x45c}}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) 2.098725969s ago: executing program 9 (id=289): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0300d6000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000007000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000001638db810000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0xffffffffffffffb6, &(0x7f0000000180)=0x400000bcd) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) unshare(0x2040400) r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x20) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.90539063s ago: executing program 4 (id=290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000a40)={0x464, 0x3f3, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x2, 0x29, [0x4, 0xfffff801, 0x1, 0xa6, 0x0, 0x1ff, 0x4, 0x2, 0x7, 0x2, 0x6, 0x7f, 0x3, 0x2f, 0x7fff, 0x4, 0x80, 0x6, 0x2, 0x9, 0x7, 0xf2, 0x1000, 0x5, 0x3, 0x7, 0x7, 0x0, 0x5, 0x79, 0x3, 0xa8, 0x7f, 0x7, 0x4, 0x69d, 0xb0c8, 0x7, 0x49, 0xfffffbff, 0x9a, 0x101, 0xe8b9, 0x13b, 0xffffffc0, 0x6, 0x9, 0xe5, 0x322261fb, 0x1, 0x8, 0x400, 0xffffffff, 0xffff, 0x7, 0x8000, 0x3494, 0x8, 0x4e, 0x10000, 0x10, 0x4, 0x1, 0x4], [0x4, 0x3, 0x1, 0x8, 0x9, 0x8, 0x9, 0x5, 0x4, 0x2, 0x80000001, 0x55c, 0x400, 0x4, 0x101, 0x2, 0xfffffffb, 0x8, 0x2, 0x1, 0x0, 0x7, 0xfffffffb, 0x7ff, 0x4, 0x80000000, 0x1, 0x515, 0x5, 0x1, 0x1, 0x1, 0x80, 0x7ff, 0x3, 0x1, 0x3, 0x7, 0x400, 0x24, 0x8, 0xca2, 0x80000000, 0x8000, 0x8, 0x37a, 0x205b400, 0x0, 0x7, 0x5, 0x2, 0x2, 0x652a, 0xa, 0x0, 0x7ff, 0x8, 0x60, 0x33c528d0, 0x5, 0xd4, 0x6, 0x4, 0x5], [0x8, 0x0, 0x95a, 0x0, 0x0, 0x2, 0x20000000, 0x400, 0x3, 0xffffffff, 0x3, 0x3, 0x80000000, 0x7, 0x7fffffff, 0x1, 0x9, 0x101, 0x7, 0x2, 0x2, 0x6, 0x9, 0x10001, 0x81, 0x10000, 0x3, 0x1e0c, 0xffffffff, 0x9, 0x2, 0xffffffff, 0xfffffff7, 0x1, 0x144, 0x9, 0x8, 0x4, 0x0, 0x9, 0x1, 0xf, 0x6, 0x76, 0x3, 0x3, 0x5, 0x7, 0x8, 0x5, 0x7, 0x80000004, 0x0, 0xffffff6c, 0x0, 0x49c2, 0x2, 0x2, 0x6, 0x6, 0x3, 0xfffffffe, 0x800, 0x1], [0x200, 0x4, 0xc1, 0x7, 0x7fff, 0xfffffff0, 0xbd9, 0x0, 0x8000, 0x40, 0xffffffff, 0x4, 0x0, 0xd86, 0x3, 0x62cc82d5, 0x4, 0x101, 0x1, 0x3, 0x10, 0xe2a, 0x4, 0x80000000, 0x0, 0x7fffffff, 0x3, 0x7, 0xfff, 0x0, 0xd, 0x4, 0x1000, 0x3, 0x80000001, 0x6, 0x8, 0x14, 0x1, 0xfff, 0x7, 0x6fd7cd75, 0x0, 0x2, 0x101, 0x5, 0x4, 0xa, 0xc8d, 0x5, 0x7, 0x7, 0x3, 0xffff13d3, 0x8, 0x7, 0x4, 0x80000001, 0x3c2, 0x9, 0xff, 0x601b62fa, 0x3c, 0x5], 0x43, ['system.posix_acl_default\x00', 'system.posix_acl_default\x00', '\xbb\xbb\xbb\xbb\xbb\xbb', '/)$,()})\xad@\x00']}, [""]}, 0x464}, 0x1, 0x0, 0x0, 0x20041010}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x4e24, 0x9, 0x4e22, 0x101, 0x8, 0xa0, 0x80, 0x73, r3, r4}, {0x3, 0x80000001, 0x8, 0x9, 0x2, 0x1, 0x3fc00000000, 0x6}, {0x5, 0x72, 0x9c, 0x303c}, 0x8, 0x6e6bb7, 0x2, 0x0, 0x6}, {{@in=@local, 0x4d6, 0x6c}, 0x2, @in=@remote, 0x3503, 0x0, 0x5c38a64244242fa4, 0x8, 0xffffffc0, 0x9313, 0x7}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x7fff) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="090000000200000008000000b757270900000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 1.78458741s ago: executing program 9 (id=291): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2010, 0x0) 1.738427181s ago: executing program 9 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r8, 0x0) 1.686777541s ago: executing program 4 (id=293): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) time(0x0) (fail_nth: 5) 1.626434772s ago: executing program 7 (id=294): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = io_uring_setup(0x4c7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 1.264449113s ago: executing program 4 (id=295): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2dc, r7, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2c0, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x1d4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback={0xffffffffffffff80}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.106747094s ago: executing program 7 (id=296): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setfsgid(0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 1.090553744s ago: executing program 7 (id=297): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 1.074031544s ago: executing program 7 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1.035287025s ago: executing program 7 (id=299): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10], 0x48) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) quotactl$Q_SETQUOTA(0x7fffffffc0000403, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1400) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000080000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3f, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 646.269886ms ago: executing program 9 (id=300): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 636.897586ms ago: executing program 6 (id=301): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$TCFLSH(r0, 0x800455c9, 0x40000000004) 634.451286ms ago: executing program 9 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='./file0\x00') (fail_nth: 5) 382.311618ms ago: executing program 9 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000900000000000000000000fa000005cea5d4beb7230d8690f65c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) io_cancel(0x0, 0x0, 0x0) 381.510588ms ago: executing program 6 (id=304): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x7, 0x4f6, &(0x7f0000004cc0)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffc, 0x3f}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) 245.539558ms ago: executing program 4 (id=305): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x100800) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000240)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x2, @desc3}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 145.482839ms ago: executing program 7 (id=306): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000180)={[{@data_journal}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x5, 0x76f, &(0x7f0000000780)="$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") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000f40)={0x1f, 0x0, @none, 0x2, 0x2}, 0xe) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001f80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000f80)={0x9906, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0xf5, "2fe208111aa044"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000001c0)={{r4, 0x7e3, 0x200, 0x200, 0xffffffff00000000, 0x5, 0x6, 0x5, 0x40003, 0xb, 0x3, 0x3ff, 0x3, 0xffffffffffffa9f0, 0x7}, 0x10, [0x0, 0x0]}) waitid(0x0, r2, &(0x7f00000000c0), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 0s ago: executing program 6 (id=307): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2010, 0x0) kernel console output (not intermixed with test programs): yz.4.64 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 34.841247][ T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 34.851145][ T564] Call Trace: [ 34.854264][ T564] [ 34.857043][ T564] dump_stack_lvl+0x151/0x1c0 [ 34.861557][ T564] ? io_uring_drop_tctx_refs+0x190/0x190 [ 34.867026][ T564] dump_stack+0x15/0x20 [ 34.871018][ T564] should_fail+0x3c6/0x510 [ 34.875269][ T564] __should_failslab+0xa4/0xe0 [ 34.879869][ T564] should_failslab+0x9/0x20 [ 34.884207][ T564] slab_pre_alloc_hook+0x37/0xd0 [ 34.888983][ T564] kmem_cache_alloc_trace+0x48/0x210 [ 34.894104][ T564] ? tipc_nametbl_lookup_group+0x738/0xc20 [ 34.899748][ T564] tipc_nametbl_lookup_group+0x738/0xc20 [ 34.905332][ T564] __tipc_sendmsg+0x1878/0x3240 [ 34.910017][ T564] ? avc_has_perm_noaudit+0x2dd/0x430 [ 34.915220][ T564] ? local_bh_enable+0x30/0x30 [ 34.919821][ T564] ? avc_denied+0x1b0/0x1b0 [ 34.924162][ T564] ? stack_trace_save+0x1c0/0x1c0 [ 34.929019][ T564] ? avc_has_perm_noaudit+0x430/0x430 [ 34.935190][ T564] ? __kasan_check_write+0x14/0x20 [ 34.940129][ T564] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 34.944992][ T564] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 34.950024][ T564] ? __local_bh_enable_ip+0x58/0x80 [ 34.955077][ T564] ? lock_sock_nested+0x266/0x300 [ 34.959920][ T564] ? sock_init_data+0xc0/0xc0 [ 34.964432][ T564] ? kmem_cache_free+0x116/0x2e0 [ 34.969207][ T564] ? kasan_set_track+0x5d/0x70 [ 34.973809][ T564] ? kasan_set_track+0x4b/0x70 [ 34.978405][ T564] tipc_sendmsg+0x55/0x70 [ 34.982570][ T564] ? tipc_recvmsg+0x13b0/0x13b0 [ 34.987261][ T564] ____sys_sendmsg+0x59e/0x8f0 [ 34.991860][ T564] ? __sys_sendmsg_sock+0x40/0x40 [ 34.996719][ T564] ? import_iovec+0xe5/0x120 [ 35.001144][ T564] ___sys_sendmsg+0x252/0x2e0 [ 35.005665][ T564] ? __sys_sendmsg+0x260/0x260 [ 35.010356][ T564] ? __fdget+0x1bc/0x240 [ 35.014424][ T564] __se_sys_sendmsg+0x19a/0x260 [ 35.019119][ T564] ? __x64_sys_sendmsg+0x90/0x90 [ 35.023890][ T564] ? ksys_write+0x260/0x2c0 [ 35.028224][ T564] ? debug_smp_processor_id+0x17/0x20 [ 35.033431][ T564] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 35.039345][ T564] __x64_sys_sendmsg+0x7b/0x90 [ 35.043937][ T564] x64_sys_call+0x16a/0x9a0 [ 35.048281][ T564] do_syscall_64+0x3b/0xb0 [ 35.052525][ T564] ? clear_bhb_loop+0x35/0x90 [ 35.057045][ T564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.062774][ T564] RIP: 0033:0x7ff5c7931759 [ 35.067024][ T564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.086469][ T564] RSP: 002b:00007ff5c65aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.094726][ T564] RAX: ffffffffffffffda RBX: 00007ff5c7ae8f80 RCX: 00007ff5c7931759 [ 35.102519][ T564] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 35.110337][ T564] RBP: 00007ff5c65aa090 R08: 0000000000000000 R09: 0000000000000000 [ 35.118142][ T564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.125953][ T564] R13: 0000000000000000 R14: 00007ff5c7ae8f80 R15: 00007ffe1af53808 [ 35.133775][ T564] [ 35.182065][ T561] JBD2: no valid journal superblock found [ 35.187993][ T561] EXT4-fs (loop5): error loading journal [ 35.194972][ T572] binfmt_misc: register: failed to install interpreter file ./file0 [ 35.214260][ T576] loop1: detected capacity change from 0 to 512 [ 35.237090][ T578] loop0: detected capacity change from 0 to 1024 [ 35.239325][ T576] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 35.255466][ T576] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.267141][ T578] EXT4-fs (loop0): Invalid log cluster size: 1284 [ 35.286632][ T576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.70: bg 0: block 248: padding at end of block bitmap is not set [ 35.287491][ T582] loop5: detected capacity change from 0 to 512 [ 35.307009][ T576] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.70: Failed to acquire dquot type 1 [ 35.377646][ T582] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 35.387500][ T588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=588 comm=syz.1.74 [ 35.392491][ T582] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.416524][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.443894][ T582] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.72: bg 0: block 248: padding at end of block bitmap is not set [ 35.458358][ T582] EXT4-fs error (device loop5): ext4_acquire_dquot:6187: comm syz.5.72: Failed to acquire dquot type 1 [ 35.496638][ T516] usb 3-1: USB disconnect, device number 2 [ 35.512792][ T595] loop2: detected capacity change from 0 to 1024 [ 35.756303][ T595] EXT4-fs (loop2): Test dummy encryption mode enabled [ 35.809650][ T595] EXT4-fs (loop2): Ignoring removed orlov option [ 35.831387][ T595] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 35.897368][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.904693][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 36.046466][ T20] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 36.057610][ T20] usb 5-1: config 0 has no interface number 0 [ 36.069728][ T20] usb 5-1: config 0 interface 214 has no altsetting 0 [ 36.242806][ T607] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.453961][ T612] binfmt_misc: register: failed to install interpreter file ./file0 [ 36.473880][ T614] syz.2.81[614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.473956][ T614] syz.2.81[614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.483135][ T604] Zero length message leads to an empty skb [ 36.504995][ T617] tipc: Enabling of bearer rejected, failed to enable media [ 36.515169][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 36.515182][ T30] audit: type=1400 audit(1732026479.420:338): avc: denied { write } for pid=613 comm="syz.2.81" name="fib_trie" dev="proc" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.553113][ T621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=621 comm=syz.1.85 [ 36.566490][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.577950][ T20] usb 5-1: New USB device found, idVendor=0413, idProduct=2101, bcdDevice=af.38 [ 36.593562][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.598422][ T624] loop5: detected capacity change from 0 to 1024 [ 36.601699][ T6] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 36.616973][ T20] usb 5-1: Product: syz [ 36.620954][ T20] usb 5-1: Manufacturer: syz [ 36.625376][ T20] usb 5-1: SerialNumber: syz [ 36.630037][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.637052][ T624] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 36.641373][ T20] usb 5-1: config 0 descriptor?? [ 36.658146][ T6] usb 1-1: config 0 descriptor?? [ 36.666463][ T624] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 36.686518][ T624] EXT4-fs error (device loop5): ext4_get_journal_inode:5150: inode #5: comm syz.5.87: unexpected bad inode w/o EXT4_IGET_BAD [ 36.699845][ T624] EXT4-fs (loop5): no journal found [ 36.704955][ T624] EXT4-fs (loop5): can't get journal size [ 36.711744][ T20] pl2303 5-1:0.214: required endpoints missing [ 36.721098][ T624] EXT4-fs (loop5): failed to initialize system zone (-117) [ 36.726415][ T30] audit: type=1400 audit(1732026479.620:339): avc: denied { sys_module } for pid=623 comm="syz.1.86" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 36.731894][ T624] EXT4-fs (loop5): mount failed [ 36.776661][ T625] tipc: Started in network mode [ 36.781413][ T625] tipc: Node identity ac14142f, cluster identity 4711 [ 36.788067][ T625] tipc: New replicast peer: 0.0.0.0 [ 36.793257][ T625] tipc: Enabled bearer , priority 10 [ 36.803599][ T30] audit: type=1400 audit(1732026479.700:340): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.835249][ T30] audit: type=1326 audit(1732026479.730:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 36.859389][ T30] audit: type=1326 audit(1732026479.730:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 36.884477][ T30] audit: type=1326 audit(1732026479.730:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 36.926632][ T30] audit: type=1326 audit(1732026479.730:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 36.961789][ T566] UDC core: couldn't find an available UDC or it's busy: -16 [ 36.970048][ T566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.978101][ T20] usb 5-1: USB disconnect, device number 2 [ 36.993793][ T30] audit: type=1326 audit(1732026479.730:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 37.020968][ T30] audit: type=1326 audit(1732026479.730:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 37.044165][ T30] audit: type=1326 audit(1732026479.730:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 37.046689][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 37.072771][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 37.082521][ T6] usb 1-1: USB disconnect, device number 3 [ 37.508616][ T641] netlink: 44 bytes leftover after parsing attributes in process `syz.5.91'. [ 37.543904][ T641] loop5: detected capacity change from 0 to 128 [ 37.587645][ T651] loop4: detected capacity change from 0 to 16 [ 37.607289][ T641] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 37.657211][ T651] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.756405][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.840614][ T641] attempt to access beyond end of device [ 37.840614][ T641] loop5: rw=3, want=6952, limit=128 [ 37.858271][ T641] attempt to access beyond end of device [ 37.858271][ T641] loop5: rw=2051, want=7894, limit=128 [ 37.906427][ T295] tipc: Node number set to 2886997039 [ 37.955136][ T659] loop1: detected capacity change from 0 to 512 [ 38.036388][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 38.064993][ T659] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 38.087313][ T659] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.156464][ T6] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.167492][ T659] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.98: bg 0: block 248: padding at end of block bitmap is not set [ 38.173917][ T6] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 38.194613][ T659] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.98: Failed to acquire dquot type 1 [ 38.237957][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.244392][ T6] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 38.270998][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.289378][ T6] usb 1-1: config 0 descriptor?? [ 38.795616][ T674] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 38.804377][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 38.810486][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 38.818238][ T6] usb 1-1: USB disconnect, device number 4 [ 38.832063][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.839121][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.175699][ T682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=682 comm=syz.2.103 [ 39.782615][ T705] loop4: detected capacity change from 0 to 1024 [ 39.902595][ T705] EXT4-fs (loop4): Ignoring removed oldalloc option [ 40.069971][ T705] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000001,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 40.201374][ T725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=725 comm=syz.0.118 [ 40.238569][ T728] FAULT_INJECTION: forcing a failure. [ 40.238569][ T728] name failslab, interval 1, probability 0, space 0, times 0 [ 40.251753][ T728] CPU: 1 PID: 728 Comm: syz.0.119 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 40.261294][ T728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 40.271182][ T728] Call Trace: [ 40.274305][ T728] [ 40.277082][ T728] dump_stack_lvl+0x151/0x1c0 [ 40.281601][ T728] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.287065][ T728] dump_stack+0x15/0x20 [ 40.291057][ T728] should_fail+0x3c6/0x510 [ 40.295309][ T728] __should_failslab+0xa4/0xe0 [ 40.299912][ T728] should_failslab+0x9/0x20 [ 40.304247][ T728] slab_pre_alloc_hook+0x37/0xd0 [ 40.309028][ T728] ? sidtab_sid2str_get+0x12b/0x2a0 [ 40.314057][ T728] __kmalloc_track_caller+0x6c/0x260 [ 40.319178][ T728] ? sidtab_sid2str_get+0x12b/0x2a0 [ 40.324215][ T728] kmemdup+0x24/0x50 [ 40.327945][ T728] sidtab_sid2str_get+0x12b/0x2a0 [ 40.332805][ T728] security_sid_to_context_core+0x2b5/0x490 [ 40.338536][ T728] security_sid_to_context+0x33/0x40 [ 40.342241][ T735] loop4: detected capacity change from 0 to 256 [ 40.343686][ T728] selinux_secid_to_secctx+0x2a/0x40 [ 40.355375][ T728] security_secid_to_secctx+0x74/0xb0 [ 40.360587][ T728] audit_log_task_context+0x122/0x350 [ 40.365785][ T728] ? audit_log_key+0x1d0/0x1d0 [ 40.370387][ T728] audit_log_task+0x18c/0x2e0 [ 40.374899][ T728] ? __kasan_check_write+0x14/0x20 [ 40.379845][ T728] ? audit_core_dumps+0x100/0x100 [ 40.384815][ T728] ? migrate_enable+0x1c1/0x2a0 [ 40.389528][ T728] audit_seccomp+0x7a/0x1e0 [ 40.393838][ T728] __seccomp_filter+0xc08/0x1c60 [ 40.398613][ T728] ? file_end_write+0x1c0/0x1c0 [ 40.403322][ T728] ? __kasan_check_write+0x14/0x20 [ 40.408245][ T728] ? __secure_computing+0x300/0x300 [ 40.413279][ T728] ? __mutex_lock_slowpath+0x10/0x10 [ 40.418398][ T728] ? __kasan_check_write+0x14/0x20 [ 40.423346][ T728] ? fput_many+0x160/0x1b0 [ 40.427602][ T728] __secure_computing+0xf0/0x300 [ 40.432373][ T728] syscall_enter_from_user_mode+0xd5/0x1b0 [ 40.438015][ T728] do_syscall_64+0x1e/0xb0 [ 40.442267][ T728] ? clear_bhb_loop+0x35/0x90 [ 40.446798][ T728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.452508][ T728] RIP: 0033:0x7f74e852a759 [ 40.456762][ T728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.476205][ T728] RSP: 002b:00007f74e71a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 40.484455][ T728] RAX: ffffffffffffffda RBX: 00007f74e86e1f80 RCX: 00007f74e852a759 [ 40.492260][ T728] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020000000 [ 40.500074][ T728] RBP: 00007f74e71a3090 R08: 0000000000000000 R09: 0000000000000000 [ 40.506432][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 40.507883][ T728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.522995][ T728] R13: 0000000000000000 R14: 00007f74e86e1f80 R15: 00007ffcbcf323c8 [ 40.530802][ T728] [ 40.581316][ T735] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.612979][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 40.622293][ T742] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 40.809928][ T750] loop2: detected capacity change from 0 to 2048 [ 40.867726][ T750] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,grpjquota=,,errors=continue. Quota mode: none. [ 40.906426][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 41.026438][ T6] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 41.148191][ T762] incfs: Error accessing: ./file0/../file0/../file0/file0. [ 41.155260][ T762] incfs: mount failed -2 [ 41.186469][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.195493][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.203365][ T6] usb 2-1: Product: ă [ 41.207353][ T6] usb 2-1: Manufacturer: ш [ 41.211660][ T6] usb 2-1: SerialNumber: Ц [ 41.366439][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.606426][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 41.679260][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 41.679275][ T30] audit: type=1326 audit(1732026484.580:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=716 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 41.710674][ T30] audit: type=1326 audit(1732026484.580:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=716 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb427e3a759 code=0x7ffc0000 [ 41.745720][ T30] audit: type=1326 audit(1732026484.640:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.769439][ T30] audit: type=1326 audit(1732026484.640:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.799697][ T30] audit: type=1326 audit(1732026484.640:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.838061][ T30] audit: type=1326 audit(1732026484.640:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.862619][ T30] audit: type=1326 audit(1732026484.650:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.898374][ T20] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 41.904651][ T30] audit: type=1326 audit(1732026484.650:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.905753][ T20] usb 5-1: can't read configurations, error -61 [ 41.929137][ T30] audit: type=1326 audit(1732026484.650:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.934847][ T6] usb 2-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 41.960011][ T30] audit: type=1326 audit(1732026484.650:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac3111759 code=0x7ffc0000 [ 41.965852][ T6] usb 2-1: found format II with max.bitrate = 1023, frame size=4 [ 41.965881][ T6] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 41.988946][ T6] usb 2-1: unit 1 not found! [ 41.992496][ T6] usb 2-1: USB disconnect, device number 2 [ 42.106432][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.246437][ T384] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.334200][ T779] tipc: Enabling of bearer rejected, already enabled [ 42.346411][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 42.506548][ T20] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 42.514061][ T20] usb 5-1: can't read configurations, error -61 [ 42.524703][ T20] usb usb5-port1: attempt power cycle [ 42.716638][ T384] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.727121][ T384] usb 3-1: config 0 has no interfaces? [ 42.732567][ T384] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 42.748731][ T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.094227][ T791] loop0: detected capacity change from 0 to 131072 [ 43.096421][ T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.108256][ T384] usb 3-1: config 0 descriptor?? [ 43.156099][ T794] loop1: detected capacity change from 0 to 512 [ 43.176894][ T791] F2FS-fs (loop0): Test dummy encryption mode enabled [ 43.183665][ T791] F2FS-fs (loop0): Can't change test_dummy_encryption on remount [ 43.196578][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 43.237861][ T794] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 43.250206][ T794] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.279827][ T794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.140: bg 0: block 248: padding at end of block bitmap is not set [ 43.300783][ T794] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.140: Failed to acquire dquot type 1 [ 43.349471][ T6] usb 3-1: USB disconnect, device number 3 [ 43.390181][ T20] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 43.397654][ T20] usb 5-1: can't read configurations, error -61 [ 43.397828][ T789] loop0: detected capacity change from 0 to 128 [ 43.479275][ T807] FAULT_INJECTION: forcing a failure. [ 43.479275][ T807] name failslab, interval 1, probability 0, space 0, times 0 [ 43.491788][ T807] CPU: 0 PID: 807 Comm: syz.1.145 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 43.501231][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 43.511122][ T807] Call Trace: [ 43.514247][ T807] [ 43.517024][ T807] dump_stack_lvl+0x151/0x1c0 [ 43.521538][ T807] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.527003][ T807] ? audit_log_vformat+0x398/0x9d0 [ 43.531952][ T807] dump_stack+0x15/0x20 [ 43.535943][ T807] should_fail+0x3c6/0x510 [ 43.540199][ T807] __should_failslab+0xa4/0xe0 [ 43.544796][ T807] should_failslab+0x9/0x20 [ 43.549134][ T807] slab_pre_alloc_hook+0x37/0xd0 [ 43.553910][ T807] kmem_cache_alloc_trace+0x48/0x210 [ 43.559036][ T807] ? audit_log_d_path+0xbd/0x2e0 [ 43.563804][ T807] audit_log_d_path+0xbd/0x2e0 [ 43.568402][ T807] ? get_mm_exe_file+0xd5/0x100 [ 43.573098][ T807] audit_log_d_path_exe+0x42/0x70 [ 43.577954][ T807] audit_log_task+0x20d/0x2e0 [ 43.582464][ T807] ? __kasan_check_write+0x14/0x20 [ 43.587411][ T807] ? audit_core_dumps+0x100/0x100 [ 43.592271][ T807] ? migrate_enable+0x1c1/0x2a0 [ 43.596959][ T807] audit_seccomp+0x7a/0x1e0 [ 43.601301][ T807] __seccomp_filter+0xc08/0x1c60 [ 43.606078][ T807] ? file_end_write+0x1c0/0x1c0 [ 43.610761][ T807] ? __kasan_check_write+0x14/0x20 [ 43.615706][ T807] ? __secure_computing+0x300/0x300 [ 43.620770][ T807] ? __mutex_lock_slowpath+0x10/0x10 [ 43.625861][ T807] ? __kasan_check_write+0x14/0x20 [ 43.630807][ T807] ? fput_many+0x160/0x1b0 [ 43.635062][ T807] ? __ia32_sys_read+0x90/0x90 [ 43.639665][ T807] __secure_computing+0xf0/0x300 [ 43.644434][ T807] syscall_enter_from_user_mode+0xd5/0x1b0 [ 43.650077][ T807] do_syscall_64+0x1e/0xb0 [ 43.654329][ T807] ? clear_bhb_loop+0x35/0x90 [ 43.658842][ T807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.664571][ T807] RIP: 0033:0x7fb427e3a759 [ 43.668826][ T807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.688268][ T807] RSP: 002b:00007fb426ab3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 43.696513][ T807] RAX: ffffffffffffffda RBX: 00007fb427ff1f80 RCX: 00007fb427e3a759 [ 43.704325][ T807] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 43.712138][ T807] RBP: 00007fb426ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 43.719944][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.727755][ T807] R13: 0000000000000000 R14: 00007fb427ff1f80 R15: 00007ffdb0c4be68 [ 43.735575][ T807] [ 43.751105][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 43.816875][ T809] loop0: detected capacity change from 0 to 512 [ 43.828580][ T811] loop1: detected capacity change from 0 to 512 [ 43.846498][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 43.856918][ T811] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.870048][ T811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.881738][ T811] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.147: iget: bad extended attribute block 512 [ 43.887911][ T809] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 43.894728][ T811] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.147: couldn't read orphan inode 15 (err -117) [ 43.906308][ T809] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.918286][ T811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.950963][ T809] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.146: bg 0: block 248: padding at end of block bitmap is not set [ 43.965292][ T809] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.146: Failed to acquire dquot type 1 [ 44.021794][ T20] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 44.029415][ T20] usb 5-1: can't read configurations, error -61 [ 44.035634][ T20] usb usb5-port1: unable to enumerate USB device [ 44.065464][ T817] loop0: detected capacity change from 0 to 256 [ 44.585691][ T822] overlayfs: unrecognized mount option "permit_directio" or missing value [ 44.616969][ T817] exfat: Deprecated parameter 'utf8' [ 44.624210][ T817] exfat: Deprecated parameter 'namecase' [ 44.630020][ T817] exfat: Deprecated parameter 'utf8' [ 45.641848][ T834] loop5: detected capacity change from 0 to 512 [ 45.658183][ T817] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 45.694683][ T817] FAULT_INJECTION: forcing a failure. [ 45.694683][ T817] name failslab, interval 1, probability 0, space 0, times 0 [ 45.716804][ T817] CPU: 1 PID: 817 Comm: syz.0.148 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 45.726364][ T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 45.736265][ T817] Call Trace: [ 45.739381][ T817] [ 45.742156][ T817] dump_stack_lvl+0x151/0x1c0 [ 45.746671][ T817] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.752146][ T817] ? stack_trace_save+0x113/0x1c0 [ 45.754374][ T842] loop2: detected capacity change from 0 to 512 [ 45.756998][ T817] ? stack_trace_snprint+0xf0/0xf0 [ 45.757022][ T817] dump_stack+0x15/0x20 [ 45.757040][ T817] should_fail+0x3c6/0x510 [ 45.757057][ T817] ? mempool_free+0x310/0x310 [ 45.780785][ T817] __should_failslab+0xa4/0xe0 [ 45.785381][ T817] ? mempool_alloc_slab+0x1d/0x30 [ 45.790241][ T817] should_failslab+0x9/0x20 [ 45.794540][ T834] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.794579][ T817] slab_pre_alloc_hook+0x37/0xd0 [ 45.810118][ T817] ? mempool_free+0x310/0x310 [ 45.814635][ T817] ? mempool_alloc_slab+0x1d/0x30 [ 45.819493][ T817] kmem_cache_alloc+0x44/0x200 [ 45.821120][ T834] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.824087][ T817] ? mempool_free+0x310/0x310 [ 45.824111][ T817] mempool_alloc_slab+0x1d/0x30 [ 45.843533][ T817] mempool_alloc+0x149/0x550 [ 45.847963][ T817] ? mempool_resize+0x840/0x840 [ 45.852660][ T817] ? __getblk_gfp+0x42/0x7c0 [ 45.857076][ T817] bio_alloc_bioset+0x12a/0x950 [ 45.861760][ T817] submit_bh_wbc+0x1d1/0x6c0 [ 45.862154][ T834] EXT4-fs error (device loop5): ext4_empty_dir:3143: inode #12: block 32: comm syz.5.152: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 45.866181][ T817] ? unlock_page_memcg+0x146/0x160 [ 45.866207][ T817] write_dirty_buffer+0x146/0x180 [ 45.885801][ T834] EXT4-fs warning (device loop5): ext4_empty_dir:3145: inode #12: comm syz.5.152: directory missing '.' [ 45.889963][ T817] exfat_update_bhs+0x12d/0x2e0 [ 45.889987][ T817] exfat_free_dentry_set+0xae/0x2c0 [ 45.890002][ T817] ? inode_needs_sync+0x10f/0x170 [ 45.890020][ T817] exfat_get_block+0x1406/0x20d0 [ 45.925124][ T817] ? exfat_block_truncate_page+0x50/0x50 [ 45.930582][ T817] ? __kasan_check_read+0x11/0x20 [ 45.935440][ T817] __block_write_begin_int+0x58a/0x1580 [ 45.940832][ T817] ? exfat_block_truncate_page+0x50/0x50 [ 45.946292][ T817] ? page_zero_new_buffers+0x3e0/0x3e0 [ 45.951584][ T817] ? arch_stack_walk+0xf3/0x140 [ 45.956272][ T817] ? wait_for_stable_page+0xe6/0x110 [ 45.961400][ T817] cont_write_begin+0x5d6/0x840 [ 45.966084][ T817] ? generic_cont_expand_simple+0x230/0x230 [ 45.971807][ T817] ? fault_in_readable+0x1d5/0x2e0 [ 45.976762][ T817] ? fault_in_safe_writeable+0x240/0x240 [ 45.982234][ T817] ? vfs_getxattr_alloc+0x580/0x5a0 [ 45.987267][ T817] ? kasan_set_free_info+0x23/0x40 [ 45.992207][ T817] exfat_write_begin+0x12c/0x210 [ 45.997066][ T817] ? exfat_block_truncate_page+0x50/0x50 [ 46.002539][ T817] generic_perform_write+0x2de/0x750 [ 46.007659][ T817] ? grab_cache_page_write_begin+0xa0/0xa0 [ 46.013296][ T817] ? file_remove_privs+0x610/0x610 [ 46.018257][ T817] ? rwsem_write_trylock+0x153/0x340 [ 46.023364][ T817] ? rwsem_mark_wake+0x770/0x770 [ 46.028138][ T817] __generic_file_write_iter+0x25b/0x4b0 [ 46.033605][ T817] generic_file_write_iter+0xaf/0x1c0 [ 46.038814][ T817] vfs_write+0xd5d/0x1110 [ 46.042978][ T817] ? putname+0xfa/0x150 [ 46.046973][ T817] ? file_end_write+0x1c0/0x1c0 [ 46.052177][ T817] ? mutex_lock+0xb6/0x1e0 [ 46.056442][ T817] ? wait_for_completion_killable_timeout+0x10/0x10 [ 46.062855][ T817] ? __fdget_pos+0x2e7/0x3a0 [ 46.067279][ T817] ? ksys_write+0x77/0x2c0 [ 46.071532][ T817] ksys_write+0x199/0x2c0 [ 46.075699][ T817] ? __ia32_sys_read+0x90/0x90 [ 46.080299][ T817] ? debug_smp_processor_id+0x17/0x20 [ 46.085512][ T817] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.091412][ T817] __x64_sys_write+0x7b/0x90 [ 46.095838][ T817] x64_sys_call+0x2f/0x9a0 [ 46.100086][ T817] do_syscall_64+0x3b/0xb0 [ 46.104351][ T817] ? clear_bhb_loop+0x35/0x90 [ 46.108857][ T817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.114592][ T817] RIP: 0033:0x7f74e852a759 [ 46.118839][ T817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.138283][ T817] RSP: 002b:00007f74e71a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.146522][ T817] RAX: ffffffffffffffda RBX: 00007f74e86e1f80 RCX: 00007f74e852a759 [ 46.154334][ T817] RDX: 000000000000fea0 RSI: 0000000020000040 RDI: 0000000000000007 [ 46.162150][ T817] RBP: 00007f74e71a3090 R08: 0000000000000000 R09: 0000000000000000 [ 46.169965][ T817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.177769][ T817] R13: 0000000000000000 R14: 00007f74e86e1f80 R15: 00007ffcbcf323c8 [ 46.185591][ T817] [ 46.190892][ T851] loop1: detected capacity change from 0 to 128 [ 46.219675][ T842] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 46.242680][ T842] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.262972][ T851] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.285590][ T851] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.327783][ T842] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.155: bg 0: block 248: padding at end of block bitmap is not set [ 46.345607][ T851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=851 comm=syz.1.157 [ 46.352703][ T842] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.155: Failed to acquire dquot type 1 [ 46.381954][ T851] syz.1.157 (pid 851) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 46.438375][ T851] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 46.449211][ T863] syz.4.161[863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.449289][ T863] syz.4.161[863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.494434][ T292] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 1024 [ 46.550426][ T292] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 46.570305][ T292] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 46.583439][ T292] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 1024 [ 46.638515][ T292] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 46.843701][ T874] syz.2.164[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.844033][ T874] syz.2.164[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.856080][ T874] syz.2.164[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.867104][ T874] syz.2.164[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.880212][ T292] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 46.904144][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 46.904157][ T30] audit: type=1400 audit(1732026489.810:678): avc: denied { ioctl } for pid=871 comm="syz.2.164" path="socket:[17902]" dev="sockfs" ino=17902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.910247][ T292] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 1024 [ 46.950671][ T292] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 46.965843][ T292] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 46.979286][ T292] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 1024 [ 47.097734][ T314] tipc: Disabling bearer [ 47.103521][ T314] tipc: Left network mode [ 47.213773][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.220714][ T876] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.228015][ T876] device bridge_slave_0 entered promiscuous mode [ 47.234688][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.241817][ T876] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.249061][ T876] device bridge_slave_1 entered promiscuous mode [ 47.333793][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.340714][ T876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.347782][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.354540][ T876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.363728][ T881] request_module fs- succeeded, but still no fs? [ 47.390139][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.399050][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.406249][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.879523][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.881375][ T890] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 47.887495][ T30] audit: type=1400 audit(1732026490.780:679): avc: denied { create } for pid=889 comm="syz.2.169" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.898172][ T890] FAT-fs (loop5): unable to read boot sector [ 47.919044][ T30] audit: type=1400 audit(1732026490.780:680): avc: denied { mounton } for pid=889 comm="syz.2.169" path="/25/file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.947839][ T664] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.954626][ T30] audit: type=1400 audit(1732026490.850:681): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.954696][ T664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.984296][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.992550][ T664] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.999433][ T664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.019371][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.027232][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.047435][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.059021][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.067157][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.074379][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.084949][ T876] device veth0_vlan entered promiscuous mode [ 48.096523][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.104517][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.113653][ T876] device veth1_macvtap entered promiscuous mode [ 48.120649][ T314] device bridge_slave_1 left promiscuous mode [ 48.126708][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.133888][ T314] device bridge_slave_0 left promiscuous mode [ 48.140206][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.148708][ T314] device veth1_macvtap left promiscuous mode [ 48.154658][ T314] device veth0_vlan left promiscuous mode [ 48.188003][ T30] audit: type=1400 audit(1732026491.090:682): avc: denied { connect } for pid=897 comm="syz.5.173" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.217074][ T30] audit: type=1400 audit(1732026491.110:683): avc: denied { read } for pid=897 comm="syz.5.173" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.239545][ T900] loop5: detected capacity change from 0 to 128 [ 48.281660][ T900] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.292610][ T900] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.326533][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 48.338304][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.347810][ T900] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 48.363113][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.376786][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.386003][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.394544][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.395195][ T352] EXT4-fs error (device loop5): ext4_readdir:220: inode #11: comm syz-executor: path /34/file0/lost+found: directory fails checksum at offset 1024 [ 48.417758][ T352] EXT4-fs error (device loop5): ext4_readdir:220: inode #11: comm syz-executor: path /34/file0/lost+found: directory fails checksum at offset 8192 [ 48.435171][ T352] EXT4-fs error (device loop5): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 48.448370][ T352] EXT4-fs error (device loop5): ext4_readdir:220: inode #11: comm syz-executor: path /34/file0/lost+found: directory fails checksum at offset 1024 [ 48.463404][ T352] EXT4-fs error (device loop5): ext4_readdir:220: inode #11: comm syz-executor: path /34/file0/lost+found: directory fails checksum at offset 8192 [ 48.479598][ T352] EXT4-fs error (device loop5): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 48.492651][ T352] EXT4-fs error (device loop5): ext4_readdir:220: inode #11: comm syz-executor: path /34/file0/lost+found: directory fails checksum at offset 1024 [ 48.507761][ T352] EXT4-fs error (device loop5): ext4_readdir:220: inode #11: comm syz-executor: path /34/file0/lost+found: directory fails checksum at offset 8192 [ 48.522762][ T352] EXT4-fs error (device loop5): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 48.536922][ T352] EXT4-fs error (device loop5): ext4_readdir:220: inode #11: comm syz-executor: path /34/file0/lost+found: directory fails checksum at offset 1024 [ 48.698775][ T30] audit: type=1326 audit(1732026491.600:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 48.736492][ T26] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 48.749774][ T30] audit: type=1326 audit(1732026491.620:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 48.777085][ T26] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 48.798967][ T26] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 48.808657][ T30] audit: type=1326 audit(1732026491.620:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 48.813304][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.850652][ T30] audit: type=1326 audit(1732026491.620:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 48.874899][ T896] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 48.913710][ T916] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.920730][ T916] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.928357][ T916] device bridge_slave_0 entered promiscuous mode [ 48.935490][ T916] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.942818][ T916] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.950703][ T916] device bridge_slave_1 entered promiscuous mode [ 49.013737][ T916] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.020615][ T916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.027740][ T916] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.034491][ T916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.061080][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.069967][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.078660][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.100646][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.108949][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.115822][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.123664][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.132468][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.139360][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.147422][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.155320][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.184589][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.203041][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.221847][ T916] device veth0_vlan entered promiscuous mode [ 49.235233][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.243472][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.264070][ T314] device bridge_slave_1 left promiscuous mode [ 49.271812][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.279406][ T314] device bridge_slave_0 left promiscuous mode [ 49.285340][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.301277][ T314] device veth1_macvtap left promiscuous mode [ 49.307682][ T314] device veth0_vlan left promiscuous mode [ 49.518156][ T928] FAULT_INJECTION: forcing a failure. [ 49.518156][ T928] name failslab, interval 1, probability 0, space 0, times 0 [ 49.530695][ T928] CPU: 1 PID: 928 Comm: syz.6.182 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 49.540180][ T928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 49.550081][ T928] Call Trace: [ 49.553287][ T928] [ 49.556060][ T928] dump_stack_lvl+0x151/0x1c0 [ 49.560573][ T928] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.566041][ T928] ? finish_task_switch+0x167/0x7b0 [ 49.571082][ T928] dump_stack+0x15/0x20 [ 49.575069][ T928] should_fail+0x3c6/0x510 [ 49.579320][ T928] __should_failslab+0xa4/0xe0 [ 49.583923][ T928] should_failslab+0x9/0x20 [ 49.588262][ T928] slab_pre_alloc_hook+0x37/0xd0 [ 49.593032][ T928] kmem_cache_alloc_trace+0x48/0x210 [ 49.598154][ T928] ? tty_open+0x10c/0x11b0 [ 49.602407][ T928] tty_open+0x10c/0x11b0 [ 49.606497][ T928] ? irqentry_exit_cond_resched+0x2a/0x30 [ 49.612042][ T928] ? sysvec_reschedule_ipi+0x7d/0x150 [ 49.617247][ T928] ? tty_compat_ioctl+0x560/0x560 [ 49.622106][ T928] ? tty_compat_ioctl+0x560/0x560 [ 49.626972][ T928] chrdev_open+0x4f7/0x620 [ 49.631218][ T928] ? cd_forget+0x170/0x170 [ 49.635474][ T928] ? cd_forget+0x170/0x170 [ 49.639727][ T928] ? do_dentry_open+0x32b/0xfd0 [ 49.644414][ T928] ? cd_forget+0x170/0x170 [ 49.648665][ T928] do_dentry_open+0x81c/0xfd0 [ 49.653201][ T928] vfs_open+0x73/0x80 [ 49.656998][ T928] path_openat+0x26f0/0x2f40 [ 49.661427][ T928] ? kmem_cache_alloc+0xf5/0x200 [ 49.666197][ T928] ? getname_flags+0xba/0x520 [ 49.670713][ T928] ? __x64_sys_openat+0x243/0x290 [ 49.675572][ T928] ? do_filp_open+0x460/0x460 [ 49.680090][ T928] ? irqentry_exit_cond_resched+0x2a/0x30 [ 49.685639][ T928] ? irqentry_exit+0x30/0x40 [ 49.690064][ T928] ? sysvec_reschedule_ipi+0x7d/0x150 [ 49.695275][ T928] do_filp_open+0x21c/0x460 [ 49.699616][ T928] ? vfs_tmpfile+0x2c0/0x2c0 [ 49.704045][ T928] do_sys_openat2+0x13f/0x820 [ 49.708553][ T928] ? __kasan_check_read+0x11/0x20 [ 49.713419][ T928] ? do_sys_open+0x220/0x220 [ 49.717839][ T928] ? __schedule+0xcd4/0x1590 [ 49.722267][ T928] ? irqentry_exit_cond_resched+0x2a/0x30 [ 49.727819][ T928] __x64_sys_openat+0x243/0x290 [ 49.732507][ T928] ? __ia32_sys_open+0x270/0x270 [ 49.737283][ T928] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 49.743117][ T928] x64_sys_call+0x6bf/0x9a0 [ 49.747437][ T928] do_syscall_64+0x3b/0xb0 [ 49.751690][ T928] ? clear_bhb_loop+0x35/0x90 [ 49.756203][ T928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.761930][ T928] RIP: 0033:0x7fd4627e50f0 [ 49.766183][ T928] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 49.785626][ T928] RSP: 002b:00007fd46141cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 49.793875][ T928] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd4627e50f0 [ 49.801689][ T928] RDX: 0000000000000002 RSI: 00007fd46141cc10 RDI: 00000000ffffff9c [ 49.809496][ T928] RBP: 00007fd46141cc10 R08: 0000000000000000 R09: 00007fd46141c987 [ 49.817303][ T928] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 49.825113][ T928] R13: 0000000000000000 R14: 00007fd46299e130 R15: 00007ffe49acabe8 [ 49.832943][ T928] [ 50.028319][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.035666][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.043047][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.051126][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.060241][ T916] device veth1_macvtap entered promiscuous mode [ 50.077739][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.085540][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.093719][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.108425][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.116730][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.217588][ T940] binfmt_misc: register: failed to install interpreter file ./file0 [ 50.517003][ T947] loop4: detected capacity change from 0 to 256 [ 50.537372][ T947] ======================================================= [ 50.537372][ T947] WARNING: The mand mount option has been deprecated and [ 50.537372][ T947] and is ignored by this kernel. Remove the mand [ 50.537372][ T947] option from the mount to silence this warning. [ 50.537372][ T947] ======================================================= [ 50.574478][ T949] loop6: detected capacity change from 0 to 256 [ 50.592463][ T947] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 50.627943][ T949] exfat: Deprecated parameter 'utf8' [ 50.653733][ T947] attempt to access beyond end of device [ 50.653733][ T947] loop4: rw=0, want=34359738496, limit=256 [ 50.653765][ T949] exfat: Deprecated parameter 'namecase' [ 50.673310][ T949] exfat: Deprecated parameter 'utf8' [ 50.766192][ T949] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 50.833094][ T953] FAULT_INJECTION: forcing a failure. [ 50.833094][ T953] name failslab, interval 1, probability 0, space 0, times 0 [ 50.845699][ T953] CPU: 0 PID: 953 Comm: syz.4.188 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 50.855230][ T953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 50.865123][ T953] Call Trace: [ 50.868246][ T953] [ 50.871035][ T953] dump_stack_lvl+0x151/0x1c0 [ 50.875541][ T953] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.881008][ T953] dump_stack+0x15/0x20 [ 50.884997][ T953] should_fail+0x3c6/0x510 [ 50.889253][ T953] __should_failslab+0xa4/0xe0 [ 50.893939][ T953] should_failslab+0x9/0x20 [ 50.898277][ T953] slab_pre_alloc_hook+0x37/0xd0 [ 50.903053][ T953] __kmalloc+0x6d/0x270 [ 50.907045][ T953] ? kvmalloc_node+0x1f0/0x4d0 [ 50.911643][ T953] ? kvmalloc_node+0x281/0x4d0 [ 50.916243][ T953] kvmalloc_node+0x1f0/0x4d0 [ 50.920673][ T953] ? vm_mmap+0xb0/0xb0 [ 50.924574][ T953] ? refcount_dec_and_lock_irqsave+0x140/0x160 [ 50.930569][ T953] map_lookup_elem+0x42f/0x620 [ 50.935238][ T953] __sys_bpf+0x452/0x760 [ 50.939243][ T953] ? fput_many+0x160/0x1b0 [ 50.943497][ T953] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 50.948706][ T953] ? debug_smp_processor_id+0x17/0x20 [ 50.953910][ T953] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.959814][ T953] __x64_sys_bpf+0x7c/0x90 [ 50.964066][ T953] x64_sys_call+0x87f/0x9a0 [ 50.968519][ T953] do_syscall_64+0x3b/0xb0 [ 50.972787][ T953] ? clear_bhb_loop+0x35/0x90 [ 50.977397][ T953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.983118][ T953] RIP: 0033:0x7ff5c7931759 [ 50.987374][ T953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.006814][ T953] RSP: 002b:00007ff5c65aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.015155][ T953] RAX: ffffffffffffffda RBX: 00007ff5c7ae8f80 RCX: 00007ff5c7931759 [ 51.022966][ T953] RDX: 0000000000000020 RSI: 0000000020000200 RDI: 0000000000000001 [ 51.030778][ T953] RBP: 00007ff5c65aa090 R08: 0000000000000000 R09: 0000000000000000 [ 51.038591][ T953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.046401][ T953] R13: 0000000000000000 R14: 00007ff5c7ae8f80 R15: 00007ffe1af53808 [ 51.054217][ T953] [ 51.151024][ T962] loop6: detected capacity change from 0 to 512 [ 51.601476][ T968] loop4: detected capacity change from 0 to 256 [ 51.831515][ T962] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 52.021659][ T962] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.067670][ T26] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 52.075626][ T26] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input4 [ 52.100015][ T26] usb 3-1: USB disconnect, device number 4 [ 52.144696][ T962] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.190: bg 0: block 248: padding at end of block bitmap is not set [ 52.227554][ T962] __quota_error: 16 callbacks suppressed [ 52.227572][ T962] Quota error (device loop6): write_blk: dquota write failed [ 52.330188][ T30] audit: type=1326 audit(1732026495.230:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e852a759 code=0x7ffc0000 [ 52.376072][ T962] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 52.380840][ T30] audit: type=1326 audit(1732026495.260:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e852a759 code=0x7ffc0000 [ 52.701278][ T962] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 52.721177][ T962] EXT4-fs error (device loop6): ext4_acquire_dquot:6187: comm syz.6.190: Failed to acquire dquot type 1 [ 52.815862][ T30] audit: type=1326 audit(1732026495.260:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74e852a759 code=0x7ffc0000 [ 52.866404][ T30] audit: type=1326 audit(1732026495.260:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e852a759 code=0x7ffc0000 [ 52.869759][ T981] loop7: detected capacity change from 0 to 40427 [ 53.041271][ T995] loop2: detected capacity change from 0 to 512 [ 53.102456][ T981] F2FS-fs (loop7): fault_injection options not supported [ 53.168434][ T981] F2FS-fs (loop7): invalid crc value [ 53.187065][ T30] audit: type=1326 audit(1732026495.260:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e852a759 code=0x7ffc0000 [ 53.225073][ T1001] syz.6.201[1001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.225146][ T1001] syz.6.201[1001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.226001][ T30] audit: type=1326 audit(1732026495.260:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74e852a759 code=0x7ffc0000 [ 53.270486][ T30] audit: type=1326 audit(1732026495.260:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e852a759 code=0x7ffc0000 [ 53.293837][ T981] F2FS-fs (loop7): Found nat_bits in checkpoint [ 53.304629][ T995] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext2 [ 53.366598][ T981] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 53.383088][ T916] attempt to access beyond end of device [ 53.383088][ T916] loop7: rw=2049, want=45104, limit=40427 [ 53.503051][ T1017] loop7: detected capacity change from 0 to 16 [ 53.926946][ T1017] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 53.970756][ T1021] FAULT_INJECTION: forcing a failure. [ 53.970756][ T1021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.004860][ T1021] CPU: 0 PID: 1021 Comm: syz.4.207 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 54.014498][ T1021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 54.024477][ T1021] Call Trace: [ 54.027597][ T1021] [ 54.030375][ T1021] dump_stack_lvl+0x151/0x1c0 [ 54.034889][ T1021] ? io_uring_drop_tctx_refs+0x190/0x190 [ 54.040358][ T1021] dump_stack+0x15/0x20 [ 54.044352][ T1021] should_fail+0x3c6/0x510 [ 54.048602][ T1021] should_fail_usercopy+0x1a/0x20 [ 54.053461][ T1021] _copy_from_user+0x20/0xd0 [ 54.057889][ T1021] strndup_user+0xb3/0x150 [ 54.062140][ T1021] __se_sys_mount+0x9b/0x3b0 [ 54.066566][ T1021] ? irqentry_exit_cond_resched+0x2a/0x30 [ 54.072122][ T1021] ? irqentry_exit+0x30/0x40 [ 54.076547][ T1021] ? __x64_sys_mount+0xd0/0xd0 [ 54.081148][ T1021] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 54.086617][ T1021] __x64_sys_mount+0xbf/0xd0 [ 54.091130][ T1021] x64_sys_call+0x49d/0x9a0 [ 54.095467][ T1021] do_syscall_64+0x3b/0xb0 [ 54.099721][ T1021] ? clear_bhb_loop+0x35/0x90 [ 54.104248][ T1021] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.109966][ T1021] RIP: 0033:0x7ff5c7931759 [ 54.114221][ T1021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.133672][ T1021] RSP: 002b:00007ff5c65aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.141904][ T1021] RAX: ffffffffffffffda RBX: 00007ff5c7ae8f80 RCX: 00007ff5c7931759 [ 54.149716][ T1021] RDX: 0000000020000080 RSI: 0000000020000380 RDI: 0000000000000000 [ 54.157525][ T1021] RBP: 00007ff5c65aa090 R08: 00000000200003c0 R09: 0000000000000000 [ 54.165361][ T1021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.173155][ T1021] R13: 0000000000000000 R14: 00007ff5c7ae8f80 R15: 00007ffe1af53808 [ 54.180966][ T1021] [ 54.242579][ T1017] loop7: detected capacity change from 0 to 128 [ 54.330349][ T1026] loop4: detected capacity change from 0 to 256 [ 54.514244][ T1029] binfmt_misc: register: failed to install interpreter file ./file0 [ 54.531999][ T1017] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.543192][ T1017] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.707478][ T1032] loop2: detected capacity change from 0 to 16 [ 54.743308][ T1017] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes) [ 54.811934][ T1017] process 'syz.7.205' launched './file0' with NULL argv: empty string added [ 54.849119][ T1032] erofs: (device loop2): mounted with root inode @ nid 36. [ 54.962424][ T1032] overlayfs: missing 'workdir' [ 55.206997][ T1039] 9pnet: Insufficient options for proto=fd [ 55.536412][ T384] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.597099][ T1046] loop2: detected capacity change from 0 to 2048 [ 55.666815][ T1046] EXT4-fs (loop2): Unrecognized mount option "smackfsroot=ext3" or missing value [ 55.676491][ T315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.768124][ T1049] loop2: detected capacity change from 0 to 128 [ 55.828659][ T1049] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.839160][ T1049] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.856119][ T1049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1049 comm=syz.2.216 [ 55.893526][ T294] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /35/file0/lost+found: directory fails checksum at offset 1024 [ 55.908373][ T384] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.908662][ T294] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /35/file0/lost+found: directory fails checksum at offset 8192 [ 55.919410][ T384] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.933948][ T315] usb 5-1: Using ep0 maxpacket: 16 [ 55.943603][ T384] usb 8-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 55.948718][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 55.957634][ T384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.987395][ T294] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /35/file0/lost+found: directory fails checksum at offset 1024 [ 55.990558][ T384] usb 8-1: config 0 descriptor?? [ 56.002939][ T294] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /35/file0/lost+found: directory fails checksum at offset 8192 [ 56.022035][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 56.035086][ T294] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /35/file0/lost+found: directory fails checksum at offset 1024 [ 56.050037][ T294] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /35/file0/lost+found: directory fails checksum at offset 8192 [ 56.065238][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 56.078266][ T294] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /35/file0/lost+found: directory fails checksum at offset 1024 [ 56.116478][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.127246][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.137109][ T315] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 56.146000][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.154613][ T315] usb 5-1: config 0 descriptor?? [ 56.285240][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.292115][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.299702][ T1053] device bridge_slave_0 entered promiscuous mode [ 56.306578][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.313410][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.320933][ T1053] device bridge_slave_1 entered promiscuous mode [ 56.360543][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.367422][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.374510][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.381329][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.390825][ T1058] loop0: detected capacity change from 0 to 2048 [ 56.421061][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.428614][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.435742][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.444768][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.452825][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.457549][ T1058] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 56.459690][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.477573][ T384] wacom 0003:056A:5000.0002: unbalanced collection at end of report description [ 56.489197][ T384] wacom 0003:056A:5000.0002: parse failed [ 56.494777][ T384] wacom: probe of 0003:056A:5000.0002 failed with error -22 [ 56.503706][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.511757][ T315] usbhid 5-1:0.0: can't add hid device: -71 [ 56.511939][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.518263][ T315] usbhid: probe of 5-1:0.0 failed with error -71 [ 56.524317][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.524784][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.532391][ T315] usb 5-1: USB disconnect, device number 7 [ 56.540951][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.571382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.583943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.586123][ T1058] loop0: detected capacity change from 0 to 256 [ 56.592589][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.605145][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.613695][ T1053] device veth0_vlan entered promiscuous mode [ 56.622978][ T1058] exfat: Deprecated parameter 'namecase' [ 56.633356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.643422][ T1058] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 56.656879][ T1053] device veth1_macvtap entered promiscuous mode [ 56.670368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.686752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.691464][ T6] usb 8-1: USB disconnect, device number 2 [ 56.704691][ T1061] loop0: detected capacity change from 0 to 128 [ 56.728363][ T1064] binfmt_misc: register: failed to install interpreter file ./file0 [ 56.732711][ T1061] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.751172][ T1061] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.762708][ T314] device bridge_slave_1 left promiscuous mode [ 56.769006][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.776660][ T314] device bridge_slave_0 left promiscuous mode [ 56.782609][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.796199][ T314] device veth1_macvtap left promiscuous mode [ 56.806749][ T314] device veth0_vlan left promiscuous mode [ 56.809622][ T1061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1061 comm=syz.0.221 [ 56.887438][ T291] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /37/file0/lost+found: directory fails checksum at offset 1024 [ 56.902518][ T291] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /37/file0/lost+found: directory fails checksum at offset 8192 [ 56.918013][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 56.979513][ T291] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /37/file0/lost+found: directory fails checksum at offset 1024 [ 57.003876][ T1072] loop8: detected capacity change from 0 to 256 [ 57.032813][ T291] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /37/file0/lost+found: directory fails checksum at offset 8192 [ 57.130936][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 57.165566][ T291] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /37/file0/lost+found: directory fails checksum at offset 1024 [ 57.183853][ T291] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /37/file0/lost+found: directory fails checksum at offset 8192 [ 57.201038][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 57.231203][ T1074] fuse: Bad value for 'user_id' [ 57.238897][ T291] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /37/file0/lost+found: directory fails checksum at offset 1024 [ 57.817158][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 57.817174][ T30] audit: type=1400 audit(1732026500.710:838): avc: denied { connect } for pid=1079 comm="syz.8.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.108864][ T30] audit: type=1326 audit(1732026501.010:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4786c759 code=0x7ffc0000 [ 58.110077][ T1091] FAULT_INJECTION: forcing a failure. [ 58.110077][ T1091] name failslab, interval 1, probability 0, space 0, times 0 [ 58.132185][ T30] audit: type=1326 audit(1732026501.010:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4786c759 code=0x7ffc0000 [ 58.186493][ T1091] CPU: 0 PID: 1091 Comm: syz.8.231 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 58.196137][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 58.206028][ T1091] Call Trace: [ 58.209146][ T1091] [ 58.211923][ T1091] dump_stack_lvl+0x151/0x1c0 [ 58.216441][ T1091] ? io_uring_drop_tctx_refs+0x190/0x190 [ 58.221905][ T1091] ? audit_log_vformat+0x398/0x9d0 [ 58.226856][ T1091] dump_stack+0x15/0x20 [ 58.230843][ T1091] should_fail+0x3c6/0x510 [ 58.235101][ T1091] __should_failslab+0xa4/0xe0 [ 58.239698][ T1091] should_failslab+0x9/0x20 [ 58.244040][ T1091] slab_pre_alloc_hook+0x37/0xd0 [ 58.248820][ T1091] kmem_cache_alloc_trace+0x48/0x210 [ 58.253934][ T1091] ? audit_log_d_path+0xbd/0x2e0 [ 58.258707][ T1091] audit_log_d_path+0xbd/0x2e0 [ 58.263317][ T1091] ? get_mm_exe_file+0xd5/0x100 [ 58.267993][ T1091] audit_log_d_path_exe+0x42/0x70 [ 58.272855][ T1091] audit_log_task+0x20d/0x2e0 [ 58.277367][ T1091] ? __kasan_check_write+0x14/0x20 [ 58.277455][ T30] audit: type=1326 audit(1732026501.010:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee4786b0f0 code=0x7ffc0000 [ 58.282309][ T1091] ? audit_core_dumps+0x100/0x100 [ 58.282330][ T1091] ? migrate_enable+0x1c1/0x2a0 [ 58.310351][ T30] audit: type=1326 audit(1732026501.010:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee4786b23f code=0x7ffc0000 [ 58.314864][ T1091] audit_seccomp+0x7a/0x1e0 [ 58.342041][ T1091] __seccomp_filter+0xc08/0x1c60 [ 58.346803][ T1091] ? file_end_write+0x1c0/0x1c0 [ 58.351488][ T1091] ? __kasan_check_write+0x14/0x20 [ 58.356434][ T1091] ? __secure_computing+0x300/0x300 [ 58.361467][ T1091] ? __mutex_lock_slowpath+0x10/0x10 [ 58.366586][ T1091] ? __kasan_check_write+0x14/0x20 [ 58.371540][ T1091] ? fput_many+0x160/0x1b0 [ 58.375785][ T1091] ? __ia32_sys_read+0x90/0x90 [ 58.380391][ T1091] __secure_computing+0xf0/0x300 [ 58.385167][ T1091] syscall_enter_from_user_mode+0xd5/0x1b0 [ 58.390802][ T1091] do_syscall_64+0x1e/0xb0 [ 58.395055][ T1091] ? clear_bhb_loop+0x35/0x90 [ 58.399570][ T1091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.405296][ T1091] RIP: 0033:0x7fee4786c759 [ 58.409550][ T1091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.429080][ T1091] RSP: 002b:00007fee464e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 58.437325][ T1091] RAX: ffffffffffffffda RBX: 00007fee47a23f80 RCX: 00007fee4786c759 [ 58.445136][ T1091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.452949][ T1091] RBP: 00007fee464e5090 R08: 0000000000000000 R09: 0000000000000000 [ 58.460761][ T1091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.468571][ T1091] R13: 0000000000000000 R14: 00007fee47a23f80 R15: 00007ffc0c3c64f8 [ 58.476382][ T1091] [ 58.480733][ T30] audit: type=1326 audit(1732026501.010:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fee4786c759 code=0x7ffc0000 [ 58.505358][ T30] audit: type=1326 audit(1732026501.380:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fee4786b19c code=0x7ffc0000 [ 58.529117][ T30] audit: type=1326 audit(1732026501.380:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee4786b23f code=0x7ffc0000 [ 58.552570][ T30] audit: type=1326 audit(1732026501.380:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee4786b3ea code=0x7ffc0000 [ 58.577662][ T1095] serio: Serial port ptm1 [ 58.580214][ T30] audit: type=1326 audit(1732026501.380:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.8.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4786c759 code=0x7ffc0000 [ 58.616682][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.623569][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.630944][ T1083] device bridge_slave_0 entered promiscuous mode [ 58.637906][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.644830][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.652136][ T1083] device bridge_slave_1 entered promiscuous mode [ 58.657458][ T1095] FAULT_INJECTION: forcing a failure. [ 58.657458][ T1095] name failslab, interval 1, probability 0, space 0, times 0 [ 58.671010][ T1095] CPU: 1 PID: 1095 Comm: syz.7.232 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 58.680634][ T1095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 58.690528][ T1095] Call Trace: [ 58.693650][ T1095] [ 58.696441][ T1095] dump_stack_lvl+0x151/0x1c0 [ 58.700944][ T1095] ? io_uring_drop_tctx_refs+0x190/0x190 [ 58.706410][ T1095] ? down_read+0xd50/0x1900 [ 58.710750][ T1095] ? ____kasan_slab_free+0x131/0x160 [ 58.715871][ T1095] dump_stack+0x15/0x20 [ 58.719864][ T1095] should_fail+0x3c6/0x510 [ 58.724122][ T1095] __should_failslab+0xa4/0xe0 [ 58.728721][ T1095] should_failslab+0x9/0x20 [ 58.733054][ T1095] slab_pre_alloc_hook+0x37/0xd0 [ 58.737829][ T1095] ? dev_uevent_filter+0xb0/0xb0 [ 58.742602][ T1095] kmem_cache_alloc_trace+0x48/0x210 [ 58.748071][ T1095] ? kobject_uevent_env+0x269/0x700 [ 58.753104][ T1095] ? dev_uevent_filter+0xb0/0xb0 [ 58.757880][ T1095] kobject_uevent_env+0x269/0x700 [ 58.762739][ T1095] kobject_uevent+0x1f/0x30 [ 58.767080][ T1095] device_del+0xcbd/0xe90 [ 58.771253][ T1095] ? kill_device+0xd0/0xd0 [ 58.775497][ T1095] ? __kasan_check_write+0x14/0x20 [ 58.780451][ T1095] ? mutex_lock+0xb6/0x1e0 [ 58.784704][ T1095] serio_destroy_port+0x37b/0x4b0 [ 58.789561][ T1095] serio_unregister_port+0x135/0x150 [ 58.794680][ T1095] serport_ldisc_read+0x4f0/0x5b0 [ 58.799540][ T1095] ? serport_ldisc_close+0x40/0x40 [ 58.804591][ T1095] ? io_schedule+0x120/0x120 [ 58.809018][ T1095] ? kmem_cache_free+0x116/0x2e0 [ 58.813796][ T1095] ? kmem_cache_free+0x116/0x2e0 [ 58.818568][ T1095] tty_read+0x2a9/0x5e0 [ 58.822558][ T1095] ? __x64_sys_openat+0x243/0x290 [ 58.827610][ T1095] ? x64_sys_call+0x6bf/0x9a0 [ 58.832123][ T1095] ? tty_lookup_driver+0x4a0/0x4a0 [ 58.837076][ T1095] ? kstrtouint_from_user+0x20a/0x2a0 [ 58.842287][ T1095] do_iter_readv_writev+0x58e/0x790 [ 58.847318][ T1095] ? generic_file_rw_checks+0x270/0x270 [ 58.852696][ T1095] ? fsnotify_perm+0x123/0x5b0 [ 58.857295][ T1095] ? security_file_permission+0x86/0xb0 [ 58.862677][ T1095] do_iter_read+0x1f8/0x7b0 [ 58.867018][ T1095] ? import_iovec+0xe5/0x120 [ 58.871449][ T1095] do_readv+0x268/0x460 [ 58.875435][ T1095] ? do_iter_readv_writev+0x790/0x790 [ 58.880642][ T1095] ? ksys_write+0x260/0x2c0 [ 58.884983][ T1095] ? debug_smp_processor_id+0x17/0x20 [ 58.890193][ T1095] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 58.896109][ T1095] __x64_sys_readv+0x7d/0x90 [ 58.900519][ T1095] x64_sys_call+0xad/0x9a0 [ 58.904770][ T1095] do_syscall_64+0x3b/0xb0 [ 58.909023][ T1095] ? clear_bhb_loop+0x35/0x90 [ 58.913536][ T1095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.919264][ T1095] RIP: 0033:0x7fab82d79759 [ 58.923520][ T1095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.942958][ T1095] RSP: 002b:00007fab819f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 58.951204][ T1095] RAX: ffffffffffffffda RBX: 00007fab82f30f80 RCX: 00007fab82d79759 [ 58.959016][ T1095] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 58.966826][ T1095] RBP: 00007fab819f2090 R08: 0000000000000000 R09: 0000000000000000 [ 58.974637][ T1095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.982447][ T1095] R13: 0000000000000000 R14: 00007fab82f30f80 R15: 00007ffc09dc1318 [ 58.990265][ T1095] [ 59.053638][ T1107] loop8: detected capacity change from 0 to 256 [ 59.069936][ T1105] serio: Serial port ptm1 [ 59.072810][ T1103] loop4: detected capacity change from 0 to 512 [ 59.086819][ T1107] exfat: Deprecated parameter 'namecase' [ 59.092400][ T1107] exfat: Unknown parameter 'uma­¨' [ 59.111525][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.118412][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.125454][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.132288][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.141518][ T1103] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 59.164531][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.171618][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.178889][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.186205][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.210261][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.218349][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.225227][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.232478][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.240744][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.247621][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.270621][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.287501][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.369105][ T1115] netlink: 'syz.8.236': attribute type 4 has an invalid length. [ 59.388180][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.496830][ T314] device bridge_slave_1 left promiscuous mode [ 61.504473][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.512164][ T314] device bridge_slave_0 left promiscuous mode [ 61.518516][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.534122][ T314] device veth1_macvtap left promiscuous mode [ 61.540123][ T314] device veth0_vlan left promiscuous mode [ 61.634859][ T1124] loop4: detected capacity change from 0 to 512 [ 61.784370][ T1124] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 61.797194][ T1124] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.854046][ T1083] device veth0_vlan entered promiscuous mode [ 61.860937][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.869021][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.876268][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.893344][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.893588][ T1124] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.241: bg 0: block 248: padding at end of block bitmap is not set [ 61.901598][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.915366][ T1124] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.241: Failed to acquire dquot type 1 [ 61.924171][ T1083] device veth1_macvtap entered promiscuous mode [ 61.940022][ T315] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.952666][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.960199][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.968749][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.978393][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.986669][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.018599][ T1132] binfmt_misc: register: failed to install interpreter file ./file0 [ 62.092907][ T1143] loop4: detected capacity change from 0 to 256 [ 62.116820][ T1143] exfat: Deprecated parameter 'namecase' [ 62.122528][ T1143] exfat: Unknown parameter 'uma­¨' [ 62.224689][ T315] usb 8-1: Using ep0 maxpacket: 32 [ 62.346690][ T315] usb 8-1: config 0 has an invalid interface number: 16 but max is 0 [ 62.354747][ T315] usb 8-1: config 0 has no interface number 0 [ 62.360998][ T315] usb 8-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 62.371266][ T315] usb 8-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 62.536564][ T315] usb 8-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 62.547018][ T315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.554901][ T315] usb 8-1: Product: syz [ 62.559213][ T315] usb 8-1: Manufacturer: syz [ 62.568207][ T315] usb 8-1: config 0 descriptor?? [ 62.586540][ T315] usb 8-1: can't set config #0, error -71 [ 62.592929][ T315] usb 8-1: USB disconnect, device number 3 [ 63.184807][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 63.184823][ T30] audit: type=1400 audit(1732026506.080:955): avc: denied { read } for pid=1157 comm="syz.4.249" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.285799][ T30] audit: type=1400 audit(1732026506.110:956): avc: denied { open } for pid=1157 comm="syz.4.249" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.339056][ T30] audit: type=1400 audit(1732026506.110:957): avc: denied { ioctl } for pid=1157 comm="syz.4.249" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.380380][ T30] audit: type=1400 audit(1732026506.120:958): avc: denied { set_context_mgr } for pid=1157 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.403594][ T30] audit: type=1326 audit(1732026506.240:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1160 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 63.427790][ T30] audit: type=1326 audit(1732026506.240:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1160 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 63.451038][ T30] audit: type=1326 audit(1732026506.240:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1160 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 63.474733][ T30] audit: type=1326 audit(1732026506.240:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1160 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 63.479361][ T1166] loop8: detected capacity change from 0 to 512 [ 63.504420][ T30] audit: type=1326 audit(1732026506.240:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1160 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 63.530811][ T30] audit: type=1326 audit(1732026506.270:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1160 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7931759 code=0x7ffc0000 [ 63.584283][ T1171] FAULT_INJECTION: forcing a failure. [ 63.584283][ T1171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.597218][ T1171] CPU: 1 PID: 1171 Comm: syz.9.252 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 63.606770][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 63.616668][ T1171] Call Trace: [ 63.619795][ T1171] [ 63.622567][ T1171] dump_stack_lvl+0x151/0x1c0 [ 63.627086][ T1171] ? io_uring_drop_tctx_refs+0x190/0x190 [ 63.632548][ T1171] ? __wake_up_klogd+0xd5/0x110 [ 63.637234][ T1171] dump_stack+0x15/0x20 [ 63.641225][ T1171] should_fail+0x3c6/0x510 [ 63.645499][ T1171] should_fail_usercopy+0x1a/0x20 [ 63.650342][ T1171] _copy_from_iter+0x22f/0xdc0 [ 63.654941][ T1171] ? irqentry_exit_cond_resched+0x2a/0x30 [ 63.660498][ T1171] ? copy_mc_pipe_to_iter+0x760/0x760 [ 63.665705][ T1171] ? __check_object_size+0x73/0x3d0 [ 63.670736][ T1171] ? __virt_addr_valid+0x1db/0x2f0 [ 63.675685][ T1171] ? __check_object_size+0x2ec/0x3d0 [ 63.680808][ T1171] netlink_sendmsg+0x8b9/0xd20 [ 63.681387][ T1173] syz.7.253[1173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.685405][ T1171] ? netlink_getsockopt+0x560/0x560 [ 63.685429][ T1171] ? security_socket_sendmsg+0x82/0xb0 [ 63.696774][ T1173] syz.7.253[1173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.701459][ T1171] ? netlink_getsockopt+0x560/0x560 [ 63.722821][ T1171] ____sys_sendmsg+0x59e/0x8f0 [ 63.727410][ T1171] ? __sys_sendmsg_sock+0x40/0x40 [ 63.732273][ T1171] ? import_iovec+0xe5/0x120 [ 63.736699][ T1171] ___sys_sendmsg+0x252/0x2e0 [ 63.741297][ T1171] ? irqentry_exit_cond_resched+0x2a/0x30 [ 63.746855][ T1171] ? __sys_sendmsg+0x260/0x260 [ 63.751472][ T1171] ? __switch_to+0x62a/0x1190 [ 63.755970][ T1171] ? __fdget+0x1bc/0x240 [ 63.760046][ T1171] __se_sys_sendmsg+0x19a/0x260 [ 63.764731][ T1171] ? __x64_sys_sendmsg+0x90/0x90 [ 63.769504][ T1171] ? ksys_write+0x260/0x2c0 [ 63.773850][ T1171] ? __kasan_check_write+0x14/0x20 [ 63.778791][ T1171] ? switch_fpu_return+0x15f/0x2e0 [ 63.783737][ T1171] __x64_sys_sendmsg+0x7b/0x90 [ 63.788339][ T1171] x64_sys_call+0x16a/0x9a0 [ 63.792679][ T1171] do_syscall_64+0x3b/0xb0 [ 63.796930][ T1171] ? clear_bhb_loop+0x35/0x90 [ 63.801445][ T1171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.807173][ T1171] RIP: 0033:0x7f594d6f4759 [ 63.811426][ T1171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.830868][ T1171] RSP: 002b:00007f594c32b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.839111][ T1171] RAX: ffffffffffffffda RBX: 00007f594d8ac130 RCX: 00007f594d6f4759 [ 63.846925][ T1171] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000009 [ 63.854737][ T1171] RBP: 00007f594c32b090 R08: 0000000000000000 R09: 0000000000000000 [ 63.862545][ T1171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.870358][ T1171] R13: 0000000000000000 R14: 00007f594d8ac130 R15: 00007ffc27779218 [ 63.878173][ T1171] [ 63.897570][ T1175] binfmt_misc: register: failed to install interpreter file ./file0 [ 63.959959][ T1173] loop7: detected capacity change from 0 to 256 [ 63.973095][ T1166] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 63.985712][ T1166] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.007150][ T1166] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.251: bg 0: block 248: padding at end of block bitmap is not set [ 64.029817][ T1173] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 64.031114][ T1166] EXT4-fs error (device loop8): ext4_acquire_dquot:6187: comm syz.8.251: Failed to acquire dquot type 1 [ 64.073866][ T1184] FAULT_INJECTION: forcing a failure. [ 64.073866][ T1184] name failslab, interval 1, probability 0, space 0, times 0 [ 64.103518][ T1184] CPU: 0 PID: 1184 Comm: syz.4.255 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 64.113164][ T1184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 64.123078][ T1184] Call Trace: [ 64.126173][ T1184] [ 64.128949][ T1184] dump_stack_lvl+0x151/0x1c0 [ 64.133462][ T1184] ? io_uring_drop_tctx_refs+0x190/0x190 [ 64.138931][ T1184] ? avc_has_perm_noaudit+0x2dd/0x430 [ 64.144141][ T1184] dump_stack+0x15/0x20 [ 64.148133][ T1184] should_fail+0x3c6/0x510 [ 64.152383][ T1184] __should_failslab+0xa4/0xe0 [ 64.157016][ T1184] should_failslab+0x9/0x20 [ 64.161324][ T1184] slab_pre_alloc_hook+0x37/0xd0 [ 64.166095][ T1184] ? rfkill_fop_ioctl+0x150/0x150 [ 64.170957][ T1184] kmem_cache_alloc_trace+0x48/0x210 [ 64.176079][ T1184] ? rfkill_fop_open+0x5a/0x680 [ 64.180763][ T1184] ? rfkill_fop_ioctl+0x150/0x150 [ 64.185630][ T1184] rfkill_fop_open+0x5a/0x680 [ 64.190137][ T1184] ? __kasan_check_write+0x14/0x20 [ 64.195088][ T1184] ? kobject_get_unless_zero+0x229/0x320 [ 64.200556][ T1184] ? __kobject_del+0x300/0x300 [ 64.205151][ T1184] ? rfkill_fop_ioctl+0x150/0x150 [ 64.210014][ T1184] misc_open+0x30f/0x380 [ 64.214096][ T1184] chrdev_open+0x4f7/0x620 [ 64.218347][ T1184] ? cd_forget+0x170/0x170 [ 64.222606][ T1184] ? fsnotify_perm+0x3e5/0x5b0 [ 64.227201][ T1184] ? cd_forget+0x170/0x170 [ 64.231450][ T1184] do_dentry_open+0x81c/0xfd0 [ 64.235970][ T1184] vfs_open+0x73/0x80 [ 64.239786][ T1184] path_openat+0x26f0/0x2f40 [ 64.244226][ T1184] ? kmem_cache_free+0x116/0x2e0 [ 64.248995][ T1184] ? __kasan_slab_alloc+0xb1/0xe0 [ 64.253849][ T1184] ? kmem_cache_alloc+0xf5/0x200 [ 64.258620][ T1184] ? getname_flags+0xba/0x520 [ 64.263133][ T1184] ? __x64_sys_openat+0x243/0x290 [ 64.267997][ T1184] ? do_filp_open+0x460/0x460 [ 64.272513][ T1184] do_filp_open+0x21c/0x460 [ 64.276848][ T1184] ? vfs_tmpfile+0x2c0/0x2c0 [ 64.281283][ T1184] do_sys_openat2+0x13f/0x820 [ 64.285783][ T1184] ? wait_for_completion_killable_timeout+0x10/0x10 [ 64.292206][ T1184] ? __mutex_lock_slowpath+0x10/0x10 [ 64.297335][ T1184] ? do_sys_open+0x220/0x220 [ 64.301756][ T1184] ? __kasan_check_write+0x14/0x20 [ 64.306708][ T1184] ? ksys_write+0x260/0x2c0 [ 64.311047][ T1184] __x64_sys_openat+0x243/0x290 [ 64.315731][ T1184] ? __ia32_sys_open+0x270/0x270 [ 64.320503][ T1184] ? debug_smp_processor_id+0x17/0x20 [ 64.325716][ T1184] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 64.331612][ T1184] ? exit_to_user_mode_prepare+0x39/0xa0 [ 64.337078][ T1184] x64_sys_call+0x6bf/0x9a0 [ 64.341420][ T1184] do_syscall_64+0x3b/0xb0 [ 64.345672][ T1184] ? clear_bhb_loop+0x35/0x90 [ 64.350185][ T1184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.355915][ T1184] RIP: 0033:0x7ff5c7931759 [ 64.360168][ T1184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.379612][ T1184] RSP: 002b:00007ff5c6568038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.387853][ T1184] RAX: ffffffffffffffda RBX: 00007ff5c7ae9130 RCX: 00007ff5c7931759 [ 64.395666][ T1184] RDX: 0000000000000200 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 64.403476][ T1184] RBP: 00007ff5c6568090 R08: 0000000000000000 R09: 0000000000000000 [ 64.411287][ T1184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.419102][ T1184] R13: 0000000000000000 R14: 00007ff5c7ae9130 R15: 00007ffe1af53808 [ 64.426918][ T1184] [ 65.430375][ T1190] binfmt_misc: register: failed to install interpreter file ./file0 [ 65.570039][ T1200] loop9: detected capacity change from 0 to 256 [ 65.576188][ T1198] loop8: detected capacity change from 0 to 2048 [ 65.678685][ T1200] exfat: Deprecated parameter 'namecase' [ 65.688890][ T1198] EXT4-fs (loop8): Ignoring removed bh option [ 65.713445][ T1200] exfat: Unknown parameter 'uma­¨' [ 65.745607][ T1198] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 65.816470][ T1198] EXT4-fs (loop8): Ignoring removed nobh option [ 65.829431][ T1198] EXT4-fs (loop8): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue. Quota mode: none. [ 65.848449][ T1198] tipc: Started in network mode [ 65.855348][ T1198] tipc: Node identity ac14140f, cluster identity 4711 [ 65.863189][ T1198] tipc: New replicast peer: 255.255.255.255 [ 65.875486][ T1198] tipc: Enabled bearer , priority 10 [ 66.335509][ T1213] loop6: detected capacity change from 0 to 512 [ 66.386384][ T384] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 66.426600][ T1213] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.442489][ T1213] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.461186][ T1198] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #15: comm syz.8.260: inline data xattr refers to an external xattr inode [ 66.486446][ T1213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.264'. [ 66.495813][ T1198] incfs: Options parsing error. -22 [ 66.500967][ T1198] incfs: mount failed -22 [ 66.505439][ T1213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.516414][ T1198] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 66.581465][ T1223] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.720158][ T1233] loop9: detected capacity change from 0 to 512 [ 66.738041][ T1233] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.749003][ T1233] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.776455][ T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.854572][ T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.883825][ T384] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 66.958912][ T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.966751][ T60] tipc: Node number set to 2886997007 [ 66.974969][ T384] usb 5-1: config 0 descriptor?? [ 67.026545][ T1239] loop9: detected capacity change from 0 to 1024 [ 67.116877][ T1239] EXT4-fs (loop9): Test dummy encryption mode enabled [ 67.123566][ T1239] EXT4-fs (loop9): Ignoring removed orlov option [ 67.131142][ T1239] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 67.367529][ T384] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0 [ 67.375109][ T384] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0 [ 67.382566][ T384] hid-multitouch 0003:0EEF:72D0.0003: item fetching failed at offset 2/5 [ 67.391665][ T384] hid-multitouch: probe of 0003:0EEF:72D0.0003 failed with error -22 [ 67.513976][ T1244] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 67.675789][ T60] usb 5-1: USB disconnect, device number 8 [ 67.687640][ T1247] loop7: detected capacity change from 0 to 128 [ 67.689220][ T1249] binfmt_misc: register: failed to install interpreter file ./file0 [ 67.709594][ T1247] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.721376][ T1247] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.736216][ T1247] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.271: No space for directory leaf checksum. Please run e2fsck -D. [ 67.752337][ T1247] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.271: checksumming directory block 0 [ 68.094423][ T1256] syz.9.274[1256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.094466][ T1256] syz.9.274[1256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.206394][ T315] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.376407][ T931] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 68.598365][ T1261] loop6: detected capacity change from 0 to 512 [ 68.606622][ T315] usb 8-1: config 0 has an invalid interface number: 62 but max is 0 [ 68.614787][ T315] usb 8-1: config 0 has no interface number 0 [ 68.621069][ T315] usb 8-1: config 0 interface 62 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 68.637720][ T1261] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.648798][ T1261] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.662422][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.276'. [ 68.671252][ T1261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.733176][ T1266] binfmt_misc: register: failed to install interpreter file ./file0 [ 68.741058][ T931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 68.750980][ T931] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 68.761318][ T1268] FAULT_INJECTION: forcing a failure. [ 68.761318][ T1268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.766251][ T931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 68.774481][ T1268] CPU: 0 PID: 1268 Comm: syz.6.278 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 68.784055][ T931] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 68.793335][ T1268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 68.793349][ T1268] Call Trace: [ 68.793354][ T1268] [ 68.793360][ T1268] dump_stack_lvl+0x151/0x1c0 [ 68.793383][ T1268] ? io_uring_drop_tctx_refs+0x190/0x190 [ 68.793400][ T1268] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 68.793421][ T1268] dump_stack+0x15/0x20 [ 68.793435][ T1268] should_fail+0x3c6/0x510 [ 68.793450][ T1268] should_fail_usercopy+0x1a/0x20 [ 68.793465][ T1268] _copy_to_user+0x20/0x90 [ 68.793479][ T1268] simple_read_from_buffer+0xc7/0x150 [ 68.793496][ T1268] proc_fail_nth_read+0x1a3/0x210 [ 68.861847][ T1268] ? proc_fault_inject_write+0x390/0x390 [ 68.867305][ T1268] ? fsnotify_perm+0x269/0x5b0 [ 68.871907][ T1268] ? security_file_permission+0x86/0xb0 [ 68.877293][ T1268] ? proc_fault_inject_write+0x390/0x390 [ 68.882754][ T1268] vfs_read+0x27d/0xd40 [ 68.886752][ T1268] ? fput_many+0x160/0x1b0 [ 68.891000][ T1268] ? kernel_read+0x1f0/0x1f0 [ 68.895428][ T1268] ? __kasan_check_write+0x14/0x20 [ 68.900375][ T1268] ? mutex_lock+0xb6/0x1e0 [ 68.904627][ T1268] ? wait_for_completion_killable_timeout+0x10/0x10 [ 68.911053][ T1268] ? __fdget_pos+0x2e7/0x3a0 [ 68.915475][ T1268] ? ksys_read+0x77/0x2c0 [ 68.919646][ T1268] ksys_read+0x199/0x2c0 [ 68.923720][ T1268] ? vfs_write+0x1110/0x1110 [ 68.928159][ T1268] ? debug_smp_processor_id+0x17/0x20 [ 68.933355][ T1268] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 68.939260][ T1268] __x64_sys_read+0x7b/0x90 [ 68.943596][ T1268] x64_sys_call+0x28/0x9a0 [ 68.947850][ T1268] do_syscall_64+0x3b/0xb0 [ 68.952124][ T1268] ? clear_bhb_loop+0x35/0x90 [ 68.956570][ T931] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 68.956623][ T1268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.965702][ T931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.971292][ T1268] RIP: 0033:0x7fd4627e519c [ 68.971320][ T1268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 68.971333][ T1268] RSP: 002b:00007fd46145f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.971350][ T1268] RAX: ffffffffffffffda RBX: 00007fd46299df80 RCX: 00007fd4627e519c [ 68.971361][ T1268] RDX: 000000000000000f RSI: 00007fd46145f0a0 RDI: 0000000000000006 [ 68.980706][ T931] usb 10-1: Product: syz [ 68.983441][ T1268] RBP: 00007fd46145f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.003446][ T931] usb 10-1: Manufacturer: syz [ 69.011163][ T1268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.011182][ T1268] R13: 0000000000000000 R14: 00007fd46299df80 R15: 00007ffe49acabe8 [ 69.011197][ T1268] [ 69.036433][ T315] usb 8-1: New USB device found, idVendor=951f, idProduct=a083, bcdDevice=31.b8 [ 69.038947][ T931] usb 10-1: SerialNumber: syz [ 69.043500][ T315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.055299][ T931] usb 10-1: config 0 descriptor?? [ 69.059551][ T315] usb 8-1: Product: syz [ 69.092344][ T315] usb 8-1: Manufacturer: syz [ 69.097295][ T315] usb 8-1: SerialNumber: syz [ 69.105388][ T315] usb 8-1: config 0 descriptor?? [ 69.130410][ T931] ums-isd200 10-1:0.0: USB Mass Storage device detected [ 69.317009][ T1256] UDC core: couldn't find an available UDC or it's busy: -16 [ 69.324301][ T1256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.342041][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 69.350485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.358705][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 69.366722][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.368414][ T931] scsi host1: usb-storage 10-1:0.0 [ 69.374851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.388551][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.388750][ T931] usb 10-1: USB disconnect, device number 2 [ 69.396918][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.410303][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.426448][ T516] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.435706][ T315] usb 8-1: USB disconnect, device number 4 [ 69.856501][ T516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.873966][ T516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.883906][ T516] usb 5-1: New USB device found, idVendor=057d, idProduct=3000, bcdDevice= 0.00 [ 69.892992][ T516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.904358][ T1282] serio: Serial port ptm1 [ 69.904628][ T516] usb 5-1: config 0 descriptor?? [ 69.923714][ T1284] syz.7.283[1284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.923766][ T1284] syz.7.283[1284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.964699][ T1287] loop9: detected capacity change from 0 to 16 [ 70.007601][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 70.007617][ T30] audit: type=1400 audit(1732026512.910:982): avc: denied { write } for pid=1288 comm="syz.6.285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 70.032744][ T1287] erofs: (device loop9): mounted with root inode @ nid 36. [ 70.037153][ T1289] loop6: detected capacity change from 0 to 2048 [ 70.050155][ T1287] overlayfs: missing 'workdir' [ 70.097046][ T1289] EXT4-fs (loop6): Ignoring removed nobh option [ 70.109095][ T1289] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,nodioread_nolock,,errors=continue. Quota mode: none. [ 70.123507][ T30] audit: type=1400 audit(1732026513.030:983): avc: denied { read write } for pid=1288 comm="syz.6.285" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.149108][ T30] audit: type=1400 audit(1732026513.030:984): avc: denied { open } for pid=1288 comm="syz.6.285" path="/20/file2/file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.191097][ T30] audit: type=1326 audit(1732026513.080:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.6.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4627e6759 code=0x7ffc0000 [ 70.332670][ T30] audit: type=1326 audit(1732026513.080:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.6.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4627e50f0 code=0x7ffc0000 [ 70.356180][ T30] audit: type=1326 audit(1732026513.090:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.6.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4627e635b code=0x7ffc0000 [ 70.380374][ T30] audit: type=1326 audit(1732026513.090:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.6.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4627e635b code=0x7ffc0000 [ 70.403556][ T6] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 70.411053][ T30] audit: type=1326 audit(1732026513.090:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.6.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4627e635b code=0x7ffc0000 [ 70.434295][ T30] audit: type=1326 audit(1732026513.170:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.6.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4627e635b code=0x7ffc0000 [ 70.457240][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.476651][ T30] audit: type=1326 audit(1732026513.380:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.6.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4627e635b code=0x7ffc0000 [ 70.566499][ T516] usbhid 5-1:0.0: can't add hid device: -71 [ 70.572349][ T516] usbhid: probe of 5-1:0.0 failed with error -71 [ 70.579742][ T516] usb 5-1: USB disconnect, device number 9 [ 70.806461][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 70.816589][ T6] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 70.826149][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 70.836036][ T6] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 70.873841][ T1297] netlink: 'syz.9.286': attribute type 1 has an invalid length. [ 70.899466][ T1299] loop9: detected capacity change from 0 to 4096 [ 70.967034][ T1299] EXT4-fs (loop9): Test dummy encryption mode enabled [ 70.975800][ T1299] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,delalloc,grpquota,test_dummy_encryption,nodiscard,nodelalloc,acl,nolazytime,,errors=continue. Quota mode: writeback. [ 71.006461][ T6] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 71.015379][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.023639][ T6] usb 8-1: Product: syz [ 71.027696][ T6] usb 8-1: Manufacturer: syz [ 71.032025][ T6] usb 8-1: SerialNumber: syz [ 71.037303][ T6] usb 8-1: config 0 descriptor?? [ 71.059409][ T1304] loop4: detected capacity change from 0 to 1024 [ 71.076704][ T6] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 71.097602][ T1304] EXT4-fs (loop4): Test dummy encryption mode enabled [ 71.104247][ T1304] EXT4-fs (loop4): Ignoring removed orlov option [ 71.111902][ T1304] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 71.277364][ T1284] UDC core: couldn't find an available UDC or it's busy: -16 [ 71.284712][ T1284] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.421466][ T1310] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.616642][ T6] scsi host1: usb-storage 8-1:0.0 [ 71.623081][ T6] usb 8-1: USB disconnect, device number 5 [ 71.778177][ T1315] bridge_slave_0: default FDB implementation only supports local addresses [ 71.932470][ T1315] loop9: detected capacity change from 0 to 512 [ 71.967073][ T1315] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 71.979758][ T1315] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,nogrpid,nogrpid,,errors=continue. Quota mode: none. [ 72.009144][ T1317] loop4: detected capacity change from 0 to 512 [ 72.078638][ T1317] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.089626][ T1317] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.108322][ T1317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 72.117685][ T1317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.183507][ T1328] input: syz0 as /devices/virtual/input/input5 [ 72.199005][ T1330] FAULT_INJECTION: forcing a failure. [ 72.199005][ T1330] name failslab, interval 1, probability 0, space 0, times 0 [ 72.211577][ T1330] CPU: 0 PID: 1330 Comm: syz.4.293 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 72.211602][ T1330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 72.211611][ T1330] Call Trace: [ 72.211616][ T1330] [ 72.211622][ T1330] dump_stack_lvl+0x151/0x1c0 [ 72.211646][ T1330] ? io_uring_drop_tctx_refs+0x190/0x190 [ 72.211664][ T1330] ? audit_log_vformat+0x398/0x9d0 [ 72.211683][ T1330] dump_stack+0x15/0x20 [ 72.211699][ T1330] should_fail+0x3c6/0x510 [ 72.211715][ T1330] __should_failslab+0xa4/0xe0 [ 72.265248][ T1330] should_failslab+0x9/0x20 [ 72.265272][ T1330] slab_pre_alloc_hook+0x37/0xd0 [ 72.274356][ T1330] kmem_cache_alloc_trace+0x48/0x210 [ 72.274384][ T1330] ? audit_log_d_path+0xbd/0x2e0 [ 72.284261][ T1330] audit_log_d_path+0xbd/0x2e0 [ 72.284291][ T1330] ? get_mm_exe_file+0xd5/0x100 [ 72.284309][ T1330] audit_log_d_path_exe+0x42/0x70 [ 72.298402][ T1330] audit_log_task+0x20d/0x2e0 [ 72.298429][ T1330] ? __kasan_check_write+0x14/0x20 [ 72.307852][ T1330] ? audit_core_dumps+0x100/0x100 [ 72.307879][ T1330] ? migrate_enable+0x1c1/0x2a0 [ 72.317404][ T1330] audit_seccomp+0x7a/0x1e0 [ 72.321738][ T1330] __seccomp_filter+0xc08/0x1c60 [ 72.326515][ T1330] ? file_end_write+0x1c0/0x1c0 [ 72.326538][ T1330] ? __kasan_check_write+0x14/0x20 [ 72.336144][ T1330] ? __secure_computing+0x300/0x300 [ 72.341179][ T1330] ? __mutex_lock_slowpath+0x10/0x10 [ 72.341202][ T1330] ? __kasan_check_write+0x14/0x20 [ 72.341219][ T1330] ? fput_many+0x160/0x1b0 [ 72.341239][ T1330] ? __ia32_sys_read+0x90/0x90 [ 72.341256][ T1330] __secure_computing+0xf0/0x300 [ 72.341272][ T1330] syscall_enter_from_user_mode+0xd5/0x1b0 [ 72.341290][ T1330] do_syscall_64+0x1e/0xb0 [ 72.341305][ T1330] ? clear_bhb_loop+0x35/0x90 [ 72.379550][ T1330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.379575][ T1330] RIP: 0033:0x7ff5c7931759 [ 72.389530][ T1330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.389547][ T1330] RSP: 002b:00007ff5c65aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c9 [ 72.389568][ T1330] RAX: ffffffffffffffda RBX: 00007ff5c7ae8f80 RCX: 00007ff5c7931759 [ 72.389581][ T1330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.389591][ T1330] RBP: 00007ff5c65aa090 R08: 0000000000000000 R09: 0000000000000000 [ 72.389602][ T1330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.389613][ T1330] R13: 0000000000000000 R14: 00007ff5c7ae8f80 R15: 00007ffe1af53808 [ 72.456375][ T1330] [ 72.741168][ T1339] binfmt_misc: register: failed to install interpreter file ./file0 [ 73.196053][ T1349] FAULT_INJECTION: forcing a failure. [ 73.196053][ T1349] name failslab, interval 1, probability 0, space 0, times 0 [ 73.209025][ T1349] CPU: 1 PID: 1349 Comm: syz.9.302 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 73.218630][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.228525][ T1349] Call Trace: [ 73.231648][ T1349] [ 73.234427][ T1349] dump_stack_lvl+0x151/0x1c0 [ 73.238941][ T1349] ? io_uring_drop_tctx_refs+0x190/0x190 [ 73.244408][ T1349] ? __filename_parentat+0x2f2/0x6c0 [ 73.249528][ T1349] dump_stack+0x15/0x20 [ 73.253522][ T1349] should_fail+0x3c6/0x510 [ 73.257773][ T1349] __should_failslab+0xa4/0xe0 [ 73.262723][ T1349] ? __d_alloc+0x2d/0x6c0 [ 73.266890][ T1349] should_failslab+0x9/0x20 [ 73.271224][ T1349] slab_pre_alloc_hook+0x37/0xd0 [ 73.276001][ T1349] ? __d_alloc+0x2d/0x6c0 [ 73.280165][ T1349] kmem_cache_alloc+0x44/0x200 [ 73.284769][ T1349] __d_alloc+0x2d/0x6c0 [ 73.288846][ T1349] d_alloc+0x4b/0x1d0 [ 73.292663][ T1349] lookup_one_qstr_excl+0xe7/0x290 [ 73.297612][ T1349] do_renameat2+0x744/0x1480 [ 73.302041][ T1349] ? fsnotify_move+0x460/0x460 [ 73.306644][ T1349] ? getname_flags+0x1fd/0x520 [ 73.311238][ T1349] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 73.317149][ T1349] __x64_sys_rename+0x86/0x90 [ 73.321653][ T1349] x64_sys_call+0x266/0x9a0 [ 73.325993][ T1349] do_syscall_64+0x3b/0xb0 [ 73.330244][ T1349] ? clear_bhb_loop+0x35/0x90 [ 73.334762][ T1349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.340573][ T1349] RIP: 0033:0x7f594d6f4759 [ 73.344828][ T1349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.364269][ T1349] RSP: 002b:00007f594c36d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 73.372513][ T1349] RAX: ffffffffffffffda RBX: 00007f594d8abf80 RCX: 00007f594d6f4759 [ 73.380325][ T1349] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000200 [ 73.388138][ T1349] RBP: 00007f594c36d090 R08: 0000000000000000 R09: 0000000000000000 [ 73.395950][ T1349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.403762][ T1349] R13: 0000000000000000 R14: 00007f594d8abf80 R15: 00007ffc27779218 [ 73.411577][ T1349] [ 73.414809][ T39] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.438147][ T1083] ------------[ cut here ]------------ [ 73.443688][ T1083] WARNING: CPU: 0 PID: 1083 at fs/inode.c:307 drop_nlink+0xc1/0x110 [ 73.451946][ T1353] loop6: detected capacity change from 0 to 512 [ 73.456019][ T1083] Modules linked in: [ 73.466197][ T1083] CPU: 1 PID: 1083 Comm: syz-executor Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 73.476184][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.486095][ T39] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 73.486279][ T1083] RIP: 0010:drop_nlink+0xc1/0x110 [ 73.493868][ T39] usb 7-1: can't read configurations, error -71 [ 73.499118][ T1083] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 e7 f4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 df 99 ae ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 73.524701][ T1083] RSP: 0018:ffffc90000987b08 EFLAGS: 00010293 [ 73.530699][ T1083] RAX: ffffffff81c1bd81 RBX: 0000000000000000 RCX: ffff88812c1d62c0 [ 73.538536][ T1083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.546373][ T1083] RBP: ffffc90000987b30 R08: ffffffff81c1bd04 R09: 0000000000000003 [ 73.554229][ T1083] R10: fffff52000130f50 R11: dffffc0000000001 R12: dffffc0000000000 [ 73.562069][ T1083] R13: 1ffff110235d62f8 R14: ffff88811aeb1778 R15: ffff88811aeb17c0 [ 73.570187][ T1083] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 73.579791][ T1083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.586253][ T1083] CR2: 00007fd4627c98e0 CR3: 00000001267ee000 CR4: 00000000003506a0 [ 73.586784][ T1355] loop4: detected capacity change from 0 to 128 [ 73.594650][ T1083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.602333][ T1353] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 73.607972][ T1083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.620686][ T1353] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.639219][ T1083] Call Trace: [ 73.642337][ T1083] [ 73.647459][ T1083] ? show_regs+0x58/0x60 [ 73.651533][ T1083] ? __warn+0x160/0x2f0 [ 73.655624][ T1083] ? drop_nlink+0xc1/0x110 [ 73.660177][ T1083] ? report_bug+0x3d9/0x5b0 [ 73.664498][ T1083] ? drop_nlink+0xc1/0x110 [ 73.685405][ T1353] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.304: bg 0: block 248: padding at end of block bitmap is not set [ 73.697298][ T1083] ? handle_bug+0x41/0x70 [ 73.703984][ T1083] ? exc_invalid_op+0x1b/0x50 [ 73.705196][ T1360] loop7: detected capacity change from 0 to 2048 [ 73.709969][ T1083] ? asm_exc_invalid_op+0x1b/0x20 [ 73.715516][ T1355] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.719699][ T1353] EXT4-fs error (device loop6): ext4_acquire_dquot:6187: comm syz.6.304: Failed to acquire dquot type 1 [ 73.730119][ T1355] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.742729][ T1083] ? drop_nlink+0x44/0x110 [ 73.755511][ T1083] ? drop_nlink+0xc1/0x110 [ 73.759994][ T1083] ? drop_nlink+0xc1/0x110 [ 73.764316][ T1083] ? drop_nlink+0xc1/0x110 [ 73.767077][ T1360] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 73.774246][ T1083] shmem_rmdir+0x59/0x90 [ 73.781526][ T1083] vfs_rmdir+0x324/0x470 [ 73.785676][ T1083] incfs_kill_sb+0x113/0x230 [ 73.790252][ T1083] deactivate_locked_super+0xad/0x110 [ 73.795523][ T1083] deactivate_super+0xbe/0xf0 [ 73.800060][ T1083] cleanup_mnt+0x45c/0x510 [ 73.804261][ T1083] __cleanup_mnt+0x19/0x20 [ 73.808773][ T1083] task_work_run+0x129/0x190 [ 73.813241][ T1083] do_exit+0xc48/0x2ca0 [ 73.817262][ T1083] ? __kasan_check_read+0x11/0x20 [ 73.822064][ T1083] ? put_task_struct+0x80/0x80 [ 73.826871][ T1083] ? ksys_write+0x24f/0x2c0 [ 73.831201][ T1083] ? exc_page_fault+0x47a/0x7f0 [ 73.835884][ T1083] do_group_exit+0x141/0x310 [ 73.838739][ T1355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1355 comm=syz.4.305 [ 73.840393][ T1083] __x64_sys_exit_group+0x3f/0x40 [ 73.857299][ T1083] x64_sys_call+0x610/0x9a0 [ 73.861574][ T1083] do_syscall_64+0x3b/0xb0 [ 73.865824][ T1083] ? clear_bhb_loop+0x35/0x90 [ 73.870390][ T1083] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.876071][ T1083] RIP: 0033:0x7f594d6f4759 [ 73.880377][ T1083] Code: Unable to access opcode bytes at RIP 0x7f594d6f472f. [ 73.887542][ T1083] RSP: 002b:00007ffc277761c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 73.895798][ T1083] RAX: ffffffffffffffda RBX: 00007f594d76766e RCX: 00007f594d6f4759 [ 73.903964][ T1083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 73.911844][ T1083] RBP: 0000000000000016 R08: 00007ffc27773f66 R09: 00007ffc27777480 [ 73.915504][ T1367] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 73.919641][ T1083] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffc27777480 [ 73.937177][ T1083] R13: 00007f594d7675fc R14: 0000555566f324a8 R15: 00007ffc27779630 [ 73.946371][ T1083] [ 73.949249][ T1083] ---[ end trace c472949f05182447 ]--- [ 73.954553][ T1083] ================================================================== [ 73.962402][ T1083] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 73.968477][ T1083] Write of size 4 at addr 0000000000000170 by task syz-executor/1083 [ 73.976378][ T1083] [ 73.978550][ T1083] CPU: 0 PID: 1083 Comm: syz-executor Tainted: G W 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 73.989828][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.999720][ T1083] Call Trace: [ 74.002849][ T1083] [ 74.005621][ T1083] dump_stack_lvl+0x151/0x1c0 [ 74.010135][ T1083] ? io_uring_drop_tctx_refs+0x190/0x190 [ 74.015606][ T1083] ? _raw_spin_lock+0xa4/0x1b0 [ 74.020203][ T1083] ? _raw_spin_trylock_bh+0x190/0x190 [ 74.025410][ T1083] kasan_report+0x16f/0x1c0 [ 74.029749][ T1083] ? ihold+0x20/0x60 [ 74.033481][ T1083] ? ihold+0x20/0x60 [ 74.037219][ T1083] kasan_check_range+0x293/0x2a0 [ 74.041988][ T1083] __kasan_check_write+0x14/0x20 [ 74.046760][ T1083] ihold+0x20/0x60 [ 74.050322][ T1083] vfs_rmdir+0x201/0x470 [ 74.054403][ T1083] incfs_kill_sb+0x113/0x230 [ 74.058827][ T1083] deactivate_locked_super+0xad/0x110 [ 74.064036][ T1083] deactivate_super+0xbe/0xf0 [ 74.068549][ T1083] cleanup_mnt+0x45c/0x510 [ 74.072801][ T1083] __cleanup_mnt+0x19/0x20 [ 74.077052][ T1083] task_work_run+0x129/0x190 [ 74.081478][ T1083] do_exit+0xc48/0x2ca0 [ 74.085473][ T1083] ? __kasan_check_read+0x11/0x20 [ 74.090332][ T1083] ? put_task_struct+0x80/0x80 [ 74.094930][ T1083] ? ksys_write+0x24f/0x2c0 [ 74.099272][ T1083] ? exc_page_fault+0x47a/0x7f0 [ 74.103961][ T1083] do_group_exit+0x141/0x310 [ 74.108388][ T1083] __x64_sys_exit_group+0x3f/0x40 [ 74.113243][ T1083] x64_sys_call+0x610/0x9a0 [ 74.117582][ T1083] do_syscall_64+0x3b/0xb0 [ 74.121837][ T1083] ? clear_bhb_loop+0x35/0x90 [ 74.126352][ T1083] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.132086][ T1083] RIP: 0033:0x7f594d6f4759 [ 74.136338][ T1083] Code: Unable to access opcode bytes at RIP 0x7f594d6f472f. [ 74.143627][ T1083] RSP: 002b:00007ffc277761c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 74.151869][ T1083] RAX: ffffffffffffffda RBX: 00007f594d76766e RCX: 00007f594d6f4759 [ 74.159679][ T1083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 74.167489][ T1083] RBP: 0000000000000016 R08: 00007ffc27773f66 R09: 00007ffc27777480 [ 74.175299][ T1083] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffc27777480 [ 74.183114][ T1083] R13: 00007f594d7675fc R14: 0000555566f324a8 R15: 00007ffc27779630 [ 74.190930][ T1083] [ 74.193790][ T1083] ================================================================== [ 74.201696][ T1083] Disabling lock debugging due to kernel taint [ 74.210949][ T1083] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 74.218570][ T1083] #PF: supervisor write access in kernel mode [ 74.224470][ T1083] #PF: error_code(0x0002) - not-present page [ 74.230301][ T1083] PGD 0 P4D 0 [ 74.233493][ T1083] Oops: 0002 [#1] PREEMPT SMP KASAN [ 74.238533][ T1083] CPU: 0 PID: 1083 Comm: syz-executor Tainted: G B W 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 74.249811][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 74.259711][ T1083] RIP: 0010:ihold+0x25/0x60 [ 74.264042][ T1083] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 f1 91 ae ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 d0 ec f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 74 95 ae [ 74.283492][ T1083] RSP: 0018:ffffc90000987b48 EFLAGS: 00010246 [ 74.289385][ T1083] RAX: ffff88812c1d6200 RBX: 0000000000000001 RCX: ffff88812c1d62c0 [ 74.297201][ T1083] RDX: 0000000000000000 RSI: 0000000000000282 RDI: 00000000ffffffff [ 74.305012][ T1083] RBP: ffffc90000987b58 R08: ffffffff8141991b R09: 0000000000000003 [ 74.312822][ T1083] R10: fffffbfff0e9a64c R11: dffffc0000000001 R12: dffffc0000000000 [ 74.320638][ T1083] R13: ffff8881120a6cc0 R14: 0000000000000000 R15: 1ffff11022414d9e [ 74.328449][ T1083] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 74.337209][ T1083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.343632][ T1083] CR2: 0000000000000170 CR3: 000000011cd29000 CR4: 00000000003506b0 [ 74.351446][ T1083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.359254][ T1083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.367069][ T1083] Call Trace: [ 74.370191][ T1083] [ 74.372969][ T1083] ? __die_body+0x62/0xb0 [ 74.377141][ T1083] ? __die+0x7e/0x90 [ 74.380865][ T1083] ? page_fault_oops+0x7f9/0xa90 [ 74.385641][ T1083] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 74.391020][ T1083] ? __schedule+0xcd4/0x1590 [ 74.395450][ T1083] ? exc_page_fault+0x510/0x7f0 [ 74.400138][ T1083] ? asm_exc_page_fault+0x27/0x30 [ 74.404998][ T1083] ? check_panic_on_warn+0x5b/0xb0 [ 74.409942][ T1083] ? ihold+0x25/0x60 [ 74.413673][ T1083] ? ihold+0x20/0x60 [ 74.417410][ T1083] vfs_rmdir+0x201/0x470 [ 74.421487][ T1083] incfs_kill_sb+0x113/0x230 [ 74.425913][ T1083] deactivate_locked_super+0xad/0x110 [ 74.431126][ T1083] deactivate_super+0xbe/0xf0 [ 74.435632][ T1083] cleanup_mnt+0x45c/0x510 [ 74.439885][ T1083] __cleanup_mnt+0x19/0x20 [ 74.444138][ T1083] task_work_run+0x129/0x190 [ 74.448565][ T1083] do_exit+0xc48/0x2ca0 [ 74.452560][ T1083] ? __kasan_check_read+0x11/0x20 [ 74.457419][ T1083] ? put_task_struct+0x80/0x80 [ 74.462016][ T1083] ? ksys_write+0x24f/0x2c0 [ 74.466447][ T1083] ? exc_page_fault+0x47a/0x7f0 [ 74.471132][ T1083] do_group_exit+0x141/0x310 [ 74.475559][ T1083] __x64_sys_exit_group+0x3f/0x40 [ 74.480421][ T1083] x64_sys_call+0x610/0x9a0 [ 74.484765][ T1083] do_syscall_64+0x3b/0xb0 [ 74.489009][ T1083] ? clear_bhb_loop+0x35/0x90 [ 74.493524][ T1083] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.499255][ T1083] RIP: 0033:0x7f594d6f4759 [ 74.503509][ T1083] Code: Unable to access opcode bytes at RIP 0x7f594d6f472f. [ 74.510712][ T1083] RSP: 002b:00007ffc277761c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 74.519068][ T1083] RAX: ffffffffffffffda RBX: 00007f594d76766e RCX: 00007f594d6f4759 [ 74.526878][ T1083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 74.534697][ T1083] RBP: 0000000000000016 R08: 00007ffc27773f66 R09: 00007ffc27777480 [ 74.542505][ T1083] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffc27777480 [ 74.550314][ T1083] R13: 00007f594d7675fc R14: 0000555566f324a8 R15: 00007ffc27779630 [ 74.558128][ T1083] [ 74.560988][ T1083] Modules linked in: [ 74.564738][ T1083] CR2: 0000000000000170 [ 74.568733][ T1083] ---[ end trace c472949f05182448 ]--- [ 74.574013][ T1083] RIP: 0010:ihold+0x25/0x60 [ 74.578353][ T1083] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 f1 91 ae ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 d0 ec f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 74 95 ae [ 74.597789][ T1083] RSP: 0018:ffffc90000987b48 EFLAGS: 00010246 [ 74.603693][ T1083] RAX: ffff88812c1d6200 RBX: 0000000000000001 RCX: ffff88812c1d62c0 [ 74.611503][ T1083] RDX: 0000000000000000 RSI: 0000000000000282 RDI: 00000000ffffffff [ 74.619315][ T1083] RBP: ffffc90000987b58 R08: ffffffff8141991b R09: 0000000000000003 [ 74.627213][ T1083] R10: fffffbfff0e9a64c R11: dffffc0000000001 R12: dffffc0000000000 [ 74.635026][ T1083] R13: ffff8881120a6cc0 R14: 0000000000000000 R15: 1ffff11022414d9e [ 74.642849][ T1083] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 74.651600][ T1083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.658459][ T1083] CR2: 0000000000000170 CR3: 000000011cd29000 CR4: 00000000003506b0 [ 74.666269][ T1083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.674082][ T1083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.681906][ T1083] Kernel panic - not syncing: Fatal exception [ 74.687890][ T1083] Kernel Offset: disabled [ 74.691963][ T1083] Rebooting in 86400 seconds..