last executing test programs: 4m10.013394114s ago: executing program 2 (id=16): accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x1, 0x8000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900d3fd27dfdc224b7a020000ff09000000ffffffffffffffffffffffe7e6000000000000000002000000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000440000000e0a01020000000000000000010000000900020073797a31000000000900020073797a30000000000900020073797a31000000000900437d589a7a3100000000440000000c0a05000000000000000000010000020900020073797a32000000001800038014000080040001800c0004400000000000000a710900010073797a3000000000140000001000010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r8 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r8, 0x0) 4m9.041594541s ago: executing program 2 (id=19): accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x1, 0x8000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900d3fd27dfdc224b7a020000ff09000000ffffffffffffffffffffffe7e6000000000000000002000000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000440000000e0a01020000000000000000010000000900020073797a31000000000900020073797a30000000000900020073797a31000000000900437d589a7a3100000000440000000c0a05000000000000000000010000020900020073797a32000000001800038014000080040001800c0004400000000000000a710900010073797a3000000000140000001000010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) setreuid(0xee00, 0x0) syz_pidfd_open(0x0, 0x0) 4m8.114211197s ago: executing program 2 (id=22): accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x1, 0x8000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 4m7.032469684s ago: executing program 2 (id=26): socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a041a900dc8708f01a7045393011c62de06b27281c7ffdcf8740af3cc863e4abd3ec580a57fcb67aefa95c33e23b73f813a8805df7f03317c344a6687ecc5d38319f3ad38556ee49e9841036e8eccbf2fe485879e44063ba3ef6b27204701d1383db368c6eeedcf3b3aaa58282970000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000002c0)='2', 0x1, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) fallocate(r1, 0x3, 0x5000000, 0x8000c62) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000000000000000000000010085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r6}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='page_pool_state_release\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xffffff01, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r10}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x5, &(0x7f0000000600)) 4m6.09707195s ago: executing program 2 (id=30): accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x1, 0x8000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900d3fd27dfdc224b7a020000ff09000000ffffffffffffffffffffffe7e6000000000000000002000000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000440000000e0a01020000000000000000010000000900020073797a31000000000900020073797a30000000000900020073797a31000000000900437d589a7a3100000000440000000c0a05000000000000000000010000020900020073797a32000000001800038014000080040001800c0004400000000000000a710900010073797a3000000000140000001000010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r8 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r8, 0x0) 4m5.404212868s ago: executing program 2 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) tkill(0x0, 0x2d) 4m5.130630517s ago: executing program 32 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) tkill(0x0, 0x2d) 3m6.297788319s ago: executing program 4 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e487"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 3m6.279798079s ago: executing program 4 (id=247): accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x1, 0x8000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 3m5.399636446s ago: executing program 4 (id=252): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) lstat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file2\x00', 0x22200c8c, &(0x7f0000000180)=ANY=[], 0x84, 0x151f, &(0x7f00000017c0)="$eJzs3Au4jdX2MPAx5pwvm6SV5D7HHC8rbUySJJeERJIkSZJbkiRJkpDccktCEnIPuYfkFpL7/ZZ7khxJkoSEhPk9Op3jnH/n9v/O+Y7znT1+zzOfPcd+1xhrzjX2s9Z63733+rbtgEp1KleoxczwT8Hff+kCACkA0BsArgGACACKZymeBXDZ1Awau/xzdyL+tR6acqVXIK4k6X/aJv1P26T/aZv0P22T/qdt0v+0Tfqftkn/hUjLtkzNea2MtDv+fdf/AeT6/38aef3/L3Ko8Mgv1xW+vt3/IkX6n7ZJ/9M26X/aJv1P26T/aZv0/79cBFD+bxyW/v93+kcvs0j/hUjLrvT153/DSAGAK3PfqQBw5ff/N8eV/vkTQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJE2nA2XGQD4w/xKr0sIIYQQQgghhBD/OiH9lV6BEEIIIYQQQggh/t9DUKDBQATpID2kQAbICFdBJrgaMsM1kIBrIQtcB1nhesgG2SEH5IRckBvygAUCBwwx5IV8kIQbID/cCKlQAApCIfBQGIrATVAUboZicAsUh1uhBNwGJaEUlIYycDuUhTugHJSHCnAnVIS7oBJUhruhCtwDVeFeqAb3QXW4H2rAA1ATHoRa8BDUhoehDjwCdeFRqAf1oQE0hEb/V/kvQUd4GTpBZ+gCXaEbvALdoQf0hF7QG16FPvAa9IXXoR/0hwHwBgyEN2EQvAWDYQgMhbdhGAyHETASRsFoGAPvwFgYB+PhXZgAE2ESTIYpMBWmwXswHWbATHgfZsEHMBvmwFyYB/PhQ1gAC2ERfASL4WNYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCn8BW2AbbYQfshF2wGz6FPfAZ7IXPYR988b/MP/M/8tshIKBChQYNpsN0mIIpmBEzYibMhJkxMyYwgVkwC2bFrJgNs2EOzIG5MBfmwTxISMjImBfzYhKTmB/zYyqmYkEsiB49FsEiWBRvxmJYDItjcSyBJbAklsJSWAbLYFksi+WwHFbAClgRK2IlrIR34914D1bFqlgNq2F1rI41sAbWxJpYC2thbayNdbAO1sW6WA/rYQNsgI2wETbGxtgEm2BTbIrNsBk2x+bYAltgS2yJrbAVtsbW2AbbYFtsi+2wPbbHl/AlfBlfxs5YUXXFbtgNu2N37Im9sBe+in3wNXwNX8d+2B8H4Bv4Br6Jg/A0DsYhOBSHYlk1HEfgSGQ1GsfgGByLY3E8jscJOBEn4mScglNxGk7D6TgDZ+D7OAs/wA9wDs7BeTgf5+MCXIiLcBEuxjO4BJfiMlyOK3AlrsDVuAZX4zpcj+twI27EzbgZP8FPcBtuwx24A3fhLvwUP8XP8DPsh/twH+7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHscTeBJP4Ck8hafxDJ7Fs3gOz+F5fCHX17V3FVjbD9QlRhmVTqVTKSpFZVQZVSaVSWVWmVVCJVQWlUVlVVlVNpVN5VA5VC6VS+VReRQpUqxilVflVUmVVPlVfpWqUlVBVVB55VURVUQVVUVVMVVMFVe3qhLqNlVSlVJP+DKqjCqrmvpyqryqoCqoiuouVUlVVpVVFVVFVVVVVTVVTVVX1VUN9YCqqbpiT3xIXepMHdUf66oBWE/VVw1UQ/UmPqYaq0HYRD2hmqon1RAcjM1VY99CPaNaqhHYSj2nRuLzqo0ajW3Vi6qdaq86qJdUR9XEd0r361OgmozdVQ/VU/VS0/EudaljldTrqp/qrwaoN9Q8fFMNUm+pwWqIGqreVsPUcDVCjVSj1Gg1Rr2jxqpxarx6V01QE9UkNVlNUVPVNPWemq5mqJnqfTVLfaBmqzlqrpqn5qsP1QK1UC1SH6nF6mO1RC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUV9oraqbWq72qF2ql1qt/pU7VGfqb3qc7VPfaH2q9+pA+pLdVB9pQ6pr9Vh9Y06or5VR9V36pj6Xh1XJ9RJ9YM6pX5Up9UZdVb9pM6pn9V5dUFdVEGBRq201kZHOp1Or1N0Bp1RX6Uz6at1Zn2NTuhrdRZ9nc6qr9fZdHadQ+fUuXRunUdbTdpp1rHOq/PppL5B59c36lRdQBfUhbTXhXURfZMuqm/WxfQturi+VZfQt+mSupQurcvo23VZfYcup8vrCvpOXVHfpSvpyvpuXUXfo6vqe3U1fZ+uru/XNfQDuqZ+UNfSD+na+mFdRz+i6+pHdT1dXzfQDXUj/ZhurB/XF379u7Vm+indXD+tW+hndEv9rG6ln9Ot9fO6jX5Bt9Uv6na6ve6gL+iLOuhOurPuorvqbvoV3V330D11L91bv6r76Nd0X/267qf76wH6DT1Qv6kH6bf0YD1ED9Vv62F6uB6hR+pRerQeo9/RY/U4PV6/qyfoiXqSnqyn6Km656+VZv4D+eP+Qn7fX+59s96iP9Fb9Ta9Xe/QO/UuvVvv1nv0Hr1X79X79D69X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVyf0D/pH/Qp/aM+rc/oM/onfU6f0+d/fQzAoFFGG2Mik86kNykmg8lorjKZzNUms7nGJMy1Jou5zmQ115tsJrvJYXKaXCa3yWOsIeMMm9jkNflM0txg8psbTaopYAqaQsabwqaIuemfzv9762tkGpnGprFpYpqYpqapaWaameamuWlhWpiWpqVpZVqZ1qa1aWPamLamrWln2pkOpoPpaDqaTqaT6WK6mG7mFdPd9DA9TS/T27xq+pg+pq/pa/qZfmaAGWAGmoFmkBlkBpvBZqgZaoaZYWaEGWFGmVFmjBljxpqxZrwZbyaYCWaSmWSmmClmmplmppvpZqaZaWaZWWa2mW3mmrlmvplvFpgFZpFZZBabxWaJWWqWmuVmuVlpVprVZrVZa9aa9Wa92Wg2miVmi9litpqtZrvZbnaanWa32W32mD1mr9lr9pl9Zr/Zbw6YA+agOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmpPmlDllTpvT5qw5a86Zc+a8OW8umouX3vZFKlKRiUyULkoXpUQpUcYoY5QpyhRljjJHiSgRZYmyRFmj66NsUfYoR5QzyhXljvJENqLIRRzFUd4oX5SMbojyRzdGqVGBqGBUKPJR4ahIdFNUNLo5KhbdEhWPbo1KRLdFJaNSUemoTHR7VDa6IyoXlY8qRHdGFaO7okpR5ejuqEp0T1Q1ujeqFt0XVY/uj2pED0Q1owejWtFDUe3o4ahO9EhUN3o0qhfVjxpEDaNG/9L6IZzO/rjvZDvbLrar7WZfsd1tD9vT9rK97au2j33N9rWv2362vx1g37AD7Zt2kH3LDrZD7FD7th1mh9sRdqQdZUfbMfYdO9aOs+Ptu3aCnWgn2cl2ip1qp9n37HQ7w86079tZ9gM7286xc+08O99+aBfYhXaR/cguth/bJXapXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y32E7vVbrPb7Q670+6yu+2ndo/9zO61n9t99gu73/7OHrBf2oP2K3vIfm0P22/sEfutPWq/s8fs9/a4PWFP2h/sKfujPW3P2LP2J3vO/mzP2wv2og2X3txfenknQ4bSUTpKoRTKSBkpE2WizJSZEpSgLJSFslJWykbZKAfloFyUi/JQHrqEiSkv5aUkJSk/5adUSqWCVJA8eSpCRagoFaViVIyKU3EqQSWoJJWk0lSabqfb6Q66g8pTebqT7qS76C6qTJWpClWhqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT1qQA2oETWixtSYmlATakpNqRk1o+bUnFpQC2pJLakVtaLW1JraUBtqS22pHbWjDtSBOlJH6kSdqAt1oW7UjbpTd+pJPak39aY+1If6Ul/qR/1oAA2ggTSQBtEgGkxDaCi9TcNoOI2gkTSKRtMYGkNjaSyNp/E0gSbQJJpEU2gKTaNpNJ2m00yaSbNoFs2m2TSX5tJ8mk8LaAEtokW0mBbTElpCy2gZraAVtIpW0RpaQ+toHW2gDbSJNtEW2kJbaSttp+20k3bSbtpNe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+kknaJTdJpO01k6S+foZzpPF+giBUpxCjK6q1wmd7XL7K5xKS6DuxRHAHApzuFyulwut8vjrMvmsv9ZTM65VFfAFXSFnHeFXRF302/ikq6UK+3KuNtdWXeHK/ebuIq7x1V197pq7j5X2d39Z3F1d7+r4R5xNd2jrpar72q7hq6Oe8TVdY+6eq6+a+AaumbuKdfcPe1auGdcS/fsb+IFbqFb49a6dW692+M+c2fdT+6I+9adcz+7Tq6z6+1edX3ca66ve931c/1/Ew91b7thbrgb4Ua6UW70b+JJbrKb4qa6ae49N93N+E08333oZrlFbrab4+a6eb/El9a0yH3kFruP3RK31C1zy90Kt9Ktcqv/uNblbqPb5Da73e5Tt9Vtc9vdDrfT7folvrSPve5zt8994Q67b9wB96U76I66Q+7rX+JL+zvqvnPH3PfuuDvhTrof3Cn3ozvtzvyy/0t7/8FdcBddcMDIijUbjjgdp+cUzsAZ+SrOxFdzZr6GE3wtZ+HrOCtfz9k4O+fgnJyLc3MetkzsmDnmvJyPk3wD5+cbOZULcEEuxJ4LcxG+iYvyzVyMb+HifCuX4Nu4JJfi0lyGb+eyfAeX4/Jcge/kiiFwJa7Md3MVvoer8r1cje/j6nw/1+AHuCY/yLX4Ia7ND3MdfoTr8qNcj+tzA27IjfgxbsyPcxN+gpvyk9yMn+Lm/DS34Ge4JT/Lrfg5bs3Pcxt+gdvyi9yO23MHfok78svciTtzF+7K3fgV7s49uCf34t78Kvfh17gvv879uD8P4Dd4IL/Jg/gtHsxDeCi/zcN4OI/gkTyKR/MYfofH8jgez+/yBJ7Ik3gyT+GpPI3f4+k8g2fy+zyLP+DZPIfn8jyezx/yAl7Ii/gjXswf8xJeyst4Oa/glbyKV/MaXsvreD1v4I28iTfzFv6Et/I23s47eCfv4t38Ke/hz3gvf877+Avez7/jA/wlH+Sv+BB/zYf5Gz7C3/JR/o6P8fd8nE/wSf6BT/GPfJrP8Fn+ic/xz3yeL/BFDgwxxhliHZs4itPF6eOUOEOcMb4qzhRfHWeOr4kT8bVxlvi6OGt8fZwtzh7niHPGueLccZ7YxhS7mOM4zhvni5PxDXH++MY4NS4QF4wLxT4uHBeJb4qLxjfHxeJb4uLxrXGJ+La4ZFwqfuS+MvHtcdn4jrhcXD6uEN8ZV4zviivFleO74yrxPXHV+N64WnxfXCy+P64RPxDXjB+Ma8UPxbXjh+M68SNx3fjRuF5cP24QN4wbxY/FjePH43PxE3HT+Mm4WfxU3Dx+Om4RPxO3jJ/94/Emf+V4l7hr3C1+JX4lDuFePTc5Lzk/+WFyQXJhclHyo+Ti5MfJJcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzckQKqcHj1557Y2PfDqf3qf4DD6jv8pn8lf7zP4an/DX+iz+Op/VX++z+ew+h8/pc/ncPo+3nrzz7GOf1+fzSX+Dz+9v9Km+gC/oC3nvC/sivqFv5Bv5xv5x38Q/4Zv6J/2T/in/lH/aP+2f8S39s76Vf8639s/7Nv4F/4J/0bfz7X0H/5Lv6F/2nXxn38V38d18N9/dd/c9fU/f2/f2fXwf39f39f18Pz/AD/AD/UA/yA/yg/1gP9QP9cP8MD/Cj/Cj/Cg/xo/xY/1YP96P9xP8BD/JT/JT/BQ/zU/z0/10P9PP9LNSZ/nZfraf6+f6+X6+X+AX+EV+kV/sF/slfolf5pf5FX6FX+VX+TV+jV/n1/kNfoPf5Df5LX6L3+q3+u1+u9/pd/rdfrff4/f4vX6v3+f3+f1+vz/gD/iD/it/yH/tD/tv/BH/rT/qv/PH/Pf+uD/hT/of/Cn/oz/tz/iz/id/zv/sz/sL/qIPfkzincTYxLjE+MS7iQmJiYlJicmJKYmpiWmJ9xLTEzMSMxPvJ2YlPkjMTsxJzE3MS8xPfJhYkFiYWJT4KLE48XFiSWJpYllieWJFYmUihNxb45A35AvJcEPIH24MqaFAKBgKBR8KhyLhplA03ByKhVtC8XBrKBFuCyVDqVA6PBrqhfqhQWgYGoXHQuPweGgSnghNw5OhWXgqNA9PhxbhmdAyPBtahedC6/B8aBNeCG3Di6FdaB86hJdCx/By6BQ6hy6ha+gWXgndQ4/QM/QKvcOroU94LfQNr4d+oX8YEN4IA8ObYVB4KwwOQ8LQ8HYYFoaHEWFkGBVGhzHhnTA2jAvjw7thQpgYJoXJYUqYGqaF98L0MCPMDO+HWeGDMDvMCXPDvDA/fBgWhIVhUfgoLA4fhyVhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoct4ZOwNWwL28OOsDPsCrvDp2FP+CzsDZ+HfeGLsD/8LhwIX4aD4atwKHwdDodvwpHwbTgavgvHwvfheDgRToYfwqnwYzgdzoSz4adwLvwczocL4aL8z5oQQgghxD9E/53jXf/C99Sv45JuAHD1tpyH/mfNDdl+P++hcjVLAMAznds+9IdRsWKXLl1+ve0SDVG+OQCQuJz/y6/lfo2XQlN4ClrAE+P+8gcT9FDtz/Gl+ukB4K/UT94KkPFPclLgcvzH+nDzX9x/D/XYk0MXlIjPZvnr60/OAUjNdzknA1yOL9cv9lfqZ2/Mf/vxyfDlGIAmf5KTCS7Hl+sXgcfhWWjxZ7cUQgghhBBCCCF+r4cq3frvnH/+cn6ey1zOuXSq/Yf48vln0SuyfiGEEEIIIYQQQvx9z7fv8PRjLVo80fo/ZQLwz9ZJAYArvQuZyOT/88mVfmYSQgghhBBC/Kv96Ym3EEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghrox/z0f6CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEGnb/wkAAP//OlxETg==") timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc)) nanosleep(&(0x7f0000000080)={0x77359400}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = gettid() tkill(r5, 0x13) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x5, &(0x7f0000000180)=@raw=[@exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m4.524588472s ago: executing program 4 (id=261): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f0000001ac0)=ANY=[@ANYBLOB="6e616d656361ae1df9674d9a6c8f6361721a0b8fcf3e957ef01792642ce572726f72733d636f6e74696e791bdf04dbed1d", @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=0xee00, @ANYRES32], 0x80, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x815c12, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000d00)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@norecovery}, {}, {@bsdgroups}]}, 0x6, 0x640, &(0x7f0000000d80)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ptrace(0x4218, r1) 3m3.359211978s ago: executing program 4 (id=265): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 3m3.232271138s ago: executing program 4 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e487"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 3m3.218554558s ago: executing program 33 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e487"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 2m31.636246846s ago: executing program 5 (id=435): unshare(0x22000400) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a2a44000000001010902440081010010000904005d1202060000052406000005242400000d240f010000000000000000000905810340000000fe0905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000015008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000015008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000061de1857d00000000000000000000000007112290000000000950000000000000038f308cbc1d44d1cc8fad5f7892e8b406daf1bf637004df1fbfdfe8f94545c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x42000000) 2m28.803940736s ago: executing program 0 (id=453): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x21) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x60a4, 0x0, 0xfffffffc}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r8}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000001b00)={0x0, 0x2000000, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0xfffffffe, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xff1c}]}}}]}, 0x38}}, 0x20008094) 2m28.544286445s ago: executing program 5 (id=454): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2m28.543835385s ago: executing program 5 (id=455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 2m28.514104835s ago: executing program 5 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") r1 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000240)="16", 0x1}], 0x1, 0x0, 0x0, 0x6) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="3f6728480000d99a6ce5b01b6f65322e01"], &(0x7f0000000380)='\x00', 0x1, 0x2) fchmodat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000048, &(0x7f0000000e80)={[{@data_writeback}, {@inlinecrypt}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@noblock_validity}, {@lazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@flag='ro'}, {@dont_appraise}, {@fsname={'fsname', 0x3d, 'sysvgroups'}}]}, 0x1, 0x4d8, &(0x7f0000000880)="$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") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008d04"]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m26.749676999s ago: executing program 0 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m26.735316399s ago: executing program 5 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101, 0x400}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(0xffffffffffffffff) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="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", 0xa94}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m26.040033176s ago: executing program 5 (id=466): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 2m25.961242156s ago: executing program 34 (id=466): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 2m25.781581236s ago: executing program 0 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x16}, 0x80, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000600)=@abs={0x0, 0x0, 0x7}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x22000400) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r8}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) 2m24.848700512s ago: executing program 0 (id=480): r0 = socket$igmp(0x2, 0x3, 0x2) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000340)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@fat=@nfs}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGflE7hw4Xu4cy+48Q0EH8Cdgwwcubm3SWzTtGlNK53fb9PDOd93z3dyTtvVPfn8teHB/cejh0+//j1arSxqvejFsyw6UYsj3wYAcJM8Syn+TKX1Muu1TdUEAGzWwv//xikh2ye73t50WQDABn340cfv393f3/sgz1sRw+/G/SzKn+X43YfxKAbxIG5HO55HpJmy/e57+3tRzwuduDWcjPtF5vCzX+ehMc3vRjs6y/O7eWkhfzLuN+LliCyLeNQrCrkT7XjlRH4xvndnSX70m/FGq1pkMf9utOO3L+JxDOJ+FLnz+b/p5vk76fu/vvqkCC7ys8m4vz2Nm0tbV703AAAAAAAAAAAAAAAAAAAAAADcXLv5TCduDYuu6v6drefT8d1/jU/v16lNx8v8LKI5bRy7H2iS4sej+3Vu53mesjJ+fr9PPV6tR/3aFg4AAAAAAAAAAAAAAAAAAAD/I6MnXx7cGwweHP4njeol/9lr/Rd9Tm+h5/VYHby91lyxVYUXtR6P6f7y6XDWUyziIsWPG3nEqpobJ3peKuo5+8l/p5RSlkVcbpsa55nrjMbO6pjiA/75h503D+5lZ32GraON+2lxqBmHoyfH9jSydSpMax2/5oqYZnVizvWcnUv+Er31RzlZ1ZOtsYpG1YjTjl9rrfN8dX+DAAAAAAAAAAAAAAAAAACA0vyl3yWDT1em1jZWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcsfn3/6/RmFTJy2NSSpNZTzMOR9e8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4A/wQAAP//+YxnlA==") bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket(0x8000000010, 0x2, 0x0) write(r9, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) write$P9_RUNLINKAT(r3, &(0x7f0000000280)={0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r12 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) 2m24.074283379s ago: executing program 0 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)="ff"}) syz_clone3(&(0x7f0000000840)={0x44020100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(0x0, 0x2d) 2m23.944096589s ago: executing program 0 (id=484): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x27, 0x1, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000500012800e0001006970366772657461700000003c000280060010004e210000140006000000000000000000000000000000000008df0b000000010004001200060010004e240000080004000900000001fb737eba3c3ed552d6313cc4c07d5082357e2d3f7e53"], 0x70}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) rt_sigqueueinfo(0x0, 0x41, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0x48be, &(0x7f0000000000)={0x0, 0x1, 0x23901, 0x3}, &(0x7f00000011c0), &(0x7f0000ff4000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000001140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "fa119955c3cc8b3d6b5e6c4a326331a7"}]}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m23.899529119s ago: executing program 35 (id=484): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x27, 0x1, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000500012800e0001006970366772657461700000003c000280060010004e210000140006000000000000000000000000000000000008df0b000000010004001200060010004e240000080004000900000001fb737eba3c3ed552d6313cc4c07d5082357e2d3f7e53"], 0x70}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) rt_sigqueueinfo(0x0, 0x41, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0x48be, &(0x7f0000000000)={0x0, 0x1, 0x23901, 0x3}, &(0x7f00000011c0), &(0x7f0000ff4000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000001140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "fa119955c3cc8b3d6b5e6c4a326331a7"}]}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.515540586s ago: executing program 1 (id=1157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r2, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x204006, &(0x7f0000000040), 0x41, 0x443, &(0x7f00000003c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x204006, &(0x7f0000000040), 0x41, 0x443, &(0x7f00000003c0)="$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") 7.468213496s ago: executing program 1 (id=1158): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) setpriority(0x1, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="90a33196fef084bd4732850ac52abf0a8540c1cb5cc87bf9ae461f5de8e868c8fed58abd7440abe4d883c1bcdfeaa82703e4fb1711ce3edfbdbc540a73c682296b1df4315c504de7273cdbfedccd1bef18b43a50baf1535af8f2db34534c76008ee9bd1e5159a3a9608c2f6aea0323f29888a7a494c776011a3663cb033830d91ac5c7f4fe281547bd8f6219a517ac62d8c654d91d187d11672c361b0ae5ecd3276fa4be36540ac21ff37fa49e36782397b5d42d760a"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x3a0d84d, &(0x7f0000000340)={[{@bsdgroups}, {@nouid32}, {@nojournal_checksum}, {@grpjquota}, {@noauto_da_alloc}, {@noquota}, {@abort}, {@test_dummy_encryption}, {@nodiscard}]}, 0x64, 0x51a, &(0x7f0000000a00)="$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") r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() 4.145386135s ago: executing program 1 (id=1174): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c49e02d7ef1933ab3a6c08d0d57299ee4ae33c10781c7e2c26dc6853f0e8720cf511793348fe50cf8134350b391c12b5f086164ea5bb0b165857bf73ae58690357416caf815625593"]) 4.127881834s ago: executing program 1 (id=1175): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000007}) ioctl$RTC_AIE_ON(r0, 0x7001) 3.164294921s ago: executing program 1 (id=1179): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socket$inet6(0xa, 0x1, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x2044c0, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3.155668021s ago: executing program 6 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) (async) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0000000086dd60fd7f2e00383a0020010000000000000000000000000002fe8000000000000000000000000000aa0200907800000000609a7c5f00008400fe8000000000000000000000000000aa0000000000000000000000000000000097"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async, rerun: 32) capset(&(0x7f0000000000)={0x19980330}, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (rerun: 32) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.9335371s ago: executing program 6 (id=1182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000220000ffffffff000000000000000000000000fe8000000000000000000000000000bb0d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe, 0xf0}, 0x0) 2.78529992s ago: executing program 6 (id=1184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_audit(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x2, {0xa, 0x4e23, 0xae0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000580)=@raw=[@ldst={0x2, 0x1, 0x2, 0x6834df3cd424ea62, 0x5, 0x50, 0x8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e21, @broadcast}}) 2.74543456s ago: executing program 3 (id=1186): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c49e02d7ef1933ab3a6c08d0d57299ee4ae33c10781c7e2c26dc6853f0e8720cf511793348fe50cf8134350b391c12b5f086164ea5bb0b165857bf73ae58690357416caf815625593"]) 2.442082768s ago: executing program 3 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x8f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001900)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x4}, 0x68) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) 2.399745938s ago: executing program 3 (id=1188): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="de62d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="6379ef01cbda378700e4232d7997bc1aa7b997be40334bb2ab8d32d0b4dcc121fe99a10d1d8e7c4bacc451ac1ae1415844c602eab3a467fc97822a0671b1529ca434ee95cc066330d9401277f13fa482816b0c33b0be96648a1f14db8a346de08f357e3a6b252f055d7b273b16dcb1ae9a141756784308aa7789820826043e7242aae73daa16f89fe2dd3fbdc975abf8fef960fe8b115951b15622c7e023c16b2166addb13ab52a588176d820ebcca5e20d93e22e1119e43e3f2865c1797166b36e508eb5d5a737acedf980f71d71e27db953b1b533e5c9a9fad3b10a19c", @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES64, @ANYBLOB="3dea3f"], 0xff, 0x20a, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) fadvise64(r0, 0x101, 0x5, 0x3) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="b88ad5", 0x3}], 0x1, 0x5ac, 0x4) 2.371487038s ago: executing program 7 (id=1189): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 2.348515058s ago: executing program 7 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0xfffd, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.282541798s ago: executing program 8 (id=1191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='rss_stat\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r4 = open(&(0x7f0000000040)='./file0\x00', 0x410000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="ea9884bb38cfe00312bcd2a159f2f7ffd587473700745aac765c8e3961bcaf2dfec6feed82b552131016b64c508de03fb85aaf01d419c80f1419671385b615922c9ad226c7dbb0f247db4e28e64e", @ANYBLOB="999e82c25320eb4622624a20f290ff3f1a2d8e8458c970acf672d72558baf7c874f421a0f9ca17e12ad5f63556e6dbfbe0bb2fe6bfb2e2ed18db3d4d0f0dbeb3a3af939dd0404df95211dccf247dd5541bcc1667dbc07c896cf1a706fd3950853caa4cc9c9c8790be2122ec6dfaf77b482a55f54f5454cae92c091d8e98b667f519588f2c1bbcfd3978392c2437f9c4d3b48d4e7fde8ee3b8bbb91a6006a86c4d347b135256485ee66951c3d5003e6e242e2f7ec4a5ce34ec8b9a9f96e0d43b97e230c48c718a9f0755a7d0e2d80be36120bea430701883f46e959f36e8b01f64ff8a3ab3488fe6c029264e2b66f", @ANYRESDEC=r1, @ANYRES64=r4, @ANYRESDEC=r3, @ANYRESHEX=r1, @ANYBLOB="299d7b91a8d0879c7d9355000f5a76e2eada54c6671402ae243f2f950e396b1fc2e141f4b6ddbed927df6679150158d9576cac1ec55d5fe2f7066ff61675bcfc5171d6baa094f03cc6213668421284f37fca5e8b3cc2149ec4c1b189e9c008297bfd1ace1d1b56c28feb86a67622087096c2eb04fb53c82bb18b2ff0d8f40e49d25e30dfc6578c26fcc1f4de35617ff44e127a9268f4d80767d422d09407b78c13516785dad15e970af11d735ba3840a0f636e024398c621b56507124f575238aecd5fcaba0c224ded95f80d9676c98d49e0894ae740fefb95227595cfda08e00c44d2c91e9744dbab530965a68652ad5e1283ef73910c99c02df8cb754bea3d10d0c448ffbaaa04e451a349997888db19f3145cae4f8f6f67e84676970afad0ca634b5d09bb234d5520b2e2bc49ae532a71ccd780c10e52f71f4654a99744156db66a7efdc7a03c4f1d42cd33741bfb113ef674233b7b4ab004d4fa210a99b3540d218d1933cb6523c8b6a5c562a1a30289934b6405205c446cb513369a6675735ecaf4fa2b5f9b0316fa9bdc3e8ea5e6306ff84736d1017cf77c91066d3bee43e7ba2dbd734637cb036396532d9c34d528b78c6658caa285b8b5b420ffd1b27ac852da71f62ae99e646f6532111b5f43378821f8cdbbe67bf8359ead16e5676a693bde23bfaf093d95299b2698e4b40e9b7e7b26029808d11d0f9c0fb7cf4a4bc860af165b07b245e8c231e1663dd05dc11d84afe3d99896b116f553f35e1e3752f4ad1ace8dc69ff12aaee18c8abb5333c90110240463cfe6aa51c7f9244302674fe78614ad2b45bed4407e1df2f18cca44a3e0ba77ce586e8d4bce9e9d44998dd09f45aad7f9dd0605e45597ed848da9d388a21ce2efa5525dc4de31816384437d492823df483baae5cb158e73bde2207d90525a0e56a1720c1010993be016bdea0f8d37739822b260bea38a60bab9a173f6f0d1110af87d8d4c575b561731f0f6d5a8bc1b598e0c5f2cd72870677566cc4e2d3922dc75ce544759405beebe73164e7885f3b7a870d66a002d0a347ae4fca4d3fbc616de6066bda3de25f7057521584d8499a2faee906a4093c2dfaeb9caa348dc7dbc174cfa1188339fec9ebd8bd891d230c62d8ebfad6c1d80a7fec19ddbed18ca22e91487fa88ea6c970026fde7985400b0b6d94b51d81aa683558557c37992ae6e593d8a4a8b685b02c15113445e8bbf5b20fcb826c4577ab638adea7feed41a3fe2237c9dee4f68b7e8d807dd44c669370f57351a0e8c85abd5511afe0b3776d66881ff8e625aa4e0744d9e7a57f3975d74e34040842c954c1f0c320e4b0982249df7ad81c93d3db5c8da2f8c2abb3634d2ae2353aff8fe59a0c43b5bdbc81960c5442095c63d9ee3c63f5ac77a8cd526f36f693186e8e5411e2e6c5e85498770ae2401dcd73b1c4e1b3412b9171932921a42f6b9eb3f12fa1fbc0287b118271f5bb0a3b16a11453da700933b9973c61b2086b22c23a393e32326de84a54cb8acbe632d6dc35285eb103aa0c09b9c2208b812b0ad936d9e7b327fa223ea315cd1cdc6755b09a865f24bb5346d1e8045f3561b6f6bb0c939b8c4dfd5c2273723550c36f10c192275b1092c5a044e7c9aba310cd25e29790bbcebb1da17014829391dbaa8fc1433d087132538a012b962bb953cc17dab554b31abb8f17e35cfc1efcc012f0fde22702ed9efac77b823025f2aa3db0219b7c1cb5e9b63d2a80caadc8730730284315c839c1e0e647eba11540bab0f352439fb800443d0ad2188e37699007f7acac2c8fbfe093efa95f8e1aa230fe3a56738f5d6f08e2a028b29242b10a78e4e15425643ea1692aa44cd71b62bbbdc7ad9da79bba3744fc175bb4f3bea75ce0b6d7f9252573a75570a9903601c95cd2d9ace86ffcf0cde73bc62b301681fd0538bb865a4f153d8efa884d457bf5e31b5eecc8713ac15597d4a9c3d5c40512df79f50b6d7754fb8679458fd51e4cce35e299ac97472a608481d189f83cfb8075a4996100be2e899726b01f8e012690c8117bab6260c6be9b133c127bbf91f864de606580d82befc4f09f42ae1eb8428f36758d9a9dbc36e9a4bd363e583a740ca52816fa9a46578a7981244ba33bc4b818f0add32d5b61c199bf49179d50a3a7190c91a6fcda2be28a0b8e6575ad94004a65f0ee70830178903171c7fa1d090ade2a5eebdb11f1b55bec25df6da34fb3e46149bf70825716d735e2d37fa4b50a3b778be3ffbfe3bc94d4be142ab53a655f352c0b181c398faa09109b2841e71a568b71da234e2c6f68deff4ce435fd9bc939eb28461f3db8a07d0a33007620f9bc734092f144051f2f010b85ee3f27e519b3233dafd53d45db34c04bcb41139a7b0af85daaf1267a3e5402157967f669ac8e712438a840c83a4c8d3c6a687c415297cad01dc41d9083278b47dd7688b37171fbf1ced588024862c493717dd904216dd0ae2d636c8bc16e58d94f255056a435d3d5a5b7e7d7af0c24b6175dcb95fb45f92f1580e572fd3fdaf26b59788e6c7dbfac527be20f3f761a8b2598ae81f27178de8d7b5a7d0ad067747227cd3a965a3704d5914f1c461689ee5274d367f6fa39837151789f02884b239e3098175ddb3f9c283cbab5c5231c17a422ace7117bc4ebfbabfbe2ef3823b2dc168c3d9de5e8d0d315fe5511fb11a0575d2aeeefee9e29d9bf39e20577986ceebe4dde97641efada36301c7ae404ca2d4b2feebd02d858b1472abdef6b7ac2151813ed47536ae55e78d86230598428a7767d3f2522d8c03976274b407781f9224d73db3e1b08f591735bf24a470d5f4ce055f2a88cdf6356ca5bf147c847d2d03fb3bb9dce0517d89de7fe5d5b6695c4df9b04e0054691f43f5f0e87ce9a25ecb815dd11a6b859f5d41c08af0fab8a8463ce56eed1fe97d83240e2ae821429436817e4f7800c069ab454ff3a310ebfaee6247262ad44d15b3d1bc8ad6a523d2a272cfc58a4dd56dee323124e4b9fd88431d7b113ef722c66541f34c1538891c54832f74d026a356f0d249c1460f02dcfd5215a57ecc1b3e2d4cb4a3137da8f4397011f40299e1ebc30d61127e85b1811a3b8795613581eaabde2d4f129083f7f57a07f23d91df064ead6d4b70006a313fc327a78b92d9e237ad841412fa6786ea5023669105b2edf772ec7c84aba826f5347305e8ebdfa3996928af345cceb8e64c56fb5dbba7f488400273618140323f3da2ec6861ba008ff0826426f60d00dcb49378361297f4a44f7995b04faf49e59096864dc76d62e03649f203a4779010d174fc8dac3cd6d50448945732595a71c6c4942d82e296a0730266d831a5dd4ff4cc8a84682fa993304cac4c220799ae5bd284251c3e2d7b4562042294e0b31fcb0343ed39bd4a858635eaaebdeae2a63ca2568b5e0e7a0b98a2f6c8bd572459d1fb7a49ef1a75531f10150cb262cf4270f080989ad1f7024dfd899631be948a9cb164485af804b6573b8080d40bc622c4ec1fae8c5199c50ddc60ceab2d2c9a029c050519a00a421dfea4c52c00dd58983e215073a34de1959344f50b7a930ad21de947d89883079a31d6f080fea26ae5382729e246bc67331ff92a0ea291b47d11182217b6a18e161388fd68818467afa7e6a5c2152e561803800dd0e2d42123447837dd208497a05bed63d899469570fcfcca84e1a97b9418c519d5605d55ad80a0747eff6b751f59d81c428ef3d70042cddeed88729e8418c895ee80d31a0c2cecefabbb9b6e3bd052fedb3d27f0053af062d6b6416f94b01d0cf1512164248c1a564bc7b9c05b8b4606b4b84586a0f8264f9604cd470fa9e7bb3084044212357bce6d08bf293372e24394b902b106adef5c6a215d46aaa450b809f15f495138bc4552e2426c0fce2270d0882b7eb0a71bd22058cd56f6c012216d213a4e6a8d41bb315e665b42a812caa68d94cf92677e1ec8c3446135e943667378f41d72d775b908e8956ad47f8ff9953fe154db249cabfcfaee4f132a258364ee6bd48b1538ec57b00da14394882cb6f7d80894292c631780baeebf4f8f4a32918093ec6c59b772786aea7e08794659079f9af899e9012f7f8f5cf8837fcf2a426aa76b7879df76e12dc11719c91844386663b1937ab35c0d9cd2b82ed3f7766b4df86402c89d9fac8c45b729084f664bc3e828b9b99d39e2672dc3c26477ac920739532b7c8f7f4097fd93bbf50ac2c9336014965a970c9b84058b3894762448d9ceb4499a291ab5a7e37b95520ea3eb979ceca8c31b53cdeeda0f0597dfc7f5e2fd7a2bf00aed96abed670bcdc4843d64aa3eea25dc8d2860b358cc3f43893a173080f6b0d917cd799b9db5691872399ab8099186010aa2aea246354e3b27c1dae4f0e12ab64b063c0b4eb7ef528441470313ad66ab8fa592a335888a94a64a02aa257e7004fc9a88541f96401049d5fc65cb13953bfe2fe09e09773287e9ebbb1dab10bc01b8d10ea56f8180e750afaa1a4e521e3cf5a43845c598279afa18598aa72aca57d3e1a53c2da692ac90bd01bef460cc4c7e4828215d7c42ddafc3a17068c92d389da55886879bdfa6059f69087c200a6a17f2de1c165c50e48b95e33f8d00860553a80abfd5de3670b34b39de08a5ac71df5b243b9499a14360c450bc2907fe0fe30d8d4a66550c4b970c7b83f5a07a870fbaddbb964fc6fd49897f76e0bab893e44c5294253a10d4fd8bec1ede70531afa7414233fed6d7309d183ebf1c6d7d8e44d0ebd7169a51fc4523f8a8c0cb44a0e195d32cc60d95d73be8fb19054699709f500d54b475230213b1a9412a49d39c740fcbd3e63fdb3883df26e3c41cd9d24949ab51e9971c8c7ca3f974248bbb8fca62021cf9404e5d5bb84362f863e75ec02467bda4ec4de91d220eeb4d48ee2d88ecf648cbdf0c43d1151ed2a4e183ec5e933a629d7c39ce54f5d990952ca5db82c01500a066a09e97046d580f5ff804b44b3f635e074951cf2f995d208b3e212f07ac2eea9d6addb01449de0d1424c1e6ba0dc649ce9088f23ac7975e3a537f24a3b510dcacdb8de9f46cfae7130fac7a7b770768c5a89c67cea940c3a52c52e6852deccbab1341cd65aa16779996dd0a25890b892fb115ea16d7093b5e12ba5d3271dc309496d14a64fb9b57c16a1e0b906c43e99255d9bd869ce9cb531f6c06aa959a18a8bdb6b396c9b8bc37db40741db9972a87b6fed22f6fc00c343d83fd237e0ea6dd59989a1af30786cfe06be38b26ed9bfe788261dbe97e39632cd1b7fa57b0364e26a29947d466c25d88a7d61e2effbcccd399939761c01bf89176ea6873c1e5c5fac87a06c08a9c554832ec6d270d18beebbb8948a95279e31f525848a798f5d7a6eae767ca1bf9d5f87c3b72da7688055676addc039fead1dc094468cfe58a77998cb30931542a31b42dc4ad1c2ecec71d35847a8c2efb9dc48eca6c3ceccc771e51faabb77949340a66d392828bc032a657f55b5634614eb79c8f4ddec295ad55cd5af5d967792c4c439331e8d73cf55e17a902a455a3004255bbe749d1405976ee71a4e49885449154313ffcf94b15e886758574a0bdfde77291b641b87e01b8440710ee8c3d89b28254e90a94a908c99ebc82c3b3c2cb70c201b6b7ecfb21d5b47b6ce4fec4d2e3cc31b54f1c3569504a5432890ea0a5fa0ca791e2152f88056778ca8b35ece5dadac085ba6d690242777c638ae51647d50294ee8a105d670c4763dcaba1b65141ef86c0065c8533b0c41cf6530754d803815931c", @ANYRES8=r2, @ANYRES8, @ANYRESOCT=r4, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r0, 0x0, 0x0, 0x0, 0x0, 0x468, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000e680000050000000000000080c30000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000538cc0000f7c488bfa44f47661327b9bc22ff11560600a08e49673a88c647cfeded12ae630d8237128c4dd7c17e625f63298027", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0200000003000000030000000200000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) read$FUSE(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r11}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r12}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r13}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r14) socketpair(0x29, 0x6, 0x6, &(0x7f0000000000)) 2.282150598s ago: executing program 8 (id=1192): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYRES32=r0, @ANYRES64=r1, @ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14c}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x381d844, &(0x7f0000000540)={[{@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_continue}, {@grpjquota}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@abort}, {@test_dummy_encryption}, {@nodiscard}]}, 0x0, 0x516, &(0x7f0000000840)="$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") r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0xf7e2fefa88896b13, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xf2) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x22, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffcc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() 1.677039686s ago: executing program 7 (id=1193): epoll_create1(0x0) socket$packet(0x11, 0x4000000000002, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.675469796s ago: executing program 6 (id=1194): epoll_create1(0x0) socket$packet(0x11, 0x4000000000002, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.291969254s ago: executing program 3 (id=1195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000220000ffffffff000000000000000000000000fe8000000000000000000000000000bb0d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe, 0xfc}, 0x0) 643.489302ms ago: executing program 3 (id=1196): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYBLOB='$'], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 642.992742ms ago: executing program 7 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) (async, rerun: 64) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") (rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x6) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) (rerun: 64) write$binfmt_aout(r1, 0x0, 0xff89) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r0}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000006c0)={0x1000, 0x3, 0x1, 0xfffffffb, 0x4}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) syz_read_part_table(0x5d7, &(0x7f0000000600)="$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") 631.079482ms ago: executing program 6 (id=1198): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c49e02d7ef1933ab3a6c08d0d57299ee4ae33c10781c7e2c26dc6853f0e8720cf511793348fe50cf8134350b391c12b5f086164ea5bb0b165857bf73ae58690357416caf815625593"]) 630.775102ms ago: executing program 3 (id=1199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='cachefiles_mark_active\x00', r1, 0x0, 0x2e5a7a0c}, 0x18) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x7fff}, 0x0) r5 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x52) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000140)='./file1\x00', 0x400017e) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000080), 0x8010, &(0x7f0000000580)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@uid_gt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'upperdir'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mknod$loop(&(0x7f00000003c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r4], 0x1, 0x54f6, &(0x7f0000005800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000680), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000500)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x2042023, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES64], 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000000c0)='./bus\x00') 628.158792ms ago: executing program 6 (id=1200): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x63) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f00000002c0), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ed5000/0x3000)=nil, 0x3000}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 573.040472ms ago: executing program 8 (id=1201): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0x700, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 572.705842ms ago: executing program 1 (id=1202): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) 564.925982ms ago: executing program 8 (id=1203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1600000000000000040000000301000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000a13c6a4cc83661221d70357e912ff107ed8a6bab6b678624f19f0422f02278371f213e25393c613d96ae17977eb2607b313b3658c30d9f5ae25927904ac48cfe6c8c212fe8cbd5d6aaa864233b8cfb4a345479fb2684ddc20b587b509b175b8811895bfbb65cc64331436700db841fbe619a7e1a490f955da74abba30011de7ce5121477e6c9694f7d3bd7f3fa70691ee3d367742c2999d9bbc7e04a8d69a3bac9a626dd08d602", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async, rerun: 32) r7 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0xa) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 456.418691ms ago: executing program 8 (id=1204): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000435000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="0f1ad50fc79811000f01b900000f35deb853a40f64ef66b90c03000066b80001c0fe66ba000000000f3066f2260f21110f32670f380aafa4440000", 0x3b}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 450.177681ms ago: executing program 8 (id=1205): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2003208020300ecff3f000000030000d6c8db0000dba67e06018000020000f10607bdff59300a3d8500001fb700674f19b4315033bf79a61eff0601150039010017dc9a3800ea000000000400000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2132ce68bf17a6e000000000000000000000f2308964cb87c8f82cfe83a2e2ff75307fde55df9907b971eb3c5461917b625bd3", 0xb9) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="fe00000000000000000000000000000060028bf4cc3cc05964caaec7fd0d12c7e00b4cb87da4feef3c8a91dd0f713b856108761cea11b9dd1330901e2b6753a2ac873461961fed1a1136103c0ee1d358565b4d6a87884d4c4990a8b21283a48f89d721b4964c985f803288b8c59fcdcd6e9b69f476dc02644bb160fee3bc8cc603e89a9e2c7aa92baef8fa185fcd89dcd080d152490f0ce36eec4d524da4f78c732e6c567d7b785198ba9fd632f4388feb64a96596bbebd633cce6a1e683171ea6389c6e30562811d4a608a434cc87f9f787bc2a5aee4a73"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x37}}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=ANY=[@ANYBLOB="ac0d0000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="24000300000000000000000000000000000a00000000000000000000000000000006000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080007"], 0xdac}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b", 0x3}], 0x1}}], 0x1, 0x884) 48.40176ms ago: executing program 7 (id=1206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000220000ffffffff000000000000000000000000fe8000000000000000000000000000bb0d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe, 0xfe}, 0x0) 0s ago: executing program 7 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1600000000000000040000000301000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000a13c6a4cc83661221d70357e912ff107ed8a6bab6b678624f19f0422f02278371f213e25393c613d96ae17977eb2607b313b3658c30d9f5ae25927904ac48cfe6c8c212fe8cbd5d6aaa864233b8cfb4a345479fb2684ddc20b587b509b175b8811895bfbb65cc64331436700db841fbe619a7e1a490f955da74abba30011de7ce5121477e6c9694f7d3bd7f3fa70691ee3d367742c2999d9bbc7e04a8d69a3bac9a626dd08d602", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000002bc0)=[{{&(0x7f0000000340)=@file={0x1, './file0/../file0/../file0/file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000740)="2f00602e68995dbca16e9319cfd32431daca79c31661943487be43a9266b00d3b00aa25f6da9fcc57ca6431859279112f05f2db94cb4ac7b1093d73026489f7b4e1c547b0be0972b21562cb0d3f543c9463c18d9dc74acd01cc0b558f08b17020b5a04b294cd09df1372e09f03b342d8a3875fdbed4001f250e783403bbc", 0x7e}, {&(0x7f00000007c0)="fe5eb8c575ef619fa1ec6f3675040049fe7b9c984e95097ce3870be8bcfe82b6cbffe15cc5489e42ffc78d2022517213b896ec55c3d6b2ce625ea8b65b72f0b54839dac1f5440330a043c4440867da922b6b1dfea3e82447e74c27123b7009373ef947cdad3fa22cd76c5c15f86216d84b19ccd4cc", 0x75}, {&(0x7f0000000840)="6d0e9f2785d035d9650ec860c7ac7ae49bbec471969efab0a635ff524cfe9ea0d2120eb40a9e8032235f83548759e5eee6e94b04d62e0b8765d7e840af74d54001a263cc4d0d295dae330a06299477b51085ef157fc46482e10bd3d1b0afe79a480b7646f0cb83a79ba0ee61239e54a36216a5fcc13c62535f34015827ad0fa0832a78c1f3", 0x85}], 0x3, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, r7, r6, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b80)="fa0e924f33c007793ead36b4ac406e0ed204579eeda60e5f92351306736227ac8d0f4ad587f9ef13dc514de32aa64d2152c83535b5d8162f64545d9bc1db12ab9112b1bf1aeb5a92b5bf7a67ef3c99fd2ad4432ec2cf27717d9a8db80a5c76b41649fdf364e210746d2e6c51552d62da496b21a64e205eb64f", 0x79}, {&(0x7f00000004c0)="13e60b3c11fc94ec6cf5bfa1aa54ed29b6e49b84a0520669fbe69f42bfc3c086432a9dd39e", 0x25}, {&(0x7f0000000c80)="8203ef83740d139293f131628ce74fa1e440c4b7acf74fdb1943499a1bdebf749d80892e0b7b3dd1aab1e33fa6848da458c318241f99fbd0d712d1f819ff2b249c80e85b77019bed5f0c3e553ef800cd58d57f88563c4aa05caf28a0074224a80cc16b03b87175eda6a4165f9b4c81a507caad5d3d145f04170ae9246a44f40ce72781d054d63944a7b6276bb4f5eadc01f217edb7c47695ca77cd605cc3d26c73af20e3dca3f78a722e3827", 0xac}, {&(0x7f0000000a00)="8a0b33b82f5f832effd4fedcc083fa091c93d09887392a157154c920e74bb543ae9a9ae263c06bcc", 0x28}, {&(0x7f0000000d80)="3c16e5e8eb54c9aea3b33ea9da450cfc3210133f071c5243dd00501f2a2e2b584868d1ae7b64182ff0a56c533a7697c91ab25262933c8e8ed7c03323f5adda9e677852576af63d852e25da4b4cf23d2fe8455b584013d4d282e256b98ade54d52aa4331f1f468a4e", 0x68}, {&(0x7f0000000e00)="96494d3c846861367865da9813145f43e83e616feea3e1db99a027b8320dca081594d891053ef05d7085a080a6ffdd6176aa4630e29757149c1de5e23ea94566bd04ef95d467ed6019e1163d7c29930aa2945813c57f1a6b384f44bff1fabd2fdb3d9db282c211024e", 0x69}, {&(0x7f0000000e80)="1aa149ba874bd413b1a7323636435b4b12adf6dc9537da40430daec4da98f7c3a22f2abd4d3188d47b75aef7958bcaa889aebeb40e4ff7b371898edf1a1da12de0dd08079b459c211ea7c423c5ff2108acd693c0cb86196bc455723c15dc3d343fa06e40f90c45d20d7d30fc5056f81f9f0344efa0744bdb3c79b1e374feb9169b3c7e1a31715fd9496bf941ef44ad0893742c3644e240c2f059caf73a891a2c29908df3291c8d78d9580691ef25e8de8896886d567ad152a1502fc82a3b85677de9bac258f0ad1bdba05ace1ce423210ad50a589f4855f714213ddca14075a9fb62c8df618ddb0266cc80ec8c3d7e9626d8a095a6", 0xf5}, {&(0x7f0000000f80)="511bbe126b06a8193f7a51f9797b994ddb22ca5326f71154611e5abb3075f1792910437fb7dc4b25f870ea0a3c9a4ee5296777f3b9e77f1f45728301f691d83ffbe729a3e1718dbdbf7765832ba31a6e81d1e652b28791504dc4baacfe26b7ca59464bb84b", 0x65}, {&(0x7f0000001000)="c0dc3516eecb5b184784d86d4632700eccc7da99556b600ef2f4c8e63ffef0930103c4b0bcad99b317535e9acfc8c767ba4f7a28f5777d5b0c5a7e39490c97f0e694c54c60720e980a582b78729fa1491dcefce12e", 0x55}], 0x9, &(0x7f0000001200)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="08000000000000000100050b9c91a094", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x20000040}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001340)="e1ea8b0ef6ed7372c1d4c389fbbf1d4b537afa396b20ade091e96cfe1785ec37144615bef5776e247748fd62eaf7bc384d69d0226fa6233f8d85ecb08fe51614f453051ef57bb527a4b87158f21d3a455f2832f27203a55aa23338fb209339fa3cc4e2cddb573c6de83fe6999d20fce8818d5e961f19bc6eb9f54d5dc6201146baeb981d3834ea2d95efcd0354cd53664ad5e96d24b78bb4f6b97d29bd699b4071fa097620bc5a1631c0fbe6fa2d689adeca4c53afb7e94c637ab50b355e46cc938dedc1f5669cae34059ce9039a855d3b85c1", 0xd3}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="342c9a4d71b28776269177b975d364fa0db912d9b6f5b8d5f589ac7e739bb278328660efc0c08c6d2cbf1bc5030742ffdca8e5621961a2b5f8445e62a38b2619203c33f18a61f533e91e02eb6b8c55db565f89d2bf54d12354d1065065fa604bfa8448420bafc08533f1225237aed15a901a70c355d0a31c0f9fac1f3b3c24588d05f0807534ae5abd0cc4e221530008", 0x90}, {&(0x7f0000002500)="6b79fb7ec54b61047cb4ed3c2d8d8d1acea8fdb1571ab21ef720d9159f80ce745f4d249600d73831f0999be9c91d3c40d512e69c133f32e695878c474716f7ae4b2b6fb8158f49ceec2ffc3ac6ac27dee465ca101af37f9c4b374d0e5d54af306c03b32c06730958c561b5b25216c25742fc9f7ddd11ce57814aca41d83b", 0x7e}], 0x4, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002600)="262f0cde625264143fd2babeb6e2a6731b2f40bd15119d27cdc77845a3c86db775d3a1287a987edbf4952f5c6d4ba44b7ffe90b80eb7966da0c8bfccb15f2bbd598c6418e1789e9b7451695522ee2611002e92c2de06da96a4d666d9689cb9aa27d0ec84eb182b9f8d6f9682a300fa1c5f5340c8eeff6b4305a3d34f723c9798378beedfbe168110039e17161713f0bb76c6d6b06b69bf77", 0x98}, {&(0x7f00000026c0)="61b2cdd552137aaee9f03945bd2d0fb24b050feaf4e4245f9af9dd21b9c0ca08ac13cb39d314aa3e7b05c9f08ffa9460b5e7381216cd65412261911801a84bd16c49436df96067f945d0", 0x4a}, {&(0x7f0000000640)="c6430051d149fb34fcdb99504f5052e07e57a96ff4c18c105072ba1235766a783d9e800784213b82c9d08d7f0d98c8a73c21fc834cb2ab98bd0077a0ae7a4700cf13a607917311de2f7977b383aa29b2088ee3a00ff483ec028755e7eea2676463a5c2cadcf6b8068b73b2a426b3a176c269352046050a", 0x77}, {&(0x7f00000027c0)="f0d121d4402a16ae5b52d11cf496c92005b73f8a38803a0b51b2ee86328f0f11314bdbc16121e49833e33a613fac5444dbc1a28e7592a44360eb693ddc54d91e627b954ce022c6d79824ad99180e5e3cc3509179d89f3256e9e5f1c099ea251492d2c31d902880b469a801a80780eef9e5a6e23e3681a8919084351826f36941f67d1d146209b2998f2dc9ec5d61fc763199d01c", 0x94}], 0x4, 0x0, 0x0, 0x40000}}, {{&(0x7f00000028c0)=@file={0x0, './file0/../file0/../file0/../file0/file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002940)="d82da2d4deadd71b5a1f5ee90e703c16a01c83e6d1943b2f02661cc4cc1bf51c576c8dff3678b81fa216c6d85561cc5dc32755a2a60e5123ac86fac27dc4826579f4e76bab7b8b098d350443a485308ab769a7d99d59025c5052e46d2a19a830a4dc93f60cbc227782", 0x69}, {&(0x7f00000029c0)="a86748d37eb7cfdb49", 0x9}, {&(0x7f0000002a00)="858faeac288eed25e10a1dce6d89e3b3e2cb1a4e63ebb17c8a615b27f2cf01ba78ce56becd78b9d7cdffa10210ece99952405bf61539d26826f852413ceb0011b5de45850250b41f415aa033287ad0c9fc4171f6805a3ceb49b68da8be3f2ac81023f7e509ea52fa1b342b791ca35506f3a09dc8cbbbee3aae1a7d5dec663258bfe17a48cc2677e2975b521e232362415fc67e6bfeff505734e0d9b5a01880ebc6989a63b2feff36aa01d26b1ee4aa099544887d56e51d9e6828d9d742a37219869b5b97c3bfcc", 0xc7}], 0x3, &(0x7f0000002b40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r7, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r2, r4]}}], 0x78, 0x40089c4}}], 0x5, 0x40000) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r9}, 0xa) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x50) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') kernel console output (not intermixed with test programs): rror (device loop3): ext4_acquire_dquot:6788: comm syz.3.373: Failed to acquire dquot type 1 [ 117.241310][ T28] audit: type=1326 audit(1737969788.245:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c958cd29 code=0x7ffc0000 [ 117.265754][ T1770] EXT4-fs (loop3): 1 truncate cleaned up [ 117.282707][ T1770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.283962][ T1792] loop6: detected capacity change from 0 to 128 [ 117.382380][ T315] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 117.394779][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.416893][ T315] usb 6-1: config 0 descriptor?? [ 117.461897][ T291] EXT4-fs (loop3): unmounting filesystem. [ 117.582014][ T1790] loop0: detected capacity change from 0 to 40427 [ 117.605319][ T1790] F2FS-fs (loop0): fault_type options not supported [ 117.613784][ T1790] F2FS-fs (loop0): invalid crc value [ 117.620089][ T1790] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.784356][ T1790] F2FS-fs (loop0): Start checkpoint disabled! [ 117.811706][ T1790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 117.841912][ T315] hid (null): unknown global tag 0xd [ 117.854337][ T315] nintendo 0003:057E:2009.0006: unknown main item tag 0x3 [ 117.869841][ T315] nintendo 0003:057E:2009.0006: unknown global tag 0xd [ 118.280332][ T1820] loop6: detected capacity change from 0 to 512 [ 118.312242][ T315] nintendo 0003:057E:2009.0006: item 0 4 1 13 parsing failed [ 118.320466][ T315] nintendo 0003:057E:2009.0006: HID parse failed [ 118.328027][ T315] nintendo 0003:057E:2009.0006: probe - fail = -22 [ 118.335447][ T315] nintendo: probe of 0003:057E:2009.0006 failed with error -22 [ 118.538899][ T1821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.966332][ T1821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.035131][ T1822] usb 6-1: USB disconnect, device number 9 [ 121.627393][ T1842] loop5: detected capacity change from 0 to 512 [ 121.924754][ T1842] EXT4-fs (loop5): orphan cleanup on readonly fs [ 121.934110][ T1842] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.387: bg 0: block 248: padding at end of block bitmap is not set [ 121.949742][ T1842] __quota_error: 16 callbacks suppressed [ 121.949763][ T1842] Quota error (device loop5): write_blk: dquota write failed [ 121.962649][ T1842] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 121.972503][ T1842] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.387: Failed to acquire dquot type 1 [ 121.986320][ T1842] EXT4-fs (loop5): 1 truncate cleaned up [ 121.993280][ T1842] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 122.014828][ T1842] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.387: deleted inode referenced: 12 [ 122.232214][ T663] kworker/u4:5: attempt to access beyond end of device [ 122.232214][ T663] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 122.251640][ T28] audit: type=1400 audit(1737969794.446:346): avc: denied { setopt } for pid=1848 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.372476][ T28] audit: type=1400 audit(1737969794.476:347): avc: denied { bind } for pid=1848 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.673817][ T454] EXT4-fs (loop5): unmounting filesystem. [ 122.680447][ T28] audit: type=1400 audit(1737969794.736:348): avc: denied { getopt } for pid=1857 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.689049][ T1858] loop3: detected capacity change from 0 to 40427 [ 122.706768][ T1858] F2FS-fs (loop3): Image doesn't support compression [ 122.722050][ T1858] F2FS-fs (loop3): invalid crc value [ 122.776404][ T1858] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 122.822425][ T1858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.300586][ T1822] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 123.483666][ T1822] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 123.492735][ T1822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.500800][ T1822] usb 1-1: Product: syz [ 123.504827][ T1822] usb 1-1: Manufacturer: syz [ 123.509207][ T1822] usb 1-1: SerialNumber: syz [ 123.514303][ T1822] r8152-cfgselector 1-1: config 0 descriptor?? [ 123.570545][ T315] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 123.590553][ T554] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 123.750566][ T315] usb 4-1: Using ep0 maxpacket: 8 [ 123.756791][ T315] usb 4-1: config 252 has an invalid interface number: 112 but max is 0 [ 123.765404][ T315] usb 4-1: config 252 has no interface number 0 [ 123.773326][ T315] usb 4-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 123.782444][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.790201][ T315] usb 4-1: Product: syz [ 123.794247][ T315] usb 4-1: Manufacturer: syz [ 123.798623][ T315] usb 4-1: SerialNumber: syz [ 123.810518][ T554] usb 2-1: Using ep0 maxpacket: 8 [ 123.816630][ T554] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 123.828038][ T554] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 123.838066][ T554] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 123.847208][ T554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.864718][ T28] audit: type=1400 audit(1737969796.056:349): avc: denied { setattr } for pid=1888 comm="syz.6.402" name="NFC_LLCP" dev="sockfs" ino=22898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.887695][ T28] audit: type=1400 audit(1737969796.056:350): avc: denied { read } for pid=1888 comm="syz.6.402" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.914101][ T28] audit: type=1400 audit(1737969796.056:351): avc: denied { open } for pid=1888 comm="syz.6.402" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.937997][ T28] audit: type=1400 audit(1737969796.056:352): avc: denied { ioctl } for pid=1888 comm="syz.6.402" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.963523][ T28] audit: type=1400 audit(1737969796.056:353): avc: denied { ioctl } for pid=1888 comm="syz.6.402" path="socket:[22898]" dev="sockfs" ino=22898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.963875][ T1822] r8152-cfgselector 1-1: Unknown version 0x28a0 [ 123.994908][ T494] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 124.002746][ T1822] r8152-cfgselector 1-1: bad CDC descriptors [ 124.013139][ T315] hub 4-1:252.112: bad descriptor, ignoring hub [ 124.019317][ T315] hub: probe of 4-1:252.112 failed with error -5 [ 124.026162][ T315] r8152-cfgselector 4-1: Unknown version 0x0000 [ 124.032859][ T315] r8152-cfgselector 4-1: Unknown version 0x0000 [ 124.150845][ T315] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 124.176487][ T554] usb 2-1: string descriptor 0 read error: -71 [ 124.183425][ T1822] r8152-cfgselector 1-1: Unknown version 0x0000 [ 124.193124][ T554] hub 2-1:32.0: USB hub found [ 124.194348][ T1822] r8152-cfgselector 1-1: USB disconnect, device number 14 [ 124.204764][ T554] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 124.240508][ T494] usb 6-1: Using ep0 maxpacket: 8 [ 124.240772][ T554] usb 2-1: USB disconnect, device number 13 [ 124.247569][ T494] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 124.263067][ T494] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 124.273303][ T494] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 124.282484][ T494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.495500][ T494] usb 6-1: string descriptor 0 read error: -71 [ 124.495815][ T494] hub 6-1:32.0: USB hub found [ 124.500988][ T494] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 124.550835][ T494] usb 6-1: USB disconnect, device number 10 [ 124.749695][ T1909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.408'. [ 124.836657][ T1914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'. [ 125.486902][ T1933] loop5: detected capacity change from 0 to 512 [ 125.523995][ T1933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.573644][ T1933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 125.582507][ T315] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.594145][ T1933] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.770710][ T315] usb 1-1: Using ep0 maxpacket: 8 [ 125.777085][ T315] usb 1-1: config 252 has an invalid interface number: 112 but max is 0 [ 125.789030][ T315] usb 1-1: config 252 has no interface number 0 [ 125.796255][ T1940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 125.811395][ T315] usb 1-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 125.821868][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.829719][ T315] usb 1-1: Product: syz [ 125.834696][ T315] usb 1-1: Manufacturer: syz [ 125.840230][ T315] usb 1-1: SerialNumber: syz [ 125.858990][ T1942] 9pnet_fd: Insufficient options for proto=fd [ 125.903959][ T1946] loop3: detected capacity change from 0 to 512 [ 125.924821][ T1953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.414'. [ 125.944076][ T1946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.956330][ T1946] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.059021][ T315] hub 1-1:252.112: bad descriptor, ignoring hub [ 126.067188][ T315] hub: probe of 1-1:252.112 failed with error -5 [ 126.079301][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 126.087590][ T291] EXT4-fs (loop3): unmounting filesystem. [ 126.094485][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 126.130872][ T315] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 126.144860][ T1959] loop3: detected capacity change from 0 to 512 [ 126.190750][ T357] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.194787][ T1959] loop3: detected capacity change from 0 to 256 [ 126.200442][ T357] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.215679][ T357] Buffer I/O error on dev loop3, logical block 0, async page read [ 126.219229][ T1959] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 126.298401][ T316] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 126.553337][ T316] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.651206][ T1968] loop1: detected capacity change from 0 to 256 [ 126.658341][ T1968] exfat: Deprecated parameter 'utf8' [ 126.663670][ T1968] exfat: Deprecated parameter 'namecase' [ 126.669208][ T1968] exfat: Deprecated parameter 'utf8' [ 126.674590][ T1968] exfat: Bad value for 'uid' [ 126.702149][ T316] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.744767][ T1968] loop1: detected capacity change from 0 to 512 [ 126.820675][ T1968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.934335][ T1968] EXT4-fs (loop1): 1 truncate cleaned up [ 126.939924][ T1968] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.026464][ T316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.097059][ T1963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.316124][ T316] usb 7-1: Product: syz [ 127.367191][ T316] usb 7-1: Manufacturer: syz [ 127.415888][ T316] usb 7-1: SerialNumber: syz [ 127.552287][ T1963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.780116][ T296] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 127.804147][ T1963] device erspan1 left promiscuous mode [ 127.832910][ T454] EXT4-fs (loop5): unmounting filesystem. [ 127.840684][ T292] EXT4-fs (loop1): unmounting filesystem. [ 127.901966][ T1963] device vlan2 left promiscuous mode [ 127.907099][ T1963] device syz_tun left promiscuous mode [ 127.909695][ T1976] loop1: detected capacity change from 0 to 2048 [ 127.931431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 127.950244][ T1976] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.966853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.976953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 127.990126][ T296] usb 1-1: Using ep0 maxpacket: 16 [ 127.990822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.996387][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.010529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.030710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.031359][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.048685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.052192][ T1976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.057049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.065681][ T1969] loop3: detected capacity change from 0 to 40427 [ 128.073749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.086658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 128.089156][ T296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.094283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 128.114197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 128.121855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 128.198150][ T296] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.207112][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.215693][ T296] usb 1-1: config 0 descriptor?? [ 128.237648][ T1980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.426'. [ 128.247399][ T357] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.482029][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 128.482180][ T28] audit: type=1400 audit(1737969800.547:355): avc: denied { sqpoll } for pid=1975 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.643842][ T1993] 9pnet_fd: Insufficient options for proto=fd [ 128.706724][ T1999] loop5: detected capacity change from 0 to 1024 [ 128.717504][ T1999] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.430: Invalid block bitmap block 0 in block_group 0 [ 128.731193][ T1999] Quota error (device loop5): write_blk: dquota write failed [ 128.738509][ T1999] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 128.748669][ T1999] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.430: Failed to acquire dquot type 0 [ 128.768963][ T1999] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.430: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.778973][ T296] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 128.794240][ T296] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 128.806425][ T296] microsoft 0003:045E:07DA.0007: invalid report_size 362031312 [ 128.814197][ T296] microsoft 0003:045E:07DA.0007: item 0 4 1 7 parsing failed [ 128.821793][ T1999] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.430: Invalid inode bitmap blk 0 in block_group 0 [ 128.835685][ T1999] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 128.845083][ T292] EXT4-fs (loop1): unmounting filesystem. [ 128.850953][ T1999] EXT4-fs (loop5): 1 orphan inode deleted [ 128.857330][ T1999] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 128.875224][ T316] cdc_ncm 7-1:1.0: failed to get mac address [ 128.881843][ T296] microsoft 0003:045E:07DA.0007: parse failed [ 128.887994][ T296] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 128.907347][ T2004] loop3: detected capacity change from 0 to 2048 [ 128.908678][ T28] audit: type=1400 audit(1737969801.097:356): avc: denied { read } for pid=2005 comm="syz.1.431" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.914116][ T316] cdc_ncm 7-1:1.0: bind() failure [ 128.953511][ T1846] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 128.953923][ T28] audit: type=1400 audit(1737969801.127:357): avc: denied { open } for pid=2005 comm="syz.1.431" path="net:[4026532386]" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.962873][ T1846] EXT4-fs error (device loop5): ext4_release_dquot:6811: comm kworker/u4:7: Failed to release dquot type 0 [ 128.991932][ T2006] IPv6: NLM_F_REPLACE set, but no existing node found! [ 129.004867][ T316] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 129.016689][ T316] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 129.027485][ T2004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.035371][ T316] usb 7-1: USB disconnect, device number 2 [ 129.064561][ T2004] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.284961][ T2019] kernel profiling enabled (shift: 9) [ 129.347246][ T2021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 129.572200][ T315] usb 1-1: USB disconnect, device number 16 [ 129.587602][ T454] EXT4-fs (loop5): unmounting filesystem. [ 129.604466][ T2026] loop6: detected capacity change from 0 to 1024 [ 129.620239][ T2026] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 129.707186][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.437'. [ 129.727692][ T28] audit: type=1400 audit(1737969801.917:358): avc: denied { read write } for pid=2035 comm="syz.6.438" name="file1" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.753721][ T28] audit: type=1400 audit(1737969801.917:359): avc: denied { open } for pid=2035 comm="syz.6.438" path="/40/file1" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.788687][ T316] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.790386][ T2041] loop6: detected capacity change from 0 to 256 [ 129.807451][ T291] EXT4-fs (loop3): unmounting filesystem. [ 129.813389][ T2041] FAT-fs (loop6): Directory bread(block 64) failed [ 129.819918][ T2041] FAT-fs (loop6): Directory bread(block 65) failed [ 129.826551][ T2041] FAT-fs (loop6): Directory bread(block 66) failed [ 129.834423][ T2041] FAT-fs (loop6): Directory bread(block 67) failed [ 129.841135][ T2041] FAT-fs (loop6): Directory bread(block 68) failed [ 129.847623][ T2041] FAT-fs (loop6): Directory bread(block 69) failed [ 129.854498][ T2041] FAT-fs (loop6): Directory bread(block 70) failed [ 129.861208][ T2041] FAT-fs (loop6): Directory bread(block 71) failed [ 129.867595][ T2041] FAT-fs (loop6): Directory bread(block 72) failed [ 129.874820][ T2041] FAT-fs (loop6): Directory bread(block 73) failed [ 129.897281][ T28] audit: type=1326 audit(1737969802.087:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.6.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 129.920504][ T28] audit: type=1326 audit(1737969802.087:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.6.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 129.943843][ T316] usb 2-1: device descriptor read/64, error -71 [ 129.950034][ T296] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 129.979144][ T2048] loop3: detected capacity change from 0 to 2048 [ 129.985804][ T2048] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.001268][ T2048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.159871][ T40] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 130.169827][ T296] usb 6-1: Using ep0 maxpacket: 16 [ 130.178445][ T296] usb 6-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 130.187182][ T296] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 130.196369][ T296] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.295356][ T316] usb 2-1: device descriptor read/64, error -71 [ 130.306411][ T296] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 130.317911][ T296] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 130.329080][ T296] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.343374][ T296] usb 6-1: config 1 interface 0 has no altsetting 0 [ 130.352069][ T296] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 130.361263][ T296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.369083][ T296] usb 6-1: SerialNumber: syz [ 130.374915][ T2028] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 130.382721][ T2028] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 130.390583][ T296] usb 6-1: bad CDC descriptors [ 130.409810][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 130.416409][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.427371][ T40] usb 7-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 130.436684][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.445991][ T40] usb 7-1: config 0 descriptor?? [ 130.499692][ T1822] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 130.595890][ T2028] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 130.603078][ T316] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.603134][ T2028] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 130.620014][ T296] cdc_subset 6-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Linux Device, 06:cc:cc:cf:d8:1a [ 130.679680][ T1822] usb 1-1: Using ep0 maxpacket: 8 [ 130.685757][ T1822] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 130.694614][ T1822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.704858][ T1822] usb 1-1: config 0 has no interface number 0 [ 130.711726][ T1822] usb 1-1: New USB device found, idVendor=1668, idProduct=1050, bcdDevice=5c.51 [ 130.720846][ T1822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.733238][ T1822] usb 1-1: config 0 descriptor?? [ 130.749759][ T316] usb 2-1: device descriptor read/64, error -71 [ 130.877919][ T40] logitech-djreceiver 0003:046D:C51B.0008: hidraw0: USB HID v0.02 Device [HID 046d:c51b] on usb-dummy_hcd.6-1/input0 [ 130.894334][ T291] EXT4-fs (loop3): unmounting filesystem. [ 130.939303][ T1822] usb 1-1: string descriptor 0 read error: -71 [ 130.950020][ T1822] usb 1-1: bad CDC descriptors [ 130.958733][ T1822] usb 1-1: USB disconnect, device number 17 [ 131.043378][ T316] usb 2-1: device descriptor read/64, error -71 [ 131.169640][ T316] usb usb2-port1: attempt power cycle [ 131.659828][ T316] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 131.737091][ T316] usb 2-1: device descriptor read/8, error -71 [ 131.900546][ T316] usb 2-1: device descriptor read/8, error -71 [ 131.947829][ T2095] capability: warning: `syz.3.449' uses 32-bit capabilities (legacy support in use) [ 131.971800][ T2098] loop3: detected capacity change from 0 to 256 [ 131.984193][ T2098] FAT-fs (loop3): Directory bread(block 64) failed [ 131.990693][ T2098] FAT-fs (loop3): Directory bread(block 65) failed [ 131.997153][ T2098] FAT-fs (loop3): Directory bread(block 66) failed [ 132.003655][ T2098] FAT-fs (loop3): Directory bread(block 67) failed [ 132.010203][ T2098] FAT-fs (loop3): Directory bread(block 68) failed [ 132.016588][ T2098] FAT-fs (loop3): Directory bread(block 69) failed [ 132.022954][ T2098] FAT-fs (loop3): Directory bread(block 70) failed [ 132.029241][ T2098] FAT-fs (loop3): Directory bread(block 71) failed [ 132.035683][ T2098] FAT-fs (loop3): Directory bread(block 72) failed [ 132.042057][ T2098] FAT-fs (loop3): Directory bread(block 73) failed [ 132.168109][ T2100] loop1: detected capacity change from 0 to 512 [ 132.179477][ T316] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 132.184944][ T2100] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #3: comm syz.1.451: corrupted inode contents [ 132.199093][ T2100] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #3: comm syz.1.451: mark_inode_dirty error [ 132.210809][ T2100] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #3: comm syz.1.451: corrupted inode contents [ 132.222738][ T2100] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.451: mark_inode_dirty error [ 132.234607][ T2100] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.451: Failed to acquire dquot type 0 [ 132.246369][ T2100] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.451: corrupted inode contents [ 132.258271][ T2100] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #16: comm syz.1.451: mark_inode_dirty error [ 132.269754][ T2100] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.451: corrupted inode contents [ 132.281665][ T2100] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.451: mark_inode_dirty error [ 132.292974][ T2100] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.451: corrupted inode contents [ 132.304928][ T2100] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 132.313706][ T2100] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.451: corrupted inode contents [ 132.325637][ T2100] EXT4-fs error (device loop1): ext4_truncate:4313: inode #16: comm syz.1.451: mark_inode_dirty error [ 132.336709][ T2100] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 132.346379][ T2100] EXT4-fs (loop1): 1 truncate cleaned up [ 132.352495][ T2100] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.361618][ T2100] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.390825][ T296] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.590847][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.601922][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.611638][ T296] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 132.621714][ T316] usb 2-1: device not accepting address 17, error -71 [ 132.629427][ T315] usb 6-1: USB disconnect, device number 11 [ 132.635633][ T315] cdc_subset 6-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Linux Device [ 132.635996][ T316] usb usb2-port1: unable to enumerate USB device [ 132.651434][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.665938][ T296] usb 4-1: config 0 descriptor?? [ 132.828753][ T1822] usb 7-1: USB disconnect, device number 3 [ 132.885085][ T2119] loop5: detected capacity change from 0 to 40427 [ 132.896263][ T2119] F2FS-fs (loop5): invalid crc value [ 132.919970][ T2119] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.978470][ T2119] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 133.009128][ T2128] f2fs_ckpt-7:5: attempt to access beyond end of device [ 133.009128][ T2128] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 133.881555][ T296] hid-led: probe of 0003:0FC5:B080.0009 failed with error -71 [ 133.982078][ T296] usb 4-1: USB disconnect, device number 13 [ 134.471269][ T454] syz-executor: attempt to access beyond end of device [ 134.471269][ T454] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 134.496377][ T454] syz-executor: attempt to access beyond end of device [ 134.496377][ T454] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 135.095691][ T2193] loop6: detected capacity change from 0 to 512 [ 135.131063][ T2195] loop3: detected capacity change from 0 to 16 [ 135.134526][ T2193] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.145467][ T2195] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version [ 135.179831][ T2193] EXT4-fs (loop6): 1 truncate cleaned up [ 135.187534][ T2193] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 135.203942][ T2193] overlayfs: failed to resolve './file4': -2 [ 135.230597][ T292] EXT4-fs (loop1): unmounting filesystem. [ 135.239610][ T1104] __quota_error: 79 callbacks suppressed [ 135.239630][ T1104] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 135.260894][ T1104] EXT4-fs error (device loop1): ext4_release_dquot:6811: comm kworker/u4:6: Failed to release dquot type 1 [ 135.272409][ T28] audit: type=1400 audit(1737969807.457:439): avc: denied { read } for pid=2192 comm="syz.6.464" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 135.303471][ T1378] EXT4-fs (loop6): unmounting filesystem. [ 135.350232][ T28] audit: type=1400 audit(1737969807.527:440): avc: denied { read write } for pid=2207 comm="syz.6.471" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.403774][ T28] audit: type=1400 audit(1737969807.527:441): avc: denied { open } for pid=2207 comm="syz.6.471" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.539729][ T2221] input: syz0 as /devices/virtual/input/input18 [ 136.099891][ T28] audit: type=1400 audit(1737969808.227:442): avc: denied { mounton } for pid=2222 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 136.131283][ T28] audit: type=1400 audit(1737969808.237:443): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=817 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.153595][ T28] audit: type=1400 audit(1737969808.237:444): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=817 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.190218][ T28] audit: type=1400 audit(1737969808.247:445): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=817 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.224068][ T28] audit: type=1400 audit(1737969808.328:446): avc: denied { ioctl } for pid=2226 comm="syz.1.475" path="socket:[24017]" dev="sockfs" ino=24017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.258940][ T28] audit: type=1400 audit(1737969808.328:447): avc: denied { bind } for pid=2226 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.325818][ T2222] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.334293][ T2222] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.350702][ T2222] device bridge_slave_0 entered promiscuous mode [ 136.364353][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.374400][ T2222] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.382376][ T2222] device bridge_slave_1 entered promiscuous mode [ 136.397815][ T2242] loop0: detected capacity change from 0 to 256 [ 136.459932][ T663] device bridge_slave_1 left promiscuous mode [ 136.465915][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.473760][ T663] device bridge_slave_0 left promiscuous mode [ 136.489004][ T2242] loop0: detected capacity change from 256 to 11 [ 136.496613][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.506915][ T2245] syz.0.480: attempt to access beyond end of device [ 136.506915][ T2245] loop0: rw=2051, sector=208, nr_sectors = 32 limit=11 [ 136.530178][ T315] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 136.530259][ T2245] FAT-fs (loop0): unable to read inode block for updating (i_pos 202) [ 136.546769][ T663] device veth1_macvtap left promiscuous mode [ 136.555171][ T663] device veth0_vlan left promiscuous mode [ 136.561372][ T2242] FAT-fs (loop0): Directory bread(block 3) failed [ 136.581430][ T2242] syz.0.480: attempt to access beyond end of device [ 136.581430][ T2242] loop0: rw=2051, sector=16, nr_sectors = 32 limit=11 [ 136.681945][ T2245] netlink: 'syz.0.480': attribute type 12 has an invalid length. [ 136.700336][ T2247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.718516][ T2247] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 136.719050][ T315] usb 2-1: Using ep0 maxpacket: 8 [ 136.761457][ T315] usb 2-1: config 252 has an invalid interface number: 112 but max is 0 [ 136.779006][ T315] usb 2-1: config 252 has no interface number 0 [ 136.795076][ T315] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 136.818012][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.838912][ T315] usb 2-1: Product: syz [ 136.848640][ T315] usb 2-1: Manufacturer: syz [ 136.858991][ T315] usb 2-1: SerialNumber: syz [ 136.878721][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.885662][ T2222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.892920][ T2222] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.899827][ T2222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.948388][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.958043][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.966738][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.985968][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.994489][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.001414][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.010013][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.018204][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.025107][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.052491][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.060965][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.081153][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.095803][ T2222] device veth0_vlan entered promiscuous mode [ 137.105194][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.114263][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.126099][ T315] hub 2-1:252.112: bad descriptor, ignoring hub [ 137.138991][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.146758][ T293] FAT-fs (loop0): Directory bread(block 3) failed [ 137.154075][ T315] hub: probe of 2-1:252.112 failed with error -5 [ 137.161207][ T315] r8152-cfgselector 2-1: Unknown version 0x0000 [ 137.174795][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.183313][ T315] r8152-cfgselector 2-1: Unknown version 0x0000 [ 137.190485][ T2222] device veth1_macvtap entered promiscuous mode [ 137.209679][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.218102][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.229997][ T315] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 137.243717][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.257660][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.585650][ T2258] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.596877][ T2258] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.609808][ T2258] device bridge_slave_0 entered promiscuous mode [ 137.624991][ T2258] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.718907][ T2258] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.756855][ T2267] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 137.779573][ T2258] device bridge_slave_1 entered promiscuous mode [ 137.962593][ T2267] loop3: detected capacity change from 0 to 8192 [ 138.066591][ T2267] loop3: p1 < > p3 < > p4 [ 138.087022][ T2267] loop3: partition table partially beyond EOD, truncated [ 138.098420][ T2267] loop3: p1 start 4294967040 is beyond EOD, truncated [ 138.128396][ T2258] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.135303][ T2258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.142448][ T2258] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.149332][ T2258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.157559][ T2267] loop3: p4 size 50331776 extends beyond EOD, truncated [ 139.140009][ T102] loop3: p1 < > p3 < > p4 [ 139.148106][ T102] loop3: partition table partially beyond EOD, truncated [ 139.155752][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.157242][ T102] loop3: p1 start 4294967040 is beyond EOD, truncated [ 139.529820][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.531968][ T102] loop3: p4 size 50331776 extends beyond EOD, truncated [ 140.196403][ T663] device bridge_slave_1 left promiscuous mode [ 140.199657][ T2284] loop1: detected capacity change from 0 to 128 [ 140.204860][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.244103][ T663] device bridge_slave_0 left promiscuous mode [ 140.252547][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.253714][ T357] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.270039][ T663] device veth1_macvtap left promiscuous mode [ 140.286148][ T663] device veth0_vlan left promiscuous mode [ 140.433279][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 140.433299][ T28] audit: type=1326 audit(1737969812.628:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2262 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c958cd29 code=0x7fc00000 [ 140.559273][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.567122][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.589284][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.597826][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.606291][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.613187][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.621450][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 140.647327][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.656946][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.666328][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.673411][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.689723][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.741981][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.753251][ T28] audit: type=1400 audit(1737969812.948:452): avc: denied { read } for pid=2298 comm="syz.7.494" path="socket:[24508]" dev="sockfs" ino=24508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.780212][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.791455][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.808443][ T6] usb 2-1: device descriptor read/64, error -71 [ 140.812795][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.824113][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.877465][ T1846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.890063][ T1846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.904056][ T2258] device veth0_vlan entered promiscuous mode [ 140.913802][ T1846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.922915][ T1846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.995494][ T1846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.004805][ T1846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.021289][ T2258] device veth1_macvtap entered promiscuous mode [ 141.045729][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.055113][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.064693][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.088440][ T6] usb 2-1: device descriptor read/64, error -71 [ 141.097882][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.108896][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.414722][ T2308] loop3: detected capacity change from 0 to 40427 [ 141.451055][ T2308] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 141.466056][ T2308] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 141.523161][ T6] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.532571][ T2308] F2FS-fs (loop3): Image doesn't support compression [ 141.539439][ T2308] F2FS-fs (loop3): Unrecognized mount option "whint_mode=off" or missing value [ 141.610369][ T2317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.660127][ T2317] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 141.698317][ T6] usb 2-1: device descriptor read/64, error -71 [ 145.049009][ T2350] 9pnet_fd: Insufficient options for proto=fd [ 145.860525][ T2371] loop1: detected capacity change from 0 to 512 [ 146.136759][ T2371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.510: inode #1: comm syz.1.510: iget: illegal inode # [ 146.150404][ T2371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.510: error while reading EA inode 1 err=-117 [ 146.163344][ T2371] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 146.176317][ T2371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.510: inode #1: comm syz.1.510: iget: illegal inode # [ 146.189809][ T2371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.510: error while reading EA inode 1 err=-117 [ 146.202761][ T2371] EXT4-fs (loop1): 1 orphan inode deleted [ 146.208406][ T2371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.094920][ T292] EXT4-fs (loop1): unmounting filesystem. [ 147.157621][ T6] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 147.177920][ T2394] loop8: detected capacity change from 0 to 128 [ 147.347901][ T6] usb 7-1: Using ep0 maxpacket: 8 [ 147.353898][ T6] usb 7-1: config 252 has an invalid interface number: 112 but max is 0 [ 147.367605][ T6] usb 7-1: config 252 has no interface number 0 [ 147.378822][ T6] usb 7-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 147.391051][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.404067][ T2402] loop1: detected capacity change from 0 to 128 [ 147.422199][ T2402] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.431980][ T2402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.441245][ T6] usb 7-1: Product: syz [ 147.445670][ T2402] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.446943][ T6] usb 7-1: Manufacturer: syz [ 147.460717][ T6] usb 7-1: SerialNumber: syz [ 147.585611][ T2406] loop8: detected capacity change from 0 to 256 [ 147.680952][ T2406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.520'. [ 148.003569][ T292] EXT4-fs (loop1): unmounting filesystem. [ 148.013194][ T6] hub 7-1:252.112: bad descriptor, ignoring hub [ 148.019398][ T6] hub: probe of 7-1:252.112 failed with error -5 [ 148.031292][ T6] r8152-cfgselector 7-1: Unknown version 0x0000 [ 148.046716][ T6] r8152-cfgselector 7-1: Unknown version 0x0000 [ 148.091817][ T6] r8152-cfgselector 7-1: USB disconnect, device number 4 [ 148.140681][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.220787][ T2413] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 148.381939][ T2424] loop8: detected capacity change from 0 to 512 [ 148.443896][ T2422] loop7: detected capacity change from 0 to 512 [ 148.495637][ T2422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.769660][ T2422] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 148.786324][ T2422] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.728905][ T2433] netlink: 68 bytes leftover after parsing attributes in process `syz.8.529'. [ 149.778038][ T28] audit: type=1400 audit(1737969821.969:453): avc: denied { name_bind } for pid=2432 comm="syz.8.529" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 149.807300][ T28] audit: type=1400 audit(1737969821.999:454): avc: denied { setattr } for pid=2432 comm="syz.8.529" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 149.867319][ T2437] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 149.867323][ T28] audit: type=1400 audit(1737969822.049:455): avc: denied { relabelfrom } for pid=2436 comm="syz.8.530" name="UDP" dev="sockfs" ino=25941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 150.008680][ T28] audit: type=1400 audit(1737969822.199:456): avc: denied { relabelto } for pid=2436 comm="syz.8.530" name="UDP" dev="sockfs" ino=25941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 150.047028][ T2428] loop6: detected capacity change from 0 to 40427 [ 150.068653][ T2431] netlink: 24 bytes leftover after parsing attributes in process `syz.7.527'. [ 150.137410][ T2428] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 150.147338][ T2428] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 150.177307][ T315] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 150.372409][ T2428] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 150.657602][ T2428] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 150.668730][ T2428] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 150.778424][ T315] usb 9-1: config index 0 descriptor too short (expected 65535, got 27) [ 150.786627][ T315] usb 9-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 150.795669][ T315] usb 9-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 150.806003][ T315] usb 9-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 150.815862][ T315] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 150.825027][ T315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.900108][ T2222] EXT4-fs (loop7): unmounting filesystem. [ 150.938779][ T2451] loop7: detected capacity change from 0 to 256 [ 150.961518][ T28] audit: type=1400 audit(1737969823.149:457): avc: denied { append } for pid=2448 comm="syz.1.532" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.051618][ T315] usb 9-1: USB disconnect, device number 2 [ 151.307157][ T296] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 151.403457][ T2468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 151.537079][ T296] usb 8-1: Using ep0 maxpacket: 8 [ 151.543142][ T296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.555191][ T296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.565837][ T296] usb 8-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 151.575440][ T296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.599655][ T296] usb 8-1: config 0 descriptor?? [ 151.677155][ T315] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 151.857064][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 151.868110][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.878990][ T315] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 151.887962][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.896553][ T315] usb 4-1: config 0 descriptor?? [ 152.015953][ T296] saitek 0003:06A3:0CCD.000A: item fetching failed at offset 8/11 [ 152.029564][ T296] saitek 0003:06A3:0CCD.000A: parse failed [ 152.035755][ T296] saitek: probe of 0003:06A3:0CCD.000A failed with error -22 [ 152.091245][ T2479] device ip6erspan0 entered promiscuous mode [ 152.215183][ T296] usb 8-1: USB disconnect, device number 2 [ 152.635417][ T315] wacom 0003:056A:00E3.000B: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0 [ 152.650671][ T315] usb 4-1: USB disconnect, device number 14 [ 152.667415][ T2488] loop1: detected capacity change from 0 to 512 [ 152.691638][ T2488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.709179][ T2488] EXT4-fs (loop1): 1 truncate cleaned up [ 152.714694][ T2488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.870173][ T28] audit: type=1400 audit(1737969825.060:458): avc: denied { read append } for pid=2489 comm="syz.8.546" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.896119][ T28] audit: type=1400 audit(1737969825.060:459): avc: denied { open } for pid=2489 comm="syz.8.546" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.921438][ T28] audit: type=1400 audit(1737969825.090:460): avc: denied { ioctl } for pid=2489 comm="syz.8.546" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.994190][ T2502] loop7: detected capacity change from 0 to 512 [ 153.031479][ T2502] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #3: comm syz.7.548: corrupted inode contents [ 153.058469][ T2502] EXT4-fs error (device loop7): ext4_dirty_inode:6091: inode #3: comm syz.7.548: mark_inode_dirty error [ 153.073189][ T2502] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #3: comm syz.7.548: corrupted inode contents [ 153.074585][ T2508] loop6: detected capacity change from 0 to 512 [ 153.086780][ T2502] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.548: mark_inode_dirty error [ 153.106528][ T2508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.116458][ T2502] Quota error (device loop7): write_blk: dquota write failed [ 153.124530][ T2502] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 153.134824][ T2502] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.548: Failed to acquire dquot type 0 [ 153.148280][ T2502] EXT4-fs (loop7): 1 orphan inode deleted [ 153.153926][ T2502] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 153.163318][ T2502] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.192291][ T2502] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 153.213977][ T8] EXT4-fs error (device loop7): ext4_release_dquot:6811: comm kworker/u4:0: Failed to release dquot type 1 [ 153.222808][ T2508] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 153.235487][ T2508] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.736246][ T292] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 153.858103][ T292] EXT4-fs (loop1): unmounting filesystem. [ 153.966194][ T2222] EXT4-fs (loop7): unmounting filesystem. [ 154.261859][ T2540] netlink: 24 bytes leftover after parsing attributes in process `syz.6.550'. [ 154.426754][ T40] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 154.584392][ T2543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.593346][ T2543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.666812][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 154.673933][ T40] usb 8-1: config 252 has an invalid interface number: 112 but max is 0 [ 154.692164][ T40] usb 8-1: config 252 has no interface number 0 [ 154.713406][ T40] usb 8-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 154.738280][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.757402][ T40] usb 8-1: Product: syz [ 154.767374][ T40] usb 8-1: Manufacturer: syz [ 154.771949][ T40] usb 8-1: SerialNumber: syz [ 154.907647][ T2551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 154.938079][ T1378] EXT4-fs (loop6): unmounting filesystem. [ 154.986965][ T40] hub 8-1:252.112: bad descriptor, ignoring hub [ 154.995666][ T40] hub: probe of 8-1:252.112 failed with error -5 [ 155.003516][ T2551] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.010618][ T2551] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.023945][ T40] r8152-cfgselector 8-1: Unknown version 0x0000 [ 155.032685][ T40] r8152-cfgselector 8-1: Unknown version 0x0000 [ 155.067016][ T40] r8152-cfgselector 8-1: USB disconnect, device number 3 [ 155.143715][ T2553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 155.210563][ T2553] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.217652][ T2553] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.264379][ T2566] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 155.359035][ T2566] xt_CT: No such helper "pptp" [ 155.466626][ T492] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 155.561518][ T2571] loop6: detected capacity change from 0 to 2048 [ 155.572968][ T2571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.721721][ T2571] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 155.749460][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 155.749509][ T28] audit: type=1400 audit(1737969827.940:462): avc: denied { accept } for pid=2567 comm="syz.6.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 155.775346][ T492] usb 9-1: Using ep0 maxpacket: 32 [ 155.810448][ T492] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.945134][ T492] usb 9-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 155.989971][ T492] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.045249][ T492] usb 9-1: config 0 descriptor?? [ 156.419969][ T315] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 156.456233][ T28] audit: type=1400 audit(1737969828.640:463): avc: denied { ioctl } for pid=2556 comm="syz.8.564" path="socket:[25090]" dev="sockfs" ino=25090 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.606573][ T315] usb 2-1: Using ep0 maxpacket: 8 [ 156.613313][ T315] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 156.632419][ T315] usb 2-1: config 0 has no interface number 0 [ 156.646546][ T315] usb 2-1: config 0 interface 106 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 156.666742][ T315] usb 2-1: config 0 interface 106 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 495 [ 156.696756][ T492] usbhid 9-1:0.0: can't add hid device: -71 [ 156.698288][ T315] usb 2-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00 [ 156.702620][ T492] usbhid: probe of 9-1:0.0 failed with error -71 [ 156.732097][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.737592][ T492] usb 9-1: USB disconnect, device number 3 [ 156.753316][ T315] usb 2-1: Product: syz [ 156.763461][ T315] usb 2-1: Manufacturer: syz [ 156.772080][ T315] usb 2-1: SerialNumber: syz [ 156.801251][ T315] usb 2-1: config 0 descriptor?? [ 156.816548][ T2559] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.823562][ T2559] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.922883][ T2592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.572'. [ 156.984888][ T2597] loop7: detected capacity change from 0 to 2048 [ 157.041997][ T2597] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 157.075863][ T2597] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.120432][ T2597] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 157.132838][ T2597] EXT4-fs (loop7): This should not happen!! Data will be lost [ 157.132838][ T2597] [ 157.142345][ T2597] EXT4-fs (loop7): Total free blocks count 0 [ 157.148172][ T2597] EXT4-fs (loop7): Free/Dirty block details [ 157.153843][ T2597] EXT4-fs (loop7): free_blocks=2415919104 [ 157.159460][ T2597] EXT4-fs (loop7): dirty_blocks=16 [ 157.164359][ T2597] EXT4-fs (loop7): Block reservation details [ 157.170232][ T2597] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 157.239614][ T2604] SELinux: policydb version 0 does not match my version range 15-33 [ 157.247773][ T2604] SELinux: failed to load policy [ 158.626752][ T28] audit: type=1400 audit(1737969830.340:464): avc: denied { bind } for pid=2596 comm="syz.7.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.652525][ T2603] netlink: 12 bytes leftover after parsing attributes in process `syz.8.577'. [ 158.727464][ T2603] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.734585][ T2603] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.216177][ T1973] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 159.346173][ T2492] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 159.396236][ T1973] usb 8-1: Using ep0 maxpacket: 8 [ 159.402686][ T1973] usb 8-1: config 1 interface 0 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.413030][ T1973] usb 8-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 0 [ 159.423244][ T1973] usb 8-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 64 [ 159.433763][ T1973] usb 8-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.447013][ T1973] usb 8-1: config 1 interface 0 has no altsetting 0 [ 159.455036][ T1973] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.464366][ T1973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.472459][ T1973] usb 8-1: Product: syz [ 159.476786][ T1973] usb 8-1: Manufacturer: syz [ 159.481288][ T1973] usb 8-1: SerialNumber: syz [ 159.487387][ T2597] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 159.651820][ T315] usb-storage 2-1:0.106: USB Mass Storage device detected [ 159.700382][ T1973] usb 8-1: bad CDC descriptors [ 159.712269][ T315] usb 2-1: USB disconnect, device number 21 [ 159.715263][ T1973] usb 8-1: USB disconnect, device number 4 [ 160.093724][ T2637] loop8: detected capacity change from 0 to 2048 [ 160.109095][ T2637] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 160.245260][ T2222] EXT4-fs (loop7): unmounting filesystem. [ 160.647788][ T2647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 160.716095][ T1973] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 160.885156][ T2258] EXT4-fs (loop8): unmounting filesystem. [ 160.905982][ T1973] usb 8-1: Using ep0 maxpacket: 8 [ 160.914621][ T1973] usb 8-1: config 252 has an invalid interface number: 112 but max is 0 [ 160.953970][ T1973] usb 8-1: config 252 has no interface number 0 [ 161.040986][ T1973] usb 8-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 161.055084][ T1973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.063271][ T1973] usb 8-1: Product: syz [ 161.067502][ T1973] usb 8-1: Manufacturer: syz [ 161.072287][ T1973] usb 8-1: SerialNumber: syz [ 161.251304][ T2669] netlink: 40 bytes leftover after parsing attributes in process `syz.8.597'. [ 161.261094][ T2669] netlink: 40 bytes leftover after parsing attributes in process `syz.8.597'. [ 161.291983][ T1973] hub 8-1:252.112: bad descriptor, ignoring hub [ 161.302169][ T1973] hub: probe of 8-1:252.112 failed with error -5 [ 161.499478][ T1973] r8152-cfgselector 8-1: Unknown version 0x0000 [ 161.508011][ T1973] r8152-cfgselector 8-1: Unknown version 0x0000 [ 161.546102][ T1973] r8152-cfgselector 8-1: USB disconnect, device number 5 [ 161.851942][ T2676] netlink: 20 bytes leftover after parsing attributes in process `syz.6.600'. [ 162.358870][ T2696] loop7: detected capacity change from 0 to 1024 [ 162.387460][ T2696] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 162.411661][ T2696] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 162.445221][ T2222] EXT4-fs (loop7): unmounting filesystem. [ 162.477453][ T28] audit: type=1400 audit(1737969834.671:465): avc: denied { getopt } for pid=2706 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.550994][ T2712] netlink: 20 bytes leftover after parsing attributes in process `syz.7.611'. [ 162.560942][ T2713] netlink: 104 bytes leftover after parsing attributes in process `syz.3.610'. [ 162.585315][ T28] audit: type=1400 audit(1737969834.771:466): avc: denied { write } for pid=2715 comm="syz.7.612" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.089477][ T2721] xt_TCPMSS: Only works on TCP SYN packets [ 163.165421][ T2727] bridge0: port 3(veth1_macvtap) entered blocking state [ 163.172857][ T28] audit: type=1400 audit(1737969835.371:467): avc: denied { ioctl } for pid=2725 comm="syz.6.616" path="socket:[26445]" dev="sockfs" ino=26445 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.205015][ T2727] bridge0: port 3(veth1_macvtap) entered disabled state [ 163.246439][ T2729] 9pnet_fd: Insufficient options for proto=fd [ 163.253156][ T2726] device syzkaller0 entered promiscuous mode [ 163.317320][ T28] audit: type=1400 audit(1737969835.511:468): avc: denied { create } for pid=2734 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 163.346901][ T28] audit: type=1400 audit(1737969835.511:469): avc: denied { write } for pid=2734 comm="syz.1.619" path="socket:[26454]" dev="sockfs" ino=26454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 163.385441][ T2744] fuse: Bad value for 'fd' [ 165.322226][ T2758] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 165.515441][ T494] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 165.706514][ T494] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 165.727554][ T494] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.756947][ T494] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.776789][ T494] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 165.804932][ T494] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 165.823645][ T494] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 165.840557][ T494] usb 8-1: Manufacturer: syz [ 165.854117][ T494] usb 8-1: config 0 descriptor?? [ 166.250535][ T2794] loop1: detected capacity change from 0 to 256 [ 166.257282][ T2794] exfat: Bad value for 'umask' [ 166.268524][ T494] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 166.269252][ T2794] loop1: detected capacity change from 0 to 512 [ 166.278977][ T494] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 166.309393][ T494] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 166.321380][ T2794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.636: inode #1: comm syz.1.636: iget: illegal inode # [ 166.354344][ T2794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.636: error while reading EA inode 1 err=-117 [ 166.366937][ T2794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.636: inode #1: comm syz.1.636: iget: illegal inode # [ 166.380525][ T2794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.636: error while reading EA inode 1 err=-117 [ 166.392977][ T2794] EXT4-fs (loop1): 1 orphan inode deleted [ 166.398781][ T2794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.476731][ T2756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.492478][ T2756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.577214][ T6] usb 8-1: USB disconnect, device number 6 [ 167.163052][ T292] EXT4-fs (loop1): unmounting filesystem. [ 167.182887][ T2824] serio: Serial port ptm0 [ 167.297205][ T2826] loop7: detected capacity change from 0 to 2048 [ 167.584065][ T2826] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 167.597032][ T2826] 9pnet_fd: Insufficient options for proto=fd [ 167.606605][ T28] audit: type=1400 audit(1737969839.801:470): avc: denied { map } for pid=2825 comm="syz.7.645" path="/27/file2/file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.639159][ T2826] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 167.664717][ T492] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 167.681490][ T492] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.691327][ T1104] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 167.713524][ T28] audit: type=1400 audit(1737969839.901:471): avc: denied { read } for pid=2836 comm="syz.6.646" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.745447][ T1104] EXT4-fs (loop7): This should not happen!! Data will be lost [ 167.745447][ T1104] [ 167.757065][ T1104] EXT4-fs (loop7): Total free blocks count 0 [ 167.769155][ T1104] EXT4-fs (loop7): Free/Dirty block details [ 167.781273][ T1104] EXT4-fs (loop7): free_blocks=2415919120 [ 167.789104][ T28] audit: type=1400 audit(1737969839.901:472): avc: denied { open } for pid=2836 comm="syz.6.646" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.817941][ T1104] EXT4-fs (loop7): dirty_blocks=16 [ 167.828080][ T1104] EXT4-fs (loop7): Block reservation details [ 167.840166][ T1104] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 167.853108][ T2222] EXT4-fs (loop7): unmounting filesystem. [ 167.967988][ T28] audit: type=1400 audit(1737969839.901:473): avc: denied { ioctl } for pid=2836 comm="syz.6.646" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.387929][ T2876] overlayfs: failed to clone upperpath [ 168.414840][ T2876] device batadv_slave_1 entered promiscuous mode [ 168.450866][ T2875] device batadv_slave_1 left promiscuous mode [ 168.646418][ T2886] ip6t_rpfilter: unknown options [ 168.659462][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.668318][ T2884] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 168.819121][ T28] audit: type=1400 audit(1737969841.011:474): avc: denied { ioctl } for pid=2889 comm="syz.6.661" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 168.845099][ T28] audit: type=1400 audit(1737969841.011:475): avc: denied { write } for pid=2889 comm="syz.6.661" name="usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.935091][ T494] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 169.684891][ T494] usb 8-1: Using ep0 maxpacket: 8 [ 169.711968][ T494] usb 8-1: config 252 has an invalid interface number: 112 but max is 0 [ 169.872469][ T494] usb 8-1: config 252 has no interface number 0 [ 169.903726][ T494] usb 8-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 169.940598][ T494] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.961060][ T494] usb 8-1: Product: syz [ 169.969286][ T494] usb 8-1: Manufacturer: syz [ 169.978924][ T494] usb 8-1: SerialNumber: syz [ 170.197736][ T494] hub 8-1:252.112: bad descriptor, ignoring hub [ 170.204651][ T494] hub: probe of 8-1:252.112 failed with error -5 [ 170.756361][ T2934] netlink: 12 bytes leftover after parsing attributes in process `syz.8.673'. [ 171.575031][ T28] audit: type=1400 audit(1737969843.442:476): avc: denied { connect } for pid=2944 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.747778][ T28] audit: type=1400 audit(1737969843.442:477): avc: denied { shutdown } for pid=2944 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.800205][ T2951] loop1: detected capacity change from 0 to 2048 [ 171.822946][ T494] r8152-cfgselector 8-1: Unknown version 0x0000 [ 171.832243][ T2951] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 171.834965][ T494] r8152-cfgselector 8-1: Unknown version 0x0000 [ 171.915065][ T494] r8152-cfgselector 8-1: USB disconnect, device number 7 [ 171.940813][ T2963] Zero length message leads to an empty skb [ 172.061700][ T2975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.684'. [ 172.213966][ T2983] netlink: 76 bytes leftover after parsing attributes in process `syz.6.683'. [ 173.584799][ T28] audit: type=1400 audit(1737969845.782:478): avc: denied { audit_read } for pid=2986 comm="syz.8.688" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.994114][ T28] audit: type=1400 audit(1737970102.181:479): avc: denied { map } for pid=2993 comm="syz.8.690" path="socket:[27824]" dev="sockfs" ino=27824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 174.218247][ T3009] futex_wake_op: syz.6.694 tries to shift op by -1; fix this program [ 174.243072][ T3013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 174.270398][ T3015] netlink: 'syz.3.697': attribute type 32 has an invalid length. [ 176.416721][ T3046] loop1: detected capacity change from 0 to 128 [ 176.448785][ T3046] FAT-fs (loop1): bogus number of reserved sectors [ 176.485279][ T3046] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 176.496670][ T3046] FAT-fs (loop1): Can't find a valid FAT filesystem [ 178.062281][ T1973] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 178.336357][ T1973] usb 8-1: config 1 interface 0 has no altsetting 0 [ 178.346573][ T1973] usb 8-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.40 [ 178.359757][ T1973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.367944][ T1973] usb 8-1: Product: ᇠ[ 178.371968][ T1973] usb 8-1: Manufacturer: 鴄莂驤갪輦쎤衬ꨜï­á³‡æ¹ï¾‡ê™žç´¼â¹¼í‰§î¯€âœî›‘㈄䋼ã­è‘‡ë¥¿ì‰¾ã¯¶îœŒå„îŠ [ 178.386077][ T1973] usb 8-1: SerialNumber: Ð [ 178.412280][ T1973] usb 8-1: can't set config #1, error -71 [ 178.473203][ T1973] usb 8-1: USB disconnect, device number 8 [ 178.818907][ T3109] loop1: detected capacity change from 0 to 512 [ 178.829331][ T3109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.844739][ T3109] EXT4-fs (loop1): 1 truncate cleaned up [ 178.850640][ T3109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.162967][ T3119] netlink: 56 bytes leftover after parsing attributes in process `syz.3.730'. [ 179.737193][ T292] EXT4-fs (loop1): unmounting filesystem. [ 180.816750][ T3144] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.847220][ T3170] loop1: detected capacity change from 0 to 512 [ 181.910301][ T3170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.932455][ T3170] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.984487][ T3170] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.745: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 182.036261][ T3180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 182.054421][ T3180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 182.059498][ T292] EXT4-fs (loop1): unmounting filesystem. [ 182.147862][ T3186] input: syz1 as /devices/virtual/input/input22 [ 182.176035][ T3186] netlink: 'syz.7.750': attribute type 4 has an invalid length. [ 182.190330][ T28] audit: type=1400 audit(1737970110.381:480): avc: denied { bind } for pid=3193 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.212254][ T28] audit: type=1400 audit(1737970110.411:481): avc: denied { listen } for pid=3193 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.219221][ T3186] netlink: 'syz.7.750': attribute type 17 has an invalid length. [ 182.233053][ T28] audit: type=1400 audit(1737970110.411:482): avc: denied { accept } for pid=3193 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.249406][ T3186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.564410][ T316] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 182.778534][ T316] usb 8-1: Using ep0 maxpacket: 8 [ 182.786574][ T316] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 182.801593][ T316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.822435][ T316] usb 8-1: config 0 descriptor?? [ 183.116900][ T316] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 183.680649][ T28] audit: type=1400 audit(1737970111.871:483): avc: denied { setopt } for pid=3214 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.703457][ T3215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 183.737080][ T28] audit: type=1400 audit(1737970111.891:484): avc: denied { read } for pid=3214 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.953195][ T3198] loop7: detected capacity change from 0 to 1024 [ 183.964851][ T3198] EXT4-fs: Ignoring removed nobh option [ 183.973894][ T3198] EXT4-fs: Ignoring removed oldalloc option [ 183.985906][ T3198] EXT4-fs: Ignoring removed bh option [ 184.006854][ T3198] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 184.355277][ T3242] netlink: 28 bytes leftover after parsing attributes in process `syz.8.769'. [ 184.365077][ T3242] netlink: 28 bytes leftover after parsing attributes in process `syz.8.769'. [ 184.446885][ T28] audit: type=1400 audit(1737970112.641:485): avc: denied { sqpoll } for pid=3249 comm="syz.8.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.550431][ T2222] EXT4-fs (loop7): unmounting filesystem. [ 184.570674][ T316] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 184.594489][ T316] asix: probe of 8-1:0.0 failed with error -71 [ 184.604534][ T316] usb 8-1: USB disconnect, device number 9 [ 184.844101][ T3283] netlink: 20 bytes leftover after parsing attributes in process `syz.7.784'. [ 184.868746][ T28] audit: type=1400 audit(1737970113.061:486): avc: denied { read } for pid=3284 comm="syz.7.785" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.894194][ T28] audit: type=1400 audit(1737970113.081:487): avc: denied { open } for pid=3284 comm="syz.7.785" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.924422][ T492] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 185.104375][ T492] usb 2-1: Using ep0 maxpacket: 8 [ 185.110938][ T492] usb 2-1: config 252 has an invalid interface number: 112 but max is 0 [ 185.119456][ T492] usb 2-1: config 252 has no interface number 0 [ 185.127450][ T492] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 185.136571][ T492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.144610][ T492] usb 2-1: Product: syz [ 185.148642][ T492] usb 2-1: Manufacturer: syz [ 185.153038][ T492] usb 2-1: SerialNumber: syz [ 185.224376][ T316] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 185.360835][ T492] hub 2-1:252.112: bad descriptor, ignoring hub [ 185.367061][ T492] hub: probe of 2-1:252.112 failed with error -5 [ 185.373822][ T492] r8152-cfgselector 2-1: Unknown version 0x0000 [ 185.385233][ T492] r8152-cfgselector 2-1: Unknown version 0x0000 [ 185.424468][ T316] usb 8-1: Using ep0 maxpacket: 32 [ 185.429882][ T492] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 185.440015][ T316] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.451604][ T316] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.463038][ T316] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.473405][ T316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.486949][ T316] hub 8-1:4.0: USB hub found [ 185.687168][ T316] hub 8-1:4.0: 2 ports detected [ 186.500112][ T3316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 186.613864][ T28] audit: type=1400 audit(1737970114.801:488): avc: denied { shutdown } for pid=3319 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.706555][ T316] hub 8-1:4.0: hub_hub_status failed (err = -32) [ 186.712878][ T316] hub 8-1:4.0: config failed, can't get hub status (err -32) [ 187.884755][ T3334] loop7: detected capacity change from 0 to 40427 [ 187.912520][ T3334] F2FS-fs (loop7): Unrecognized mount option "lazytimK" or missing value [ 189.086520][ T316] usb 8-1: USB disconnect, device number 10 [ 191.043208][ T3390] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.446252][ T3399] loop1: detected capacity change from 0 to 256 [ 191.850175][ T3399] FAT-fs (loop1): Directory bread(block 64) failed [ 191.865953][ T3399] FAT-fs (loop1): Directory bread(block 65) failed [ 191.888916][ T3399] FAT-fs (loop1): Directory bread(block 66) failed [ 191.902669][ T3399] FAT-fs (loop1): Directory bread(block 67) failed [ 191.916684][ T3399] FAT-fs (loop1): Directory bread(block 68) failed [ 191.932798][ T3399] FAT-fs (loop1): Directory bread(block 69) failed [ 191.944644][ T3399] FAT-fs (loop1): Directory bread(block 70) failed [ 191.960279][ T3399] FAT-fs (loop1): Directory bread(block 71) failed [ 191.969762][ T3399] FAT-fs (loop1): Directory bread(block 72) failed [ 191.978120][ T3399] FAT-fs (loop1): Directory bread(block 73) failed [ 192.187098][ T3388] 9pnet_fd: Insufficient options for proto=fd [ 192.521451][ T3412] capability: warning: `syz.1.820' uses deprecated v2 capabilities in a way that may be insecure [ 192.907496][ T28] audit: type=1400 audit(1737970121.101:489): avc: denied { checkpoint_restore } for pid=3410 comm="syz.3.823" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.634851][ T28] audit: type=1400 audit(1737970121.571:490): avc: denied { append } for pid=3422 comm="syz.6.826" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.448398][ T3416] loop7: detected capacity change from 0 to 131072 [ 195.538728][ T3416] F2FS-fs (loop7): Test dummy encryption mode enabled [ 195.702492][ T3416] F2FS-fs (loop7): invalid crc value [ 195.874056][ T3416] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4) [ 196.445996][ T28] audit: type=1400 audit(1737970124.641:491): avc: denied { read } for pid=3455 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.764445][ T316] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 196.936122][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.975952][ T3479] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.513650][ T3504] netlink: 24 bytes leftover after parsing attributes in process `syz.8.843'. [ 201.508511][ T3521] loop1: detected capacity change from 0 to 40427 [ 202.505647][ T3521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.641541][ T3521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 203.774710][ T292] syz-executor: attempt to access beyond end of device [ 203.774710][ T292] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.054407][ T315] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 204.194507][ T3567] device veth0_vlan left promiscuous mode [ 204.200426][ T3567] device veth0_vlan entered promiscuous mode [ 204.208098][ T3567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 204.254411][ T315] usb 8-1: Using ep0 maxpacket: 32 [ 204.266950][ T315] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.277766][ T28] audit: type=1400 audit(1737970132.481:492): avc: denied { read } for pid=3566 comm="syz.3.861" lport=15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.298164][ T315] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.308832][ T315] usb 8-1: New USB device found, idVendor=256a, idProduct=00e3, bcdDevice= 0.00 [ 204.318006][ T315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.340549][ T315] usb 8-1: config 0 descriptor?? [ 204.472657][ T3571] loop1: detected capacity change from 0 to 256 [ 204.493048][ T3571] exfat: Deprecated parameter 'namecase' [ 204.501297][ T3571] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8b2cf619, utbl_chksum : 0xe619d30d) [ 206.082026][ T315] usb 8-1: USB disconnect, device number 12 [ 206.251783][ T3592] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.384619][ T28] audit: type=1400 audit(1737970136.581:493): avc: denied { create } for pid=3601 comm="syz.8.874" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.419310][ T28] audit: type=1400 audit(1737970136.611:494): avc: denied { setattr } for pid=3601 comm="syz.8.874" name="bus" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 209.267180][ T3606] loop7: detected capacity change from 0 to 512 [ 211.236145][ T28] audit: type=1400 audit(1737970136.611:495): avc: denied { write } for pid=3601 comm="syz.8.874" name="bus" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 211.302039][ T28] audit: type=1400 audit(1737970136.611:496): avc: denied { open } for pid=3601 comm="syz.8.874" path="/74/file0/bus" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 211.506360][ T3618] loop7: detected capacity change from 0 to 256 [ 211.527565][ T3618] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 211.619757][ T3628] netlink: 20 bytes leftover after parsing attributes in process `syz.7.881'. [ 211.648342][ T3630] netlink: 80 bytes leftover after parsing attributes in process `syz.7.882'. [ 212.040415][ T315] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 212.224387][ T315] usb 2-1: Using ep0 maxpacket: 8 [ 212.231274][ T315] usb 2-1: config 252 has an invalid interface number: 112 but max is 0 [ 212.241475][ T315] usb 2-1: config 252 has no interface number 0 [ 212.249667][ T315] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 212.260310][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.269302][ T315] usb 2-1: Product: syz [ 212.275158][ T315] usb 2-1: Manufacturer: syz [ 212.284488][ T315] usb 2-1: SerialNumber: syz [ 212.293349][ T28] audit: type=1400 audit(1737970140.481:497): avc: denied { unlink } for pid=2258 comm="syz-executor" name="bus" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 213.106848][ T3647] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 214.414779][ T3670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.892'. [ 214.855793][ T315] hub 2-1:252.112: bad descriptor, ignoring hub [ 214.862131][ T315] hub: probe of 2-1:252.112 failed with error -5 [ 214.874762][ T315] r8152-cfgselector 2-1: Unknown version 0x0000 [ 214.934407][ T315] r8152-cfgselector 2-1: Unknown version 0x0000 [ 214.969935][ T315] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 216.333102][ T3731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.904'. [ 216.444948][ T3735] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 218.259746][ T28] audit: type=1400 audit(1737970146.451:498): avc: denied { setopt } for pid=3752 comm="syz.8.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.315189][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 218.325814][ T3753] SELinux: Context system_u: is not valid (left unmapped). [ 218.339139][ T28] audit: type=1400 audit(1737970146.521:499): avc: denied { relabelfrom } for pid=3752 comm="syz.8.909" name="" dev="pipefs" ino=30218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 218.385098][ T28] audit: type=1400 audit(1737970146.561:500): avc: denied { relabelto } for pid=3752 comm="syz.8.909" name="" dev="pipefs" ino=30218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 218.569694][ T3756] tipc: Started in network mode [ 218.586192][ T3756] tipc: Node identity ac14140f, cluster identity 4711 [ 218.606813][ T3756] tipc: Enabled bearer , priority 10 [ 218.859485][ T3762] syz.3.912[3762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.859572][ T3762] syz.3.912[3762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.735211][ T315] tipc: Node number set to 2886997007 [ 219.787322][ T28] audit: type=1326 audit(1737970147.981:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.8.916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f861998cd29 code=0x0 [ 219.954467][ T3790] syz.8.916[3790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.954556][ T3790] syz.8.916[3790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.144331][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.053983][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 221.063179][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.072103][ T3802] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 221.292189][ T3805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.299270][ T3805] IPv6: NLM_F_CREATE should be set when creating new route [ 221.306307][ T3805] IPv6: NLM_F_CREATE should be set when creating new route [ 222.066580][ T28] audit: type=1400 audit(1737970150.261:502): avc: denied { map } for pid=3832 comm="syz.3.930" path="socket:[29315]" dev="sockfs" ino=29315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.092909][ T3833] netlink: 44 bytes leftover after parsing attributes in process `syz.3.930'. [ 222.121603][ T3844] device pim6reg1 entered promiscuous mode [ 222.130354][ T28] audit: type=1400 audit(1737970150.301:503): avc: denied { connect } for pid=3832 comm="syz.3.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.490705][ T28] audit: type=1400 audit(1737970150.681:504): avc: denied { mount } for pid=3851 comm="syz.6.937" name="/" dev="pstore" ino=14541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 222.514644][ T3857] netlink: 112 bytes leftover after parsing attributes in process `syz.6.937'. [ 222.665630][ T3856] device veth0_vlan left promiscuous mode [ 222.673076][ T3856] device veth0_vlan entered promiscuous mode [ 222.906538][ T28] audit: type=1400 audit(1737970151.101:505): avc: denied { map } for pid=3866 comm="syz.7.942" path="/dev/tty2" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 223.010256][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.026250][ T3868] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 223.895540][ T28] audit: type=1400 audit(1737970152.091:506): avc: denied { unmount } for pid=1378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 223.982223][ T28] audit: type=1400 audit(1737970152.121:507): avc: denied { setattr } for pid=3874 comm="syz.7.945" path="/proc/227/net/rt6_stats" dev="proc" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 225.566390][ T28] audit: type=1326 audit(1737970153.761:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 225.622787][ T28] audit: type=1326 audit(1737970153.781:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 225.646175][ T28] audit: type=1326 audit(1737970153.791:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 225.789100][ T28] audit: type=1326 audit(1737970153.791:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 226.001480][ T3934] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 226.014938][ T3934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.149860][ T3934] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.289607][ T28] audit: type=1326 audit(1737970153.791:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 227.313381][ T28] audit: type=1326 audit(1737970153.791:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 227.444403][ T28] audit: type=1326 audit(1737970153.791:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 227.537137][ T28] audit: type=1326 audit(1737970153.791:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497d38cd29 code=0x7ffc0000 [ 228.125003][ T3961] loop1: detected capacity change from 0 to 512 [ 228.141856][ T3961] ext4: Unknown parameter 'euid' [ 228.161618][ T3948] overlayfs: failed to clone upperpath [ 228.923896][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 228.923914][ T28] audit: type=1400 audit(1737970157.111:517): avc: denied { getopt } for pid=3989 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.118571][ T3997] syz.3.977 uses obsolete (PF_INET,SOCK_PACKET) [ 230.719833][ T4036] netlink: 1068 bytes leftover after parsing attributes in process `syz.7.991'. [ 231.175954][ T4051] loop1: detected capacity change from 0 to 512 [ 231.184938][ T28] audit: type=1400 audit(1737970159.381:518): avc: denied { remount } for pid=4050 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.225612][ T4051] loop1: detected capacity change from 0 to 256 [ 231.242427][ T4051] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 232.482373][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.491057][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.833103][ T4060] loop1: detected capacity change from 0 to 40427 [ 233.137731][ T4068] device bridge0 entered promiscuous mode [ 233.147232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 233.444914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.473790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 234.339784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.368487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.397170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.424762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.453642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.483917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 234.500776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 234.517297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 234.533242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 234.563382][ T4088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1004'. [ 234.604519][ T492] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 234.624156][ T4088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1004'. [ 234.659950][ T28] audit: type=1400 audit(1737970162.841:519): avc: denied { nlmsg_read } for pid=4087 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.942484][ T492] usb 2-1: Using ep0 maxpacket: 16 [ 235.949719][ T492] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 235.959223][ T492] usb 2-1: config 0 interface 0 has no altsetting 1 [ 235.967728][ T492] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 235.977141][ T492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.030826][ T4120] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 237.060964][ T494] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 237.124729][ T492] usb 2-1: Product: syz [ 237.129120][ T492] usb 2-1: Manufacturer: syz [ 237.133760][ T492] usb 2-1: SerialNumber: syz [ 237.147669][ T492] usb 2-1: config 0 descriptor?? [ 237.254388][ T494] usb 8-1: Using ep0 maxpacket: 32 [ 237.263123][ T494] usb 8-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 237.272608][ T494] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.286966][ T494] usb 8-1: config 0 descriptor?? [ 237.294017][ T494] smsc75xx v1.0.0 [ 237.297922][ T494] smsc75xx 8-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 237.308435][ T494] smsc75xx: probe of 8-1:0.0 failed with error -22 [ 237.326457][ T494] usb 2-1: USB disconnect, device number 24 [ 237.617648][ T4134] loop1: detected capacity change from 0 to 512 [ 238.193083][ T4139] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1014'. [ 238.865038][ T494] usb 8-1: USB disconnect, device number 13 [ 239.918540][ T4143] device macsec0 entered promiscuous mode [ 240.194372][ T492] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 240.480509][ T492] usb 2-1: Using ep0 maxpacket: 32 [ 240.490777][ T492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.578004][ T492] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 240.702549][ T492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.724729][ T492] usb 2-1: config 0 descriptor?? [ 241.214673][ T4183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1028'. [ 241.429044][ T4189] loop1: detected capacity change from 0 to 1024 [ 241.671383][ T4189] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.000672][ T492] wacom 0003:056A:00E3.000E: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.1-1/input0 [ 243.653070][ T492] usb 2-1: USB disconnect, device number 25 [ 243.665332][ T292] EXT4-fs (loop1): unmounting filesystem. [ 243.927316][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 243.939096][ T4233] FAULT_INJECTION: forcing a failure. [ 243.939096][ T4233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.952409][ T4233] CPU: 1 PID: 4233 Comm: syz.1.1040 Not tainted 6.1.118-syzkaller-00025-gef4fb40b87a9 #0 [ 243.962172][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 243.972057][ T4233] Call Trace: [ 243.975345][ T4233] [ 243.978402][ T4233] dump_stack_lvl+0x151/0x1b7 [ 243.983020][ T4233] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 243.988465][ T4233] ? info_print_prefix+0x200/0x300 [ 243.993971][ T4233] dump_stack+0x15/0x18 [ 243.997949][ T4233] should_fail_ex+0x3d0/0x520 [ 244.002616][ T4233] should_fail+0xb/0x10 [ 244.006737][ T4233] should_fail_usercopy+0x1a/0x20 [ 244.011775][ T4233] strncpy_from_user+0x24/0x2b0 [ 244.016398][ T4233] ? cpudl_cleanup+0x40/0x40 [ 244.020930][ T4233] strncpy_from_user_nofault+0x73/0x150 [ 244.026294][ T4233] bpf_probe_read_user_str+0x2a/0x70 [ 244.031424][ T4233] bpf_prog_bc7c5c6b9645592f+0x35/0x37 [ 244.036719][ T4233] bpf_trace_run4+0x18d/0x2f0 [ 244.041233][ T4233] ? bpf_trace_run3+0x2e0/0x2e0 [ 244.045931][ T4233] ? __this_cpu_preempt_check+0x13/0x20 [ 244.051852][ T4233] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 244.058559][ T4233] ? probe_sched_switch+0x60/0x80 [ 244.063357][ T4233] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 244.069627][ T4233] __bpf_trace_sched_switch+0xe/0x10 [ 244.074739][ T4233] __traceiter_sched_switch+0x91/0xc0 [ 244.080175][ T4233] __schedule+0x1313/0x1560 [ 244.084521][ T4233] ? __sched_text_start+0x8/0x8 [ 244.089196][ T4233] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 244.095038][ T4233] ? preempt_schedule+0xd9/0xe0 [ 244.099886][ T4233] preempt_schedule_common+0x9b/0xf0 [ 244.105142][ T4233] preempt_schedule+0xd9/0xe0 [ 244.109724][ T4233] ? schedule_preempt_disabled+0x20/0x20 [ 244.115184][ T4233] ? vprintk_emit+0x450/0x450 [ 244.119697][ T4233] ? console_trylock+0x233/0x2e0 [ 244.124557][ T4233] ? resume_console+0x50/0x50 [ 244.129102][ T4233] ? is_bpf_text_address+0x172/0x190 [ 244.134206][ T4233] preempt_schedule_thunk+0x16/0x18 [ 244.139243][ T4233] ? vprintk_emit+0x1ae/0x450 [ 244.143744][ T4233] ? vprintk_emit+0x3e8/0x450 [ 244.148255][ T4233] vprintk_emit+0x3ed/0x450 [ 244.152597][ T4233] ? printk_sprint+0x430/0x430 [ 244.157437][ T4233] ? __kasan_check_write+0x14/0x20 [ 244.162611][ T4233] ? _raw_spin_trylock+0xcd/0x1a0 [ 244.167430][ T4233] vprintk_default+0x26/0x30 [ 244.171851][ T4233] vprintk+0x74/0x80 [ 244.175611][ T4233] _printk+0xd1/0x111 [ 244.179629][ T4233] ? __nla_validate_parse+0x212a/0x2c30 [ 244.185113][ T4233] ? panic+0x667/0x667 [ 244.189115][ T4233] ? rtnl_newlink+0xe6/0x2030 [ 244.194000][ T4233] __nla_validate_parse+0x2307/0x2c30 [ 244.200138][ T4233] ? ____sys_sendmsg+0x5d3/0x9a0 [ 244.206142][ T4233] ? __sys_sendmsg+0x2a9/0x390 [ 244.213388][ T4233] ? __x64_sys_sendmsg+0x7f/0x90 [ 244.218638][ T4233] ? __nla_validate+0x50/0x50 [ 244.223864][ T4233] __nla_parse+0x43/0x60 [ 244.227945][ T4233] rtnl_newlink+0x2d9/0x2030 [ 244.232683][ T4233] ? memcpy+0x56/0x70 [ 244.236734][ T4233] ? avc_denied+0x1b0/0x1b0 [ 244.240993][ T4233] ? rtnl_setlink+0x560/0x560 [ 244.245677][ T4233] ? selinux_capable+0x2f1/0x430 [ 244.250475][ T4233] ? selinux_capset+0xf0/0xf0 [ 244.255512][ T4233] ? __kasan_check_write+0x14/0x20 [ 244.261821][ T4233] ? bit_wait_io_timeout+0x120/0x120 [ 244.267348][ T4233] ? ns_capable+0x89/0xe0 [ 244.271498][ T4233] ? netlink_net_capable+0x125/0x160 [ 244.277532][ T4233] ? rtnl_setlink+0x560/0x560 [ 244.282786][ T4233] rtnetlink_rcv_msg+0x9a5/0xca0 [ 244.288154][ T4233] ? 0xffffffffa0000954 [ 244.292140][ T4233] ? rtnetlink_bind+0x80/0x80 [ 244.296826][ T4233] ? kernel_text_address+0xa9/0xe0 [ 244.301905][ T4233] ? __kernel_text_address+0xd/0x40 [ 244.306979][ T4233] ? unwind_get_return_address+0x4d/0x90 [ 244.312390][ T4233] ? arch_stack_walk+0xf3/0x140 [ 244.317487][ T4233] ? avc_has_perm_noaudit+0x348/0x430 [ 244.322697][ T4233] ? memcpy+0x56/0x70 [ 244.326753][ T4233] ? avc_has_perm_noaudit+0x2dd/0x430 [ 244.332082][ T4233] ? avc_denied+0x1b0/0x1b0 [ 244.336829][ T4233] ? avc_has_perm+0x16f/0x260 [ 244.342097][ T4233] ? __alloc_skb+0x125/0x2d0 [ 244.347109][ T4233] ? netlink_sendmsg+0x7a6/0xd30 [ 244.351984][ T4233] ? avc_has_perm_noaudit+0x430/0x430 [ 244.357425][ T4233] netlink_rcv_skb+0x1cd/0x410 [ 244.362464][ T4233] ? rtnetlink_bind+0x80/0x80 [ 244.366964][ T4233] ? netlink_ack+0x12a0/0x12a0 [ 244.371724][ T4233] ? __netlink_lookup+0x37b/0x3a0 [ 244.376504][ T4233] rtnetlink_rcv+0x1c/0x20 [ 244.380748][ T4233] netlink_unicast+0x906/0xab0 [ 244.385579][ T4233] ? netlink_detachskb+0x90/0x90 [ 244.390565][ T4233] ? security_netlink_send+0x7b/0xa0 [ 244.396871][ T4233] netlink_sendmsg+0xa15/0xd30 [ 244.402024][ T4233] ? netlink_getsockopt+0x540/0x540 [ 244.415775][ T4233] ? security_socket_sendmsg+0x82/0xb0 [ 244.422563][ T4233] ? netlink_getsockopt+0x540/0x540 [ 244.429012][ T4233] ____sys_sendmsg+0x5d3/0x9a0 [ 244.435398][ T4233] ? __sys_sendmsg_sock+0x40/0x40 [ 244.440474][ T4233] __sys_sendmsg+0x2a9/0x390 [ 244.445366][ T4233] ? ____sys_sendmsg+0x9a0/0x9a0 [ 244.453426][ T4233] ? __kasan_check_write+0x14/0x20 [ 244.458751][ T4233] ? mutex_unlock+0xb2/0x260 [ 244.463184][ T4233] ? __kasan_check_write+0x14/0x20 [ 244.468460][ T4233] ? __ia32_sys_read+0x90/0x90 [ 244.473433][ T4233] ? debug_smp_processor_id+0x17/0x20 [ 244.478898][ T4233] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 244.485079][ T4233] __x64_sys_sendmsg+0x7f/0x90 [ 244.490971][ T4233] x64_sys_call+0x16a/0x9a0 [ 244.495986][ T4233] do_syscall_64+0x3b/0xb0 [ 244.500448][ T4233] ? clear_bhb_loop+0x55/0xb0 [ 244.504936][ T4233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.511586][ T4233] RIP: 0033:0x7f99bc18cd29 [ 244.516055][ T4233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.536405][ T4233] RSP: 002b:00007f99bd002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.545000][ T4233] RAX: ffffffffffffffda RBX: 00007f99bc3a5fa0 RCX: 00007f99bc18cd29 [ 244.552811][ T4233] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 244.560621][ T4233] RBP: 00007f99bd002090 R08: 0000000000000000 R09: 0000000000000000 [ 244.568593][ T4233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.576560][ T4233] R13: 0000000000000000 R14: 00007f99bc3a5fa0 R15: 00007fffc27fd428 [ 244.584521][ T4233] [ 244.654558][ T28] audit: type=1400 audit(1737970172.851:520): avc: denied { sys_module } for pid=4237 comm="syz.1.1043" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 245.221457][ T494] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 245.488748][ T494] usb 8-1: Using ep0 maxpacket: 8 [ 245.500500][ T494] usb 8-1: config 252 has an invalid interface number: 112 but max is 0 [ 245.522409][ T494] usb 8-1: config 252 has no interface number 0 [ 245.541485][ T494] usb 8-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=21.79 [ 245.562217][ T494] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.583582][ T494] usb 8-1: Product: syz [ 245.589227][ T494] usb 8-1: Manufacturer: syz [ 245.603410][ T494] usb 8-1: SerialNumber: syz [ 246.518953][ T494] hub 8-1:252.112: bad descriptor, ignoring hub [ 246.532032][ T494] hub: probe of 8-1:252.112 failed with error -5 [ 246.549840][ T494] r8152-cfgselector 8-1: Unknown version 0x0000 [ 246.581339][ T494] r8152-cfgselector 8-1: Unknown version 0x0000 [ 249.375259][ T4288] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 249.602829][ T494] r8152-cfgselector 8-1: USB disconnect, device number 14 [ 251.755843][ T4345] bridge0: port 3(vlan0) entered blocking state [ 251.762155][ T4345] bridge0: port 3(vlan0) entered disabled state [ 251.769199][ T4345] device vlan0 entered promiscuous mode [ 251.775201][ T4345] bridge0: port 3(vlan0) entered blocking state [ 251.781278][ T4345] bridge0: port 3(vlan0) entered forwarding state [ 251.787889][ T4345] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 251.803745][ T4345] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 251.822362][ T28] audit: type=1400 audit(1737970180.021:521): avc: denied { bind } for pid=4344 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.842886][ T4345] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 251.858799][ T4351] fuse: Unknown parameter '0xffffffffffffffff1844674407370955161500000000000000000000' [ 251.934568][ T4345] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 252.018214][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1068'. [ 252.470490][ T28] audit: type=1326 audit(1737970180.661:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 252.504506][ T28] audit: type=1326 audit(1737970180.661:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 252.528610][ T4368] fuse: Bad value for 'fd' [ 252.615201][ T28] audit: type=1326 audit(1737970180.661:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 252.640533][ T28] audit: type=1326 audit(1737970180.661:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 252.672509][ T28] audit: type=1326 audit(1737970180.661:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 252.772547][ T28] audit: type=1326 audit(1737970180.661:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 252.808428][ T28] audit: type=1326 audit(1737970180.661:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 252.873935][ T4386] loop7: detected capacity change from 0 to 256 [ 252.966895][ T4386] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 253.017936][ T28] audit: type=1326 audit(1737970180.661:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 253.058259][ T28] audit: type=1326 audit(1737970180.661:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99bc18cd29 code=0x7ffc0000 [ 253.560964][ T4400] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1078'. [ 254.623068][ T492] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 254.753387][ T4411] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 254.936884][ T492] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 254.963742][ T492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.978542][ T492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.990962][ T492] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 255.040941][ T492] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 255.086803][ T492] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 255.127629][ T492] usb 2-1: Manufacturer: syz [ 255.206916][ T492] usb 2-1: config 0 descriptor?? [ 255.705711][ T4415] loop7: detected capacity change from 0 to 40427 [ 255.725104][ T4415] F2FS-fs (loop7): Unrecognized mount option "nocheckposnt_merge" or missing value [ 255.741732][ T492] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 255.755240][ T492] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 255.776940][ T492] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 255.950586][ T4406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.959290][ T4406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.043601][ T492] usb 2-1: USB disconnect, device number 26 [ 256.958218][ T4436] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 258.938189][ T4453] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 259.195480][ T4462] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1097'. [ 259.577714][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.596642][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.611833][ T4465] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.398554][ T4476] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1102'. [ 260.967498][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 260.967561][ T28] audit: type=1400 audit(1737970444.681:552): avc: denied { getopt } for pid=4470 comm="syz.6.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.997818][ T28] audit: type=1326 audit(1737970444.721:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 261.051781][ T28] audit: type=1326 audit(1737970444.731:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 261.678173][ T492] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 261.720774][ T28] audit: type=1326 audit(1737970444.741:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 261.778158][ T28] audit: type=1326 audit(1737970444.741:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 261.825155][ T28] audit: type=1326 audit(1737970444.751:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 261.897096][ T28] audit: type=1326 audit(1737970444.761:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 261.954374][ T28] audit: type=1326 audit(1737970444.761:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 262.015778][ T28] audit: type=1326 audit(1737970444.761:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 262.139294][ T28] audit: type=1326 audit(1737970444.781:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.6.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d1518cd29 code=0x7ffc0000 [ 262.460813][ T4496] loop1: detected capacity change from 0 to 512 [ 262.577614][ T492] usb 2-1: device not accepting address 27, error -71 [ 262.601699][ T4496] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1108: casefold flag without casefold feature [ 262.628730][ T4496] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1108: couldn't read orphan inode 15 (err -117) [ 262.661277][ T4496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 263.610199][ T4506] overlayfs: failed to resolve './file1': -2 [ 263.858794][ T292] EXT4-fs (loop1): unmounting filesystem. [ 263.865259][ T4515] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1110'. [ 264.169623][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.185517][ T4535] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 264.733640][ T4541] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1121'. [ 264.928154][ T4541] device gretap0 entered promiscuous mode [ 266.149719][ T4562] loop1: detected capacity change from 0 to 2048 [ 266.212513][ T4565] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 266.235478][ T4562] Alternate GPT is invalid, using primary GPT. [ 266.241639][ T4562] loop1: p1 p2 p3 [ 266.438548][ T4566] loop7: detected capacity change from 0 to 1024 [ 266.447527][ T4566] EXT4-fs: Ignoring removed nobh option [ 266.452223][ T102] Alternate GPT is invalid, using primary GPT. [ 266.462893][ T102] loop1: p1 p2 p3 [ 266.490565][ T4566] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 266.548959][ T4566] EXT4-fs (loop7): shut down requested (2) [ 266.584633][ T4566] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 266.599154][ T4566] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 266.608604][ T4566] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 266.673388][ T4583] xt_CONNSECMARK: invalid mode: 0 [ 266.679626][ T4583] device wg2 entered promiscuous mode [ 267.633384][ T4585] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 267.676461][ T359] udevd[359]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 267.694097][ T358] udevd[358]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 267.717773][ T357] udevd[357]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 267.826266][ T2222] EXT4-fs (loop7): unmounting filesystem. [ 268.779680][ T4601] loop1: detected capacity change from 0 to 512 [ 268.792118][ T4601] ext4: Bad value for 'journal_ioprio' [ 268.817860][ T4605] loop7: detected capacity change from 0 to 256 [ 268.825447][ T357] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.830594][ T4607] 9pnet_fd: Insufficient options for proto=fd [ 268.941341][ T4605] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 269.016299][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 269.198872][ T4614] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1141'. [ 269.325206][ T4572] syz.3.1132 (4572) used greatest stack depth: 18936 bytes left [ 271.891225][ T4630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.206073][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 272.206092][ T28] audit: type=1326 audit(1737970456.401:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.6.1148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1518cd29 code=0x0 [ 273.683062][ T4660] loop1: detected capacity change from 0 to 512 [ 273.697116][ T4660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 273.707189][ T4660] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 83886084)! [ 273.717878][ T4660] EXT4-fs (loop1): group descriptors corrupted! [ 273.732480][ T4642] overlayfs: failed to clone upperpath [ 273.861623][ T4665] loop1: detected capacity change from 0 to 512 [ 273.904971][ T357] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.366283][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 274.432447][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.588240][ T4673] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 276.725641][ T4698] 9pnet_fd: Insufficient options for proto=fd [ 276.878704][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1172'. [ 278.024361][ T4336] Bluetooth: hci0: Frame reassembly failed (-84) [ 278.031054][ T4336] Bluetooth: hci0: Frame reassembly failed (-84) [ 278.443767][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 280.300546][ T3750] Bluetooth: hci0: command 0x1003 tx timeout [ 280.324486][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.331718][ T4734] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 280.437204][ T4792] loop7: detected capacity change from 0 to 256 [ 280.504561][ T4792] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 280.551668][ T4797] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 280.782120][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1205'. [ 280.864354][ T4348] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 281.066565][ T4348] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 281.087528][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.120275][ T4348] ums-cypress 2-1:1.0: USB Mass Storage device detected [ 281.322852][ T4802] netlink: 'syz.1.1202': attribute type 15 has an invalid length. [ 281.331930][ T4348] ================================================================== [ 281.339852][ T4348] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480 [ 281.344685][ T4797] overlayfs: missing 'lowerdir' [ 281.346828][ T4348] Write of size 8 at addr ffff88811cf9ca00 by task kworker/0:8/4348 [ 281.359270][ T4348] [ 281.361449][ T4348] CPU: 0 PID: 4348 Comm: kworker/0:8 Not tainted 6.1.118-syzkaller-00025-gef4fb40b87a9 #0 [ 281.371159][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 281.381064][ T4348] Workqueue: usb_hub_wq hub_event [ 281.385920][ T4348] Call Trace: [ 281.389128][ T4348] [ 281.391943][ T4348] dump_stack_lvl+0x151/0x1b7 [ 281.396436][ T4348] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 281.401727][ T4348] ? _printk+0xd1/0x111 [ 281.405923][ T4348] ? __virt_addr_valid+0x242/0x2f0 [ 281.411010][ T4348] print_report+0x158/0x4e0 [ 281.415659][ T4348] ? __virt_addr_valid+0x242/0x2f0 [ 281.420747][ T4348] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 281.426817][ T4348] ? enqueue_timer+0xa6/0x480 [ 281.431320][ T4348] kasan_report+0x13c/0x170 [ 281.435657][ T4348] ? enqueue_timer+0xa6/0x480 [ 281.440172][ T4348] __asan_report_store8_noabort+0x17/0x20 [ 281.445718][ T4348] enqueue_timer+0xa6/0x480 [ 281.450064][ T4348] __mod_timer+0x8d3/0xcf0 [ 281.454325][ T4348] ? mod_timer_pending+0x30/0x30 [ 281.459084][ T4348] ? __tasklet_schedule+0x20/0x20 [ 281.463945][ T4348] ? _raw_spin_lock+0xa4/0x1b0 [ 281.468543][ T4348] ? _raw_spin_trylock_bh+0x190/0x190 [ 281.473755][ T4348] schedule_timeout+0x187/0x380 [ 281.478438][ T4348] ? console_conditional_schedule+0x10/0x10 [ 281.484167][ T4348] ? update_process_times+0x1b0/0x1b0 [ 281.489374][ T4348] ? usb_submit_urb+0x131/0x1840 [ 281.494151][ T4348] wait_for_common+0x39a/0x640 [ 281.498838][ T4348] ? wait_for_completion+0x20/0x20 [ 281.503785][ T4348] ? usb_submit_urb+0x118c/0x1840 [ 281.508645][ T4348] wait_for_completion_timeout+0xe/0x10 [ 281.514047][ T4348] usb_start_wait_urb+0x177/0x350 [ 281.518896][ T4348] ? usb_api_blocking_completion+0xb0/0xb0 [ 281.524615][ T4348] ? __kasan_check_write+0x14/0x20 [ 281.529678][ T4348] usb_control_msg+0x2ad/0x4c0 [ 281.534268][ T4348] ? usb_anchor_empty+0x40/0x40 [ 281.539323][ T4348] hub_ext_port_status+0xfe/0x6b0 [ 281.544308][ T4348] hub_event+0x96f/0x4830 [ 281.548460][ T4348] ? strncpy_from_user+0x28e/0x2b0 [ 281.553471][ T4348] ? strncpy_from_user+0x293/0x2b0 [ 281.558351][ T4348] ? __kasan_check_write+0x14/0x20 [ 281.563293][ T4348] ? led_work+0x590/0x590 [ 281.567452][ T4348] ? probe_sched_switch+0x60/0x80 [ 281.572331][ T4348] ? _raw_spin_unlock+0x4c/0x70 [ 281.577012][ T4348] ? finish_task_switch+0x167/0x7b0 [ 281.582062][ T4348] ? __kasan_check_read+0x11/0x20 [ 281.586901][ T4348] ? read_word_at_a_time+0x12/0x20 [ 281.591854][ T4348] ? strscpy+0x9c/0x260 [ 281.595849][ T4348] process_one_work+0x73d/0xcb0 [ 281.600561][ T4348] worker_thread+0xa60/0x1260 [ 281.605061][ T4348] kthread+0x26d/0x300 [ 281.609071][ T4348] ? worker_clr_flags+0x1a0/0x1a0 [ 281.613928][ T4348] ? kthread_blkcg+0xd0/0xd0 [ 281.618348][ T4348] ret_from_fork+0x1f/0x30 [ 281.622624][ T4348] [ 281.625463][ T4348] [ 281.627635][ T4348] Allocated by task 4734: [ 281.631811][ T4348] kasan_set_track+0x4b/0x70 [ 281.636496][ T4348] kasan_save_alloc_info+0x1f/0x30 [ 281.641694][ T4348] __kasan_kmalloc+0x9c/0xb0 [ 281.646525][ T4348] __kmalloc+0xb4/0x1e0 [ 281.650619][ T4348] hci_alloc_dev_priv+0x27/0x1c00 [ 281.655478][ T4348] hci_uart_tty_ioctl+0x401/0xa70 [ 281.660331][ T4348] tty_ioctl+0x903/0xc50 [ 281.664409][ T4348] __se_sys_ioctl+0x114/0x190 [ 281.668934][ T4348] __x64_sys_ioctl+0x7b/0x90 [ 281.673354][ T4348] x64_sys_call+0x98/0x9a0 [ 281.677607][ T4348] do_syscall_64+0x3b/0xb0 [ 281.681875][ T4348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.687584][ T4348] [ 281.689749][ T4348] Freed by task 4734: [ 281.693570][ T4348] kasan_set_track+0x4b/0x70 [ 281.697997][ T4348] kasan_save_free_info+0x2b/0x40 [ 281.702885][ T4348] ____kasan_slab_free+0x131/0x180 [ 281.707804][ T4348] __kasan_slab_free+0x11/0x20 [ 281.712404][ T4348] __kmem_cache_free+0x21d/0x410 [ 281.717199][ T4348] kfree+0x7a/0xf0 [ 281.720757][ T4348] hci_release_dev+0x14d3/0x1640 [ 281.725509][ T4348] bt_host_release+0x83/0xa0 [ 281.730046][ T4348] device_release+0x95/0x1c0 [ 281.736311][ T4348] kobject_put+0x178/0x260 [ 281.740566][ T4348] put_device+0x1f/0x30 [ 281.745148][ T4348] hci_dev_cmd+0x2be/0x9b0 [ 281.750090][ T4348] hci_sock_ioctl+0x415/0x7f0 [ 281.754613][ T4348] sock_do_ioctl+0x152/0x450 [ 281.759177][ T4348] sock_ioctl+0x455/0x740 [ 281.763548][ T4348] __se_sys_ioctl+0x114/0x190 [ 281.768050][ T4348] __x64_sys_ioctl+0x7b/0x90 [ 281.773630][ T4348] x64_sys_call+0x98/0x9a0 [ 281.778046][ T4348] do_syscall_64+0x3b/0xb0 [ 281.782556][ T4348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.788982][ T4348] [ 281.791312][ T4348] Last potentially related work creation: [ 281.796841][ T4348] kasan_save_stack+0x3b/0x60 [ 281.801345][ T4348] __kasan_record_aux_stack+0xb4/0xc0 [ 281.806672][ T4348] kasan_record_aux_stack_noalloc+0xb/0x10 [ 281.812391][ T4348] insert_work+0x56/0x310 [ 281.816584][ T4348] __queue_work+0x9b6/0xd70 [ 281.821156][ T4348] queue_work_on+0x105/0x170 [ 281.825670][ T4348] __hci_cmd_sync_sk+0xc2a/0xf70 [ 281.830669][ T4348] hci_cmd_sync_status+0x52/0x130 [ 281.835600][ T4348] hci_dev_cmd+0x771/0x9b0 [ 281.840193][ T4348] hci_sock_ioctl+0x415/0x7f0 [ 281.844910][ T4348] sock_do_ioctl+0x152/0x450 [ 281.849314][ T4348] sock_ioctl+0x455/0x740 [ 281.853569][ T4348] __se_sys_ioctl+0x114/0x190 [ 281.858176][ T4348] __x64_sys_ioctl+0x7b/0x90 [ 281.862617][ T4348] x64_sys_call+0x98/0x9a0 [ 281.866961][ T4348] do_syscall_64+0x3b/0xb0 [ 281.871213][ T4348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.876912][ T4348] [ 281.879084][ T4348] Second to last potentially related work creation: [ 281.885592][ T4348] kasan_save_stack+0x3b/0x60 [ 281.890236][ T4348] __kasan_record_aux_stack+0xb4/0xc0 [ 281.895437][ T4348] kasan_record_aux_stack_noalloc+0xb/0x10 [ 281.901253][ T4348] insert_work+0x56/0x310 [ 281.905530][ T4348] __queue_work+0x9b6/0xd70 [ 281.910412][ T4348] queue_work_on+0x105/0x170 [ 281.914798][ T4348] hci_cmd_timeout+0x199/0x200 [ 281.919920][ T4348] process_one_work+0x73d/0xcb0 [ 281.924693][ T4348] worker_thread+0xa60/0x1260 [ 281.929238][ T4348] kthread+0x26d/0x300 [ 281.933286][ T4348] ret_from_fork+0x1f/0x30 [ 281.937824][ T4348] [ 281.939974][ T4348] The buggy address belongs to the object at ffff88811cf9c000 [ 281.939974][ T4348] which belongs to the cache kmalloc-8k of size 8192 [ 281.953862][ T4348] The buggy address is located 2560 bytes inside of [ 281.953862][ T4348] 8192-byte region [ffff88811cf9c000, ffff88811cf9e000) [ 281.967308][ T4348] [ 281.969498][ T4348] The buggy address belongs to the physical page: [ 281.975761][ T4348] page:ffffea000473e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11cf98 [ 281.986053][ T4348] head:ffffea000473e600 order:3 compound_mapcount:0 compound_pincount:0 [ 281.994689][ T4348] flags: 0x4000000000010200(slab|head|zone=1) [ 282.000594][ T4348] raw: 4000000000010200 ffffea0004635c00 dead000000000002 ffff888100043500 [ 282.009107][ T4348] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 282.017556][ T4348] page dumped because: kasan: bad access detected [ 282.024174][ T4348] page_owner tracks the page as allocated [ 282.029854][ T4348] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 454, tgid 454 (syz-executor), ts 37596936506, free_ts 37532990110 [ 282.052213][ T4348] post_alloc_hook+0x213/0x220 [ 282.056808][ T4348] prep_new_page+0x1b/0x110 [ 282.061262][ T4348] get_page_from_freelist+0x2f41/0x2fc0 [ 282.066753][ T4348] __alloc_pages+0x234/0x610 [ 282.071265][ T4348] alloc_slab_page+0x6c/0xf0 [ 282.075715][ T4348] new_slab+0x90/0x3e0 [ 282.079709][ T4348] ___slab_alloc+0x6f9/0xb80 [ 282.084136][ T4348] __slab_alloc+0x5d/0xa0 [ 282.088536][ T4348] __kmem_cache_alloc_node+0x207/0x2a0 [ 282.093829][ T4348] __kmalloc_node+0xa3/0x1e0 [ 282.098334][ T4348] kvmalloc_node+0x221/0x640 [ 282.102763][ T4348] pfifo_fast_init+0x110/0x7a0 [ 282.107364][ T4348] qdisc_create_dflt+0x144/0x3e0 [ 282.112517][ T4348] dev_activate+0x2fd/0x1130 [ 282.117611][ T4348] __dev_open+0x3c7/0x4e0 [ 282.121929][ T4348] __dev_change_flags+0x1db/0x6e0 [ 282.126979][ T4348] page last free stack trace: [ 282.131486][ T4348] free_unref_page_prepare+0x83d/0x850 [ 282.136959][ T4348] free_unref_page+0xb2/0x5c0 [ 282.141456][ T4348] __free_pages+0x61/0xf0 [ 282.145739][ T4348] __free_slab+0xce/0x1a0 [ 282.149960][ T4348] __unfreeze_partials+0x165/0x1a0 [ 282.155027][ T4348] put_cpu_partial+0xa9/0x100 [ 282.159729][ T4348] __slab_free+0x1c8/0x280 [ 282.164108][ T4348] ___cache_free+0xc6/0xd0 [ 282.168571][ T4348] qlist_free_all+0xc5/0x140 [ 282.172998][ T4348] kasan_quarantine_reduce+0x15a/0x180 [ 282.178467][ T4348] __kasan_slab_alloc+0x24/0x80 [ 282.183497][ T4348] slab_post_alloc_hook+0x53/0x2c0 [ 282.189053][ T4348] __kmem_cache_alloc_node+0x193/0x2a0 [ 282.194347][ T4348] kmalloc_trace+0x2a/0xa0 [ 282.198600][ T4348] ____ip_mc_inc_group+0x215/0x8d0 [ 282.203637][ T4348] ip_mc_up+0x10f/0x1e0 [ 282.207636][ T4348] [ 282.209796][ T4348] Memory state around the buggy address: [ 282.215278][ T4348] ffff88811cf9c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.223168][ T4348] ffff88811cf9c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.231090][ T4348] >ffff88811cf9ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.238960][ T4348] ^ [ 282.242867][ T4348] ffff88811cf9ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.250769][ T4348] ffff88811cf9cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.258663][ T4348] ================================================================== [ 282.266651][ T4348] Disabling lock debugging due to kernel taint [ 282.291972][ T4348] usb 2-1: USB disconnect, device number 29 [ 282.384400][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 282.395958][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 282.404194][ C0] CPU: 0 PID: 4824 Comm: syz.7.1207 Tainted: G B 6.1.118-syzkaller-00025-gef4fb40b87a9 #0 [ 282.415313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 282.425196][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 282.430315][ C0] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 282.449758][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 282.455743][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888126778000 [ 282.463819][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 282.471891][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 282.479705][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811cf9c9c8 [ 282.487513][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811cf9c9e0 [ 282.495933][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 282.504817][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.511240][ C0] CR2: 0000000000000000 CR3: 000000000700f000 CR4: 00000000003506b0 [ 282.519106][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.526857][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.534674][ C0] Call Trace: [ 282.537791][ C0] [ 282.540483][ C0] ? __die_body+0x62/0xb0 [ 282.544937][ C0] ? die_addr+0x9f/0xd0 [ 282.548900][ C0] ? exc_general_protection+0x317/0x4c0 [ 282.554304][ C0] ? asm_exc_general_protection+0x27/0x30 [ 282.559840][ C0] ? __queue_work+0x28b/0xd70 [ 282.564351][ C0] ? __queue_work+0x4f1/0xd70 [ 282.568863][ C0] ? __queue_work+0x29c/0xd70 [ 282.573379][ C0] delayed_work_timer_fn+0x61/0x80 [ 282.578323][ C0] ? queue_work_node+0x1d0/0x1d0 [ 282.583097][ C0] call_timer_fn+0x3b/0x2d0 [ 282.587525][ C0] ? queue_work_node+0x1d0/0x1d0 [ 282.592304][ C0] __run_timers+0x756/0xa10 [ 282.596641][ C0] ? calc_index+0x270/0x270 [ 282.600981][ C0] ? sched_clock+0x9/0x10 [ 282.605230][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 282.609920][ C0] run_timer_softirq+0x69/0xf0 [ 282.614525][ C0] handle_softirqs+0x1db/0x650 [ 282.619128][ C0] __irq_exit_rcu+0x52/0xf0 [ 282.623456][ C0] irq_exit_rcu+0x9/0x10 [ 282.627598][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 282.633002][ C0] [ 282.635808][ C0] [ 282.638557][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 282.644377][ C0] RIP: 0010:unwind_next_frame+0x3b9/0x700 [ 282.650138][ C0] Code: 48 39 45 98 74 0b 48 8b 7d d0 e8 62 03 00 00 eb 1c 48 8b 5d d0 48 89 d8 48 c1 e8 03 80 3c 10 00 74 08 48 89 df e8 c7 0f 85 00 <48> 8b 03 4c 89 f7 48 89 45 d0 48 89 c6 e8 45 03 00 00 89 c1 b0 01 [ 282.669809][ C0] RSP: 0018:ffffc90000ea7378 EFLAGS: 00000246 [ 282.675683][ C0] RAX: 1ffff920001d4fdf RBX: ffffc90000ea7ef8 RCX: ffffffff879a6000 [ 282.683499][ C0] RDX: dffffc0000000000 RSI: ffffffff851b9b36 RDI: ffffc90000ea7f48 [ 282.691307][ C0] RBP: ffffc90000ea73f0 R08: ffffc90000ea74e8 R09: 000000000000000f [ 282.699114][ C0] R10: ffffc90000ea74f0 R11: dffffc0000000001 R12: 0000000000000000 [ 282.707154][ C0] R13: ffffc90000ea7450 R14: ffffc90000ea7400 R15: 1ffff920001d4e80 [ 282.715169][ C0] ? __init_begin+0x3a000/0x3a000 [ 282.720022][ C0] ? syscall_exit_to_user_mode+0x26/0x130 [ 282.725696][ C0] ? unwind_next_frame+0x3cb/0x700 [ 282.730668][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 282.735513][ C0] arch_stack_walk+0x10d/0x140 [ 282.740187][ C0] ? syscall_exit_to_user_mode+0x26/0x130 [ 282.745741][ C0] stack_trace_save+0x113/0x1c0 [ 282.750429][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 282.755520][ C0] ? __stack_depot_save+0x36/0x480 [ 282.760485][ C0] ? kfree+0x7a/0xf0 [ 282.764181][ C0] ? kfree+0x7a/0xf0 [ 282.767921][ C0] kasan_set_track+0x4b/0x70 [ 282.772350][ C0] ? kasan_set_track+0x4b/0x70 [ 282.776937][ C0] ? kasan_save_free_info+0x2b/0x40 [ 282.782157][ C0] ? ____kasan_slab_free+0x131/0x180 [ 282.787276][ C0] ? __kasan_slab_free+0x11/0x20 [ 282.792136][ C0] ? __kmem_cache_free+0x21d/0x410 [ 282.797083][ C0] ? kfree+0x7a/0xf0 [ 282.800941][ C0] ? kvfree+0x35/0x40 [ 282.804754][ C0] ? put_files_struct+0x2a8/0x320 [ 282.809616][ C0] ? exit_files+0x80/0xa0 [ 282.813779][ C0] ? do_exit+0xb9e/0x2b80 [ 282.817948][ C0] ? do_group_exit+0x21a/0x2d0 [ 282.822684][ C0] ? get_signal+0x169d/0x1820 [ 282.827194][ C0] ? arch_do_signal_or_restart+0xb0/0x16f0 [ 282.832977][ C0] ? exit_to_user_mode_loop+0x74/0xa0 [ 282.838292][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 282.843983][ C0] ? syscall_exit_to_user_mode+0x26/0x130 [ 282.849555][ C0] ? debug_smp_processor_id+0x17/0x20 [ 282.854752][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 282.859869][ C0] kasan_save_free_info+0x2b/0x40 [ 282.864723][ C0] ____kasan_slab_free+0x131/0x180 [ 282.869673][ C0] __kasan_slab_free+0x11/0x20 [ 282.874279][ C0] __kmem_cache_free+0x21d/0x410 [ 282.879041][ C0] ? kvfree+0x35/0x40 [ 282.882868][ C0] ? kvfree+0x35/0x40 [ 282.886728][ C0] kfree+0x7a/0xf0 [ 282.890240][ C0] kvfree+0x35/0x40 [ 282.893886][ C0] put_files_struct+0x2a8/0x320 [ 282.898585][ C0] exit_files+0x80/0xa0 [ 282.902700][ C0] do_exit+0xb9e/0x2b80 [ 282.906687][ C0] ? put_task_struct+0x80/0x80 [ 282.911284][ C0] ? __kasan_check_write+0x14/0x20 [ 282.916220][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 282.921170][ C0] do_group_exit+0x21a/0x2d0 [ 282.925607][ C0] ? __kasan_check_write+0x14/0x20 [ 282.930578][ C0] get_signal+0x169d/0x1820 [ 282.935004][ C0] ? ptrace_notify+0x350/0x350 [ 282.939659][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 282.945085][ C0] ? asm_exc_page_fault+0x27/0x30 [ 282.949942][ C0] ? do_futex+0x55a/0x9a0 [ 282.954106][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 282.959652][ C0] ? get_sigframe_size+0x10/0x10 [ 282.964460][ C0] ? __se_sys_futex+0x35e/0x3c0 [ 282.969112][ C0] ? __x64_sys_openat+0x243/0x290 [ 282.974189][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 282.979215][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 282.985070][ C0] syscall_exit_to_user_mode+0x26/0x130 [ 282.990468][ C0] do_syscall_64+0x47/0xb0 [ 282.994697][ C0] ? clear_bhb_loop+0x55/0xb0 [ 282.999218][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.004940][ C0] RIP: 0033:0x7f497d38cd29 [ 283.009199][ C0] Code: Unable to access opcode bytes at 0x7f497d38ccff. [ 283.016048][ C0] RSP: 002b:00007f497d1ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 283.024328][ C0] RAX: fffffffffffffe00 RBX: 00007f497d5a6088 RCX: 00007f497d38cd29 [ 283.032346][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f497d5a6088 [ 283.040090][ C0] RBP: 00007f497d5a6080 R08: 0000000000000000 R09: 0000000000000000 [ 283.048015][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f497d5a608c [ 283.055825][ C0] R13: 0000000000000000 R14: 00007fff54ec99a0 R15: 00007fff54ec9a88 [ 283.063776][ C0] [ 283.066705][ C0] Modules linked in: [ 283.070447][ C0] ---[ end trace 0000000000000000 ]--- [ 283.075737][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 283.080959][ C0] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 283.100430][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 283.106293][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888126778000 [ 283.114251][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 283.122045][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 283.129851][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811cf9c9c8 [ 283.137816][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811cf9c9e0 [ 283.146037][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 283.154963][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.161500][ C0] CR2: 0000000000000000 CR3: 000000000700f000 CR4: 00000000003506b0 [ 283.169301][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.177112][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.184961][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 283.192228][ C0] Kernel Offset: disabled [ 283.196369][ C0] Rebooting in 86400 seconds..