last executing test programs: 1m5.102649337s ago: executing program 2 (id=224): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)={0x1, 0x0, [{0xeeee8000, 0x7f, &(0x7f00000001c0)=""/127}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xae) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000eb95"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) 1m5.060384749s ago: executing program 2 (id=225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfffffd6f, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@getqdisc={0x24, 0x26, 0x6e4ba27be6fed667, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x2, 0x7}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x400000004000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW(r5, 0x5403, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c0001"], 0x50}}, 0x0) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) syz_clone(0x8000000, &(0x7f0000000680)="98672f24990220e1e6058ae1ffe9534bc0b45ba2e881c509e7fe580cf528cb42293a401c0627935d7a63ac03e6061cf19dcb79a127068ed5809ceb5c71be41d924d48074b2a3ac76258740134dd2956c16eb54b93b3d30dc27364f29a7d295614103bda89c1e5a827a96b11090cdf6d98dd4028dd416ec3a4c9ef9f0ac1ee83bd6d348f6809305ce25f37fd075053d94d449709ccc69107ba69012098ab7b6840168bef0d30973e4045ef2236a935aaf063221286158471129e7b66ecf610f175192de89685abdb3814ff77a", 0xcc, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580)="fdbc423679aa76ed00f129b6dcf9bd70680bd50bcb") sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x15c, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x14}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x20000000}, {0x6, 0x11, 0xfd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x42}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x840}, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r11, 0x1, &(0x7f0000000040)=[0x0]) io_getevents(r11, 0x1, 0x0, 0x0, 0x0) io_submit(r11, 0x5, &(0x7f0000000900)=[0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x9, r7, 0x0, 0x0, 0xffff, 0x0, 0x1}, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x8, r0, 0x0, 0x0, 0x3, 0x0, 0x2}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x29, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100568186ddaf3856ea907f82ca6470229e17cb10c9054b0f0254704d", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m4.800776181s ago: executing program 2 (id=228): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x5, 0x4, 0x2, 0x1, 0x8000, 0xfff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback, 0x7a, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80, 0x7, 0x8001, 0xfc4, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0x7f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, {[@ssrr={0x89, 0x3, 0xcb}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0xb, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1000001, 0x5, 0x5, 0xb, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x8, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0xf, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec19, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0xc7d6, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0x3, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x2d4a, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x4, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffdff, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x1b, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x9, 0x5, 0x7db, 0x5, 0x5, 0x9, 0x1045800, 0x0, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0x9, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x3, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x3, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x100, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8001, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@inlinecrypt}, {@usrquota}, {@test_dummy_encryption_v1}, {@data_err_ignore}, {@dioread_nolock}, {@nobh}, {@nouser_xattr}]}, 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") syz_usb_connect(0x5, 0x85, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x7e, 0xf1, 0x0, 0x20, 0xac8, 0x3410, 0xb6f9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0xfa, 0x24, 0x0, 0x2, [{{0x9, 0x4, 0x8, 0x0, 0x0, 0xe, 0x1, 0x0, 0xfe, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x19f, 0x0, 0x81, 0x49}, {0x6, 0x24, 0x1a, 0x7}, [@mdlm_detail={0x40, 0x24, 0x13, 0x6, "db3c8a79870716130d1b741acb4836b9912babed30d94e13b918f7ebe00f9a60e11fa4f8d4f240f95049a200d58931716e715b0979dc140cd5537f82"}, @acm={0x4, 0x24, 0x2, 0xb}]}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f00000001c0)=@udp6=r1}, 0x20) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x343, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x1a, {0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0x5bc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x73, 0xc0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x430, 0x40, 0x4}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x40, 0xc, 0x5, 0x20, 0x2}, 0x4f, &(0x7f0000000380)=ANY=[@ANYBLOB="050f4f00014a10046158ec6fbff4715a2c3f1110a9e7629b5c9d930ddda8e58ba9060000000000000010ee0f3177c26f701cf3e7c0c1051505a0e2ffd158963296f60000cdf2ce84aa1f2e96"], 0x4, [{0x2a, &(0x7f0000000400)=@string={0x2a, 0x3, "ab5c1eb2b4d7943f931e2bd42ce1fe4e8ec486dc143121179b8bd8b3167ca3df47badae564ff69da"}}, {0x0, 0xfffffffffffffffe}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x424}}, {0x6a, &(0x7f0000000480)=@string={0x6a, 0x3, "5451c8e36a1203e7d165649389e5e2145fcdd6063adabe84328b829540fdec0b59ac7e9b2192e975631beba699a9dad1996f4acc26b30245484072505ec2cc5871c46ace93dd2d7f62c95beeccfca219ecd68bff9e5b008cd8960c340ea8a5529a4d3ac8ecc0efb4"}}]}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1b1, 0x5, 0x7, 0xfffffffffffffffc, 0x0, 0x0}) ptrace$ARCH_SHSTK_LOCK(0x1e, r7, 0x0, 0x5003) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) recvmmsg(r6, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/129, 0x81}], 0x2, &(0x7f0000000780)=""/201, 0xc9}, 0x3}, {{&(0x7f0000000880)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000900)=""/231, 0xe7}], 0x1, &(0x7f0000001f40)=""/249, 0xf9}, 0x7ff}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000002040)=""/149, 0x95}, {&(0x7f0000002100)=""/7, 0x7}, {&(0x7f0000002140)=""/80, 0x50}, {&(0x7f00000021c0)=""/58, 0x3a}], 0x5, &(0x7f0000002280)=""/62, 0x3e}, 0x6}, {{&(0x7f00000022c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002340)=""/231, 0xe7}, {&(0x7f0000002440)=""/137, 0x89}, {&(0x7f0000002500)=""/104, 0x68}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5, &(0x7f0000003680)=""/175, 0xaf}, 0xfffffffc}, {{&(0x7f0000003740)=@isdn, 0x80, &(0x7f0000003a80)=[{&(0x7f00000037c0)=""/148, 0x94}, {&(0x7f0000003880)=""/110, 0x6e}, {&(0x7f0000003900)=""/171, 0xab}, {&(0x7f00000039c0)=""/105, 0x69}, {&(0x7f0000003a40)=""/43, 0x2b}], 0x5, &(0x7f0000003b00)}, 0x8}, {{&(0x7f0000003b40)=@nfc, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003bc0)}, {&(0x7f0000003c00)=""/197, 0xc5}, {&(0x7f0000003d00)=""/235, 0xeb}, {&(0x7f0000003e00)=""/5, 0x5}, {&(0x7f0000003e40)=""/171, 0xab}, {&(0x7f0000003f00)=""/26, 0x1a}], 0x6}, 0x8}], 0x6, 0x12142, 0x0) 1m2.26292331s ago: executing program 2 (id=238): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d5304ba1) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46040700030500000000000000030003"], 0x38) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket(0x41503864490ca358, 0x6, 0x57a5b673) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x18) socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 1m2.04959768s ago: executing program 2 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8bf00000000bfa200000000000007020000f8ffffffb703080008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0xff, r1}, 0x38) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001280)={{r0}, r5, 0x16, @unused=[0x0, 0x9, 0x6, 0xd7], @subvolid=0x3}) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x5f}, 0x1e) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1m2.013286571s ago: executing program 32 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8bf00000000bfa200000000000007020000f8ffffffb703080008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0xff, r1}, 0x38) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001280)={{r0}, r5, 0x16, @unused=[0x0, 0x9, 0x6, 0xd7], @subvolid=0x3}) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x5f}, 0x1e) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 48.521483736s ago: executing program 1 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x8, 0x7ffc1ffb}]}) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 48.419519491s ago: executing program 1 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000107b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x3, @private1}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00483a00fc000000000000000000000000000000ff0200000000000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000013c000000000000002f000400000000000000000000000000bb192e770b13fb86b1764ad16895b5c4f871fcf9a20d07460285b84140d51f55da24cef42e828a7fb26f724cc1ea6cf87c8879b3fb17b73d803690f422beeaf52cb08f0355ce"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = getpid() ptrace$PTRACE_SETSIGMASK(0x420b, r8, 0x8, &(0x7f0000000280)={[0xffffffffffffffff]}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 47.590072307s ago: executing program 3 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000022c0), 0x12) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000002c0)={0x4, r5}) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c1000ffffffa6224e0000", 0x58}], 0x1) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a8f7be6c60e8fc6dd1cd708e7ecda0007bed0000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcdbdf2518000000050006000100000005000500000000000500050000000000050006000100000060000280500003804c000180060002002a000000080001000800000008000100050000000600020028000000050002000000000006000200240000000800010007000000080001006106000008000100060000000400010008000200515c00000800070043090000040002800500060000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x2048085}, 0x801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 47.51523247s ago: executing program 3 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x75, 0x341) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, ']\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65688caea33bf727ea35a339862ed058"}]}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) getpid() (async) syz_open_dev$usbfs(&(0x7f0000000380), 0x75, 0x341) (async) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, 0x0) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) pipe2$9p(&(0x7f00000005c0), 0x0) (async) write$P9_RVERSION(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) dup(r4) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) (async) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, ']\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65688caea33bf727ea35a339862ed058"}]}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async) 47.51202805s ago: executing program 3 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000240)={[{@index_on}, {@uuid_on}, {@uuid_null}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, ']-(*-'}}, {@seclabel}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) 47.51086693s ago: executing program 1 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = io_uring_setup(0x4a86, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x4000, 0x1b}, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x6, 0x11, 0x0, @loopback, @empty}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "560083568d7c99bfb900000000000000000000f13d8d8800", "eb835fb65c8b9ae493d4fb662704b8db08835fefb6a4d7ea9378cfc98b077903"}}}}}}}, 0x72) 47.125750037s ago: executing program 1 (id=337): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in=@empty}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x20000000, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x59, 0x1, {{'wp512\x00'}, 0x88, "bd47604b63ab6f1ee0fab0861fd447149d"}}]}, 0x194}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000eeffb6080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7c97b86ae0077258bddc641b5d200009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc000000000000000000000000fcff007f0000010000006f0000000000000000000000034e2400000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x2, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007910000000000000c300e4ff50000000950074000000000007cd68541c8ecf9531b5304b5cc21956f2bc86279e6ad8df17d9770ecf3cf86fc3e24813c30a62be8343fd64d83b7a67d4fe75024d408c8c6efad5de675dd7c2fd4bc5150ac10908d8ed5d462d8b3d226984e301c5303515a91caae004c5b15d99b0603e513689df039b1b3be2397b3e4ceded9089bc2e15d40b2051974e6b2478ae72cf47bee3a056433e3c9ec50f965cb28a3e9ed5f403cb7753bb80134316c458ef5fc56add28eb81da659d42e1efe216f3f7fe157783ba79e1b2d5f2212e804de42b27f23214bebff612b6287d969b02d2f8c9fa6eb8da5fb47c68478a3972a3760cab8ed724a951c4e98eb2fcf27e92142b602215c964"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f00000001c0)={[0xfffffffffffffffc]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000040)={[{}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='/:&\x00', 0xfffffffffffffffc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x20000000000000e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0) 46.873618028s ago: executing program 4 (id=338): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) prlimit64(r0, 0x8, &(0x7f0000000380)={0x10000, 0x7fffffffffffffff}, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000000008500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) process_vm_readv(r1, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000c00)=""/202, 0xca}, {0x0}], 0x8, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX], 0x5, 0x25d, &(0x7f0000000f40)="$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") 46.454616826s ago: executing program 3 (id=342): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000180)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES32], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_clone(0x40000200, &(0x7f0000000840)="895a7025cd88d75bb86ce56cb062c3cfe408b8103507b662d8c2517889f1ef64f650a856a614234ec92f808f0fb58e708273201ba14d27452dc614dde6ac0f9fd5d1dda0253337b34de0013072ea6936860f28b022085a7062065c4b911376ebb6fc1709e0015f3e1f4603e37334482cc7c89e9c18e19354", 0x78, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000008c0)="362d0305c20eeb4d1ee5dfe8546b2047e1fddb39964fbb2ba7b03dbd09f91e998e0b339c94f0f08b3fe53f5302d6080b447c1d70b05d12fad4beb4837c69c9c6502639875c609ae0010ed0c039cf42de8b91401b17fd6c1bf8206785685a9df00ceda5275084c71d35f011d12b635505259c1ff1") 46.031849134s ago: executing program 4 (id=343): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_iso={0x0, {0x8, 0x1}, 0xb, 0xbea1013276247f94, &(0x7f0000000000)="75cc582f028d48c18c88cf539e264fdba80c91e7eaf5f2301867f85f4537e597d38440e1cd056ab6ade7545c1b7468047684d2dddad5929ff26a62b64a2a8b87b937b45ff129b2be4ad7500c4d413a78ca3242c7ac54927e150821d6143b2ba135beeaf407fc8375a61e", 0x6a, 0xa99, 0x80000000, 0x2d, 0xfffffffe, 0x6, &(0x7f0000000080)="9bf9fdea8b7a7316a25f54d6595f80054f510b6dfd93d5589715e950df90694cce82dabc38cdf9dd848c8ad26b3badbe6b71357bc1a674643de525bcebc3a1d82db97cfa8175d9041bbefe7dad58c91f89299271ee96e76f22f205f2889aab5a97b019827b85aa2a39c333af2f7b45ff63d7f5e63cbe6702281d770c62c4", [{0x5, 0x7, 0xd}, {0x80000001, 0x1, 0x6}, {0x6a78, 0x20000, 0x1ff}, {0x5, 0x9, 0x1}, {0x9, 0xf, 0xdf7d}, {0x80, 0x9, 0x7}, {0x0, 0x1, 0x1ff}, {0x3, 0x0, 0x101}, {0xce, 0xe, 0x4ab5a007}, {0x6, 0x4, 0xf45}, {0x100, 0xdd84, 0x2}, {0x2a, 0xa4, 0x1}, {0x5d, 0x1, 0x1}, {0x6, 0x9}, {0x298, 0x6432, 0x2}, {0x10000, 0x1, 0x800}, {0x0, 0x80, 0xb}, {0x2, 0x6, 0x6}, {0x9, 0x9, 0x8}, {0x6, 0x8000, 0x1ae2cb73}, {0x4, 0x5, 0x9}, {0x5, 0x7, 0xad}, {0x7, 0xc, 0x7f}, {0x3, 0x4, 0xb6}, {0x3ff, 0x6, 0x9}, {0x5, 0x7, 0xd}, {0x9, 0x10, 0x6}, {0xfff, 0x0, 0x5}, {0xfffffffc, 0xe2b6, 0x4}, {0x10, 0x7, 0x3}, {0x100, 0x8, 0x80}, {0x1ff, 0xfffffffa, 0x38}, {0x8, 0x0, 0x42e0}, {0x5, 0x0, 0x2}, {0xf5, 0x8, 0x8}, {0x2, 0x10000, 0x401}, {0xfffffff3, 0x7, 0xf744283}, {0x42, 0x6, 0x9}, {0x7, 0x7, 0x8}, {0xa, 0x80, 0x9}, {0xffffffff, 0x81, 0x24000}, {0xffff, 0xfffffff8, 0xff}, {0x9, 0xa, 0x1ff}, {0xfff, 0x7, 0x52b}, {0x9, 0x1, 0x4}]}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000480)={0x60, 0xb, 0x5, 0x6, 0xce, 0x2, &(0x7f0000000380)="ea4e140c2ef8f4c801b9312564d4d1ed10cf37438731d2becb94a35b4dbe5668bc1a6a34462464a6a26ef5911c3ec118deaa1164f23ece630701856596e69a961e50b3b7292f69e6bea986fb13a4f3eadc633cbe020f63a922d79468f47eb0edbbcbb48677765ce4a349d6c076565467e32ae20cc87296bdad5b47c7532581fd6be23c703cb82a389dd73a49eaea388b0c49b679c710d02eaec951d39214faf0c3d84fd5721acb2ff1c98f552351a57412888449a09dd09940247305572b971bab06e88d073b47d4fc7e68405807"}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000500)) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000540)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0xf2, 0x4, 0x7f, "aa789392974931c1dcdb7982e246fc62", "b616f79051fda5b307fe7bca66587461c34b1ec996fd60ac74616241dddc14a9bcd1234045305da6884b4df267f4c2db98906b8f5328a8dc17b1fe4034dff65a464e125cbc750859c5c50edfebf56fec58257a53e07f6bc7105e6743e5e667316329d513f4472aad754f1e6bbf8215a2936255eee856ccffdb87326195bce94072c198913eade48e48721c1a28435725306c415fcdb936919a223f259aa76ed20edf626222c067541cdf0bc8e1f0e4b3be0bcfe2e915dd7af9c0d58b4d3c5a686c7527bf91a1e8695b4fb6440c921986d13d571dad3dd3e117fd91835d"}, 0xf2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000700)=""/93, 0x5d) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000780)=""/31) write$P9_RLERROR(r0, &(0x7f00000007c0)={0x28, 0x7, 0x2, {0x1f, '/sys/kernel/debug/binder/state\x00'}}, 0x28) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000800), &(0x7f0000000840), 0x2, 0x1) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f0000000880)={r0}) syz_usb_connect(0x2, 0x686, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x19, 0x7a, 0x23, 0x20, 0x1199, 0x6851, 0xddc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x674, 0x2, 0x10, 0x2, 0x40, 0x72, [{{0x9, 0x4, 0x4b, 0x3, 0x6, 0x60, 0xad, 0x69, 0xf, [@generic={0xd8, 0x7, "819c9870f9789ae998a2076b5d2cd760c0b3f75493bd4b5ece85401e18fb2cdb39f429eac7fb256c8e144486c00d1320bb61ee6e50c277dc0d250317bed587623a869457d8bf0763b02adc55621c48d30f95cad34278a7c339c1c013fa0d4aa73ca5ddb2e0e9ca3ebfa3a539a07c979f633c4a0567eddbeb9d33ea8fa67e4d7ff05001f6260934707aecb25d80e91a51e5965a73b49cff8acfe3255ad60aac7e3e9f380f88c21b32ef8776ed10780a99d554e354515ce70b6e74c0c81f73c7e55f3aa8d27d225dbf4a62fc1c3738cf3a87a0a562c640"}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x3, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x13, 0x56}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xf7, 0x8, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x2, 0xf8, 0x8, [@generic={0xe8, 0x4, "ec6c8d46fda43db9c6635ca74b1fe9b4d900494815e532eb6771ebb9bb9945a79ec0f421a8b7f68b1afd3d6ef18dce588732c0bf62e4d4bccfcf7ea9d320236c85c07210294dec208dcfb26419e770888d59f87b3f70cecd0ff0663c5cca7a79838fb8b0a7126414eab3c7f7a02aaa858d3e3ebafaa391906b12ab00018e2fc8226b064425db8ac711e347e6d8fcd2b91c859140c27695e24b59b772c811eaed80b93a4ca997e138fd4c68e54fac3864545c2997e35d62c693670964680202d9aa4e645543bd6d38c23735d79c7b255ef1056c073a132adf0e99000933397484ac4406f7d1ad"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x7}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0xe6, 0x6, 0x82, [@generic={0x24, 0x3, "f29f5ec57e7606f7132cdede0d1dd492307f43e8046a16fa5d6dcbb981cd75048f1d"}, @generic={0x95, 0x23, "89d830e5b1b026a722278b24204a21b369af5a988744dd63dac4a9b5038db43b44a2b3bdf2baa0b9c866a7e16a686a293278de379143f4cdb51812eedd79cdfc0dfaacc2735b7a1812da6ef00c6d4ca6cfe3112adcc87b79a6cc6c0ec89bbad1a613105655161fd8355cf1a86bde27ebcb4a3910eef7371b76bb5ac14f0e704e6b1683c80aa2cc726a0ab2f9fa3b70c1ed22a4"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x9, 0x1, 0xa, [@generic={0xd1, 0x31, "41925b57d21acc65328513d20d42f9858546657acf31ee3ada907605a1b78e42a81217378a80f6277b6746da3ff8639f3e43bee56d3bdd2e6d93af5f3105105bb4b886ca8f416d952cb191ef2b374b747d6ff8018d9f9b88e99c1fcfd5d5236a768a03ca72aa0ed52422fcb2c53fca73ab4f4e937f42faaa2b7430654b6ab47dd49ef7375735b0c3f09ce9f2dac20b4e12c44b5feb33114aff8d6e1e24faaf94e94acb77f4556195faa69e4a2282f9a9d86cdfe3283689421f498a56bb23ba6a01d39f2dfc1b52f06c66298644dda1"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x9b9a8831352add54, 0x3, 0xfe, 0xfe}}]}}, {{0x9, 0x4, 0x3, 0x2, 0xf, 0xff, 0x2, 0x7c, 0x8, [], [{{0x9, 0x5, 0x4, 0x8, 0x10, 0x7, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0xb4, 0x6, [@generic={0xc6, 0x30, "bcf532a1492e97c376f3079792fc80697cbac93141b5d3af201de2c1d55f59ea59b4902c048ea326b185bd120915cc09863a0ed70a533d8320fce4fd1886fca16e2f0d31bb556ac04fc79b6bd1021acc353142dd88659e04d6abd53b0b71569b15a083486456f9e3aac6d70db23089982cc33d7d64ec3d14addd5b24c93a460e6784bc1a9ede08bdd620964c1862d9669b62bd143ed70072afbaceeac68b2841ee1d185a27d96458c0e3506540d6a4358c73ee6fc0f75f285c79a36332f2ed7f7b974e84"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0x9, 0x11, 0x400, 0xd, 0x6, 0x5, [@generic={0x10, 0xf, "bdbb08daac808fb26d2127b7b41b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xb, 0x9, 0x1}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0xc, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9c, 0xfff8}]}}, {{0x9, 0x5, 0xc, 0xf2b28e5959ebdbe0, 0x20, 0x5, 0x6f, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x6, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8b, 0xdfc8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xfc, 0x7f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x81, 0xb8, 0x2b, [@generic={0xec, 0x10, "6b2f7b3b284f3606a1aff906eb4c58a5ac29ca8018a100abcd5c30af6f5108926490055db144833ebbc2eab02261d2a6f77fb08a0cd9951d25cc7c14f155a5ad28786dedcebb2c9efc4cf724372b61603eeb44b2496f568d8e86a294b76d938397d8e580641ebc432f3d533f499c838753dce8b9874597fb191f0597c5a0a79fe59bdd74ca608f248b2938fc3e55801707ed1ccd596c43334828e9bbd4120953052bc4156fec50485b07ab400f4d51740693f5fbf76e369dd0b3fe77f8e5cf0f009bba46e0619109efecb00da09289a8dcd58c73bd89cf3b62cac727777b02c712b6785ae9cef0f45bf8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x10}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7f, 0xf8, 0x6, [@generic={0x1e, 0xa, "adac9756b005088b1fdb30115ccbd66ff5d8ed6bab41599abf41eb96"}, @generic={0x1e, 0x3, "8380e2cb1293302a03c21f4fd3b39d9a4e048daefac15ce0f38d1238"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xf9, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3c}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x80, 0x1, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x81, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xfeff}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x65, 0x6, 0x3, 0x10, 0x7}, 0xd5, &(0x7f0000000fc0)={0x5, 0xf, 0xd5, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5c, "794928a66f26ad77da15fadfdc31b62f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x0, 0x7, 0x40, 0x6}, @generic={0x93, 0x10, 0x1, "b6dcb91fe64571fbde3197fa8455159b48bc4f21a051b051658f2be2120debb647dcf69e00ce220ee790ed09cd38591a8ac98fafbca0431babb0e75b7b10227732d73139eb12efcc36d9928d070bbbaa6d05a41b9af3938eb6b00398739764251e7fed793f3bd18a1c8025d9e704555ea08a128d47d9b68a74baef0932b155fe00ae849ae57e8dcc9ae560ee8d2cb4b2"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x1, 0x0, 0xfff8, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x8, 0xe95}]}, 0x5, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xa0f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x93, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x342}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xd, 0x97}}}}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x300, 0x7f, 0x4, 0x4, 0x8, 0xf9}, 0x8, &(0x7f0000001300)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xd3, &(0x7f0000001380)=@string={0xd3, 0x3, "34f8b885d917b001808b853266376f4d970a9ecb6bf8e87def2b40fc242dc4ca717fd826a0c2d4d64d8c0fec2f64f3bb5aa7598496863bf9a126e2f5703a02fc02ed52901efeb3675115f0783357e123b4a21376c5d0f8af459bed5bc372cf84e291431f4314a90e9efe25da342384ea827963d36c9053f7f80f98350ee568644b898312b6827be197c33e160ae3817f875f87c09dc8b0ab1eaa37e1a9370e477b0492d74da92b0b8b2eb8bbfe88f427007756f0b15047998217aa386c28c4c11bb61a5da12d3674265ca8127040e6b0d9"}}]}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000014c0)={'\x00', 0x0, 0xe7, 0x6, 0x8, 0x2, 0x0}) fcntl$lock(r0, 0x26, &(0x7f0000001540)={0x0, 0x76ad6f7fc851d013, 0x80000001, 0x9, r2}) sendmsg$key(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001580)={0x2, 0x9, 0x9d, 0x6, 0x23, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb2, 0x3, {0x6, 0x2b, 0x7, 0xf, 0x0, 0xb, 0x0, @in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x21}}}, @sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@loopback, 0x15, 0x10, 0x4}, @sadb_x_policy={0x8, 0x12, 0x1, 0x73b607245c877920, 0x0, 0x0, 0x9, {0x6, 0xff, 0x88, 0xa, 0x0, 0xa940, 0x0, @in6=@private0, @in6=@private2}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e21}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_sa={0x2, 0x1, 0x4d5, 0x7, 0x5, 0x27, 0x4, 0x80000000}]}, 0x118}}, 0x10) r3 = accept(r0, &(0x7f0000001740)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000017c0)=0x80) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001800)=[r0, r3, r0, r0, r0], 0x5) syz_usb_connect$cdc_ecm(0x0, 0x5d, &(0x7f0000001840)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x5, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "0355ea"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x4, 0xce}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x2, 0xf3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x33, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x6, 0xd7}}}}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x0, 0x1, 0x80, 0xc, 0x10}, 0x1d, &(0x7f0000001900)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0xe, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x8, 0x6}]}, 0x2, [{0xa6, &(0x7f0000001940)=@string={0xa6, 0x3, "f4723ebf3b04b8e5c879f2efb5633fb83af2b4d31b2bd5fc998df415cc61272bf5fd20afa3efc49ce29432e498bf130e6f1203471b62da3c8a8bd3e3c1746a3f48fb7897d1c3aa24ba9156778bd4b9f2f1eae4e112cc8631f53c9aad2c90b094f2a8410e5112dfe563d735e6c35a4c09ab25c07b5c0d97facc29042e077d859b355ac3a61ec017ecba8991e12e7ca07f64e28db77ef78afb59d2b7887ae57fe3cc2d07a8"}}, {0x5e, &(0x7f0000001a00)=@string={0x5e, 0x3, "48fe998d097f47b71745bf87bb172ca3b6c3a03248dfd1eab91c3ad7b697021005ccca64f0cf936f4eb98522ad9bb54b5115101caea63c23f8f38e7f482df070bd3457c3945f84230da64e66c912de2acf1f949baa81d8f1bf751280"}}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001ac0)={0x3, 'bond0\x00', {0x6}, 0xfffc}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000001b00)=""/4096) syz_usb_connect$cdc_ecm(0x0, 0x6c, &(0x7f0000002b00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x7, 0x635341e49743753e, 0x0, [{{0x9, 0x4, 0x0, 0x7e, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "365ac6"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x4, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0xfff}, @dmm={0x7, 0x24, 0x14, 0xe, 0x40}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x76, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfa, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000002d00)={0xa, &(0x7f0000002b80)={0xa, 0x6, 0x200, 0x5, 0x7, 0x6, 0x40, 0x2}, 0x56, &(0x7f0000002bc0)={0x5, 0xf, 0x56, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x85, 0xd1, 0xc}, @generic={0x3d, 0x10, 0x2, "f3e89cc0f9b4d0d723cf5d5ca286b90040522381435a8ae588d9252b803427c8853f23e02ee98f86b4992b4c5d51b52952859bb155e9544c7ec4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xc, 0xd5, 0x7ff}]}, 0x2, [{0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x180a}}, {0x6e, &(0x7f0000002c80)=@string={0x6e, 0x3, "65ee94b98a7ab169956145badf4ec3edcf54257da81446a7654a55d1311c33f88f0c2a17e90be06bb0c37826249a6278c8bac619cc35b722649a63dd78bd6885ca123b0d0f8ccaf12cc79c6d18ee53be0430d238c2c4051e005ec5ce1f3f7abcdf0fd1af920b26fbcbbd2d31"}}]}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000002d40), &(0x7f0000002d80)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002e80)={'syztnl2\x00', &(0x7f0000002e00)={'syztnl0\x00', r4, 0x29, 0x6, 0xf0, 0x101, 0x24, @local, @empty, 0x20, 0x8000, 0x7f, 0xfff}}) r5 = open_tree(r1, &(0x7f0000002ec0)='./file0\x00', 0xbf2ff7739db69def) pwrite64(r5, &(0x7f0000002f00)="210c338d99b500819ea8bc318babeb0e872f488fb2eba25d5fc7f2a56d3e714757f9ade046fe250269360cff3c3854253efc6406b3de0919037998184a55c7df7f7380dc781cf195d5a3a1769a7361c32beea9c645927bf98a7cc19d0654d18bb94ae39fdf91e8e2a34d4d2e9d59b2d664a4967cee84b936db7a66b3923d5dfd6958bc7877e4f595749ce0aee8660de5d25238b1bfaf8d4676dc79dc0f2cba906b975cca4ef35e210812e274cc30a0e8ca97e248bab6c88a8643cf628a068a4db125a98f1596b571c1b302d00f08120fdf397da8dee4e860a44abc8485ef7bfbc3", 0xe1, 0x5) syz_emit_ethernet(0xd5, &(0x7f0000003000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@snap={0x0, 0xab, '(', "92d82d", 0x200, "a8b09222a871bcc037db81943b2602e3acbf5b573f77628b5eec3a4587d295fc0228d4983f2b74dda19807ce7aeb36310669b2befba34b7f488e734b735c54b6e28fe2139125289166d11401614a2221cbfee70f8f1a9c514c85a1fcdea154089072608d318034ca016c85c8597c2dffde77730a334ed31c27dd89016eaed2030f3b699db9d61d56e7798cef8b4f8b62cfc04fd5a98d2ce1889ee646477ce8aece8d3d3a61e9167a0ee28774651f0bb19d1cd07d62466db5553202"}}}}}, &(0x7f0000003100)={0x0, 0x4, [0x570, 0x518, 0x469, 0x7e9]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000003140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 45.874105631s ago: executing program 5 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c000019a985550000830024001280090001007866726d0000000014000280080001000300000008000200feffffff040003007866726d30000000000000000000001f4f834f42f1f0889300943d7f2b54ae3e001036bf00"], 0x58}}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000280)={0x80}) 45.834129233s ago: executing program 5 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c8, 0x358, 0x0, 0xd0, 0x0, 0x0, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x75953fdcd5f800f2, 0x2, 0x5, 0x6, 0xf570, 0x9682669b92519a4, 0x2000}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast, 0x1f, 0x3c, 0x2}}}, {{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'veth0_to_bond\x00', 'veth0_to_team\x00', {}, {0xff}, 0x5e, 0xc7, 0x6, 0x2a}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0xf, 0x3, 0x9, 0x3ff, 0x9, 0x6, 0xa, 0x3, 0x5, 0x8, 0x2, 0xfffb, 0x1, 0x8, 0xd, 0x3], 0x8}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@frag={{0x30}, {[0xd, 0x6], 0x7, 0x7}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xff000000, 0x0, 0xff000000], 0x4e20, 0x4e22, 0x4e22, 0x4e23, 0x6, 0x7f, 0x9, 0x4, 0xc}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x26, 0x2a, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) 45.6739976s ago: executing program 3 (id=348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0xf0, 0x160, 0x160, 0x0, 0x0, 0x1c0, 0x280, 0x280, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1}, {0x4, 0x6, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000f2ef8a0f73d3a6ef000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x5, &(0x7f0000000bc0)=""/4096) r7 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1d, [{{0x9, 0x4, 0x0, 0xf7, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffed, 0x2a, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x18, &(0x7f0000000300)={0x40, 0xd, 0x7, {0x7, 0x21, "940977459b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x3b26028, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16=r7, @ANYBLOB="1d2b31867102f93b462c78a943748ff55a6d90959ed8817e60eb9b842f1a8f6bbfb3a9e98b3c81332e9c1cb5ebbd1ce86e1b301fb4e4ca2bcada023fd18c625f9732efa11448cf72f2", @ANYRES8=r7, @ANYRES8=r7, @ANYRES16=r7], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101142, 0x56633bd1cf1d94b2) 45.585030994s ago: executing program 5 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x240}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @rand_addr=0x64010102, 0xffffffffffffffff, "421b3016a6a2d464e371679a86b1315ea3682b934c273fce3f14342f44ef879d", 0x8, 0x40, 0x8, 0x8}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0x81, 0x0, 0x1}) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r7, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r6}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r5, 0x0, 0x0, 0xffffffffffffffff}]) 45.000672219s ago: executing program 1 (id=350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf32}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) capget(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000200)={0x800, 0x9, 0x6, 0x3, 0x0, 0x4}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 44.395553526s ago: executing program 1 (id=351): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x67}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2], 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb49, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x6}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000000000017000a00000000000000ff02000000000000000000000000000100"/144], 0x90) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 44.233215532s ago: executing program 5 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x5, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0x19, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x0, 0xd000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x80}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80040023, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1be]}) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000500)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000042004001c00aec8356277818a2bfffe2b8088000800", @ANYRES32=r2, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x5, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0x19, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x0, 0xd000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x80}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80040023, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1be]}) (async) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000500)) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000042004001c00aec8356277818a2bfffe2b8088000800", @ANYRES32=r2, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) (async) 44.125656197s ago: executing program 5 (id=353): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2014c00, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x1, 0x4ec, &(0x7f0000001a00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 43.910341136s ago: executing program 5 (id=356): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001600)={0x14, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001700)={0x1c, &(0x7f0000001740)=ANY=[@ANYBLOB="200b1300000086eea1ba3a6288f5842f1aa8b173d05eacf22f7db172526cbed9079a0a6cde42304c3f3e7f783eb10b0c78da948f8e33bebb8d8e6cf3811b836669361b2924f1f0fda300b8cafd149f8134b83cc4c8c4b91ee2a74850dbb820a37290cdc9e794f7ce02f6ad47fa174301b6f4617c25ae3dfbad5c39f09eafa950e549c88f2d60d8fa6ac3770a08c039870620692cf5ae9a0087625f7e4ee28e3add1dac14605c70f7ac63e945363a0f65cbafbdfc90b71f475012f9173d4fe77553e9bf6fb92d1416959b9fd461e46b960da9cfb5672351bb07d565b335bf07df31d47e907807dc539ac4c2f548425d1568115ad8921ad465faa1769474477b87be4d216f57797b005395faca93401af28b44c81f8df7847962bc6435442b5d8a9b6c18accb886a6ffdeadffba4b0fa85cd14faf15f25ae4f9a85d274aaf934d4"], &(0x7f0000001680)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x10}}) 43.897542147s ago: executing program 0 (id=357): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1010008, &(0x7f0000000180)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d302c636865636b3d7374726963742c757466383d302c756e695f786c6174653d302c726f6469722c636f6465706167653d3836362c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c696f636861727365743d6d616363726f617469616e2c73686f72746e616d653d6d697865642c756e695f786c6174653d302c646973636172642c0075446e262f25fd37e87bbc0d0e6b98643b75cbf0c79e5a1253c8a327b0b715742b9830d9e0056d2527dec0f0053916"], 0x1, 0x369, &(0x7f0000000a80)="$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") (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async) r0 = getpid() (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) bind$vsock_stream(r5, 0x0, 0x0) (async, rerun: 32) r6 = getuid() (rerun: 32) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x6}, [{0x2, 0x4}, {0x2, 0x0, r6}], {}, [{0x8, 0x3}], {0x10, 0x8}, {0x20, 0x3}}, 0x3c, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) (async) listen(r5, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) (async) prlimit64(r0, 0x5, &(0x7f0000000440)={0xfffffffffffffff6, 0xffffffffffffffff}, &(0x7f0000000480)) (async) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) (async, rerun: 64) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") (async, rerun: 64) syz_usb_control_io(r2, &(0x7f0000000900)={0x2c, &(0x7f0000000580)={0x20, 0x22, 0x9, {0x9, 0x24, "344477371c771b"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000840)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x3, 0x7ff}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1927ab25a2664346d5613779e93aa95c"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "cd16c455968d590fa9011dff73f9a425"}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xe, 0x7, "f4d94964", "c5d08bef"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x9, 0x81, 0xcc, 0x3, 0xb}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000940)={0x0, 0x18, 0x25, "0abc34f74191841bf7e3404956e26d63700d662033a7fb16d4544cc201fdffa27c6db4f2cb"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1000, 0x10}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000e80)={0x40, 0xb, 0x2, 'E@'}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "1ba6"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x1600}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0xcc}}) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 43.846582419s ago: executing program 0 (id=358): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESHEX=r0], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 43.071130313s ago: executing program 4 (id=359): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 42.950965618s ago: executing program 0 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x0, 0x3, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0xf, 0x38, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x7, 0xd5, [@multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)={0xf8, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc880}, 0x80c0) set_robust_list(&(0x7f0000000280)={0x0, 0x401}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022dbd7000fbdbdf25010000000800050000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000010) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000240)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 42.792359535s ago: executing program 4 (id=361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c000200080003003688"], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x403c052, r5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', r4, r5, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) writev(r8, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="a4f9c75ce5faec13c7683334664a337a96cb0e15869ff47948e2d3594a99b77ada08c33e25dee70fd4aa06e7663286e33ee5544f8287f4577dab231ca2f9635713b099aed18da796c0c2d2f5c2a13fb24f72ce76f6c3d888d0ff8a67b8355ab3af729ef04c4837ea8dc9d9cf13281d299dc99c28460f7667e6dfcd93f00c43eff02fdb05f72385a74755e3307d03b5e31b52a1ccb5d2bbb9d2f0b0aa7550cadcc26627156f87bb44bf5ff1667183fd654da1e2b35196d1d0651d831e5530e2f0386bc8c63ff1cd71c65d7583eb0228a0b0f4996b15716f0c862617133a64d22606296e7f73b17c319bdb0280bc1f28f00a48d5838acc30182c95d0083c1b1dccd5320c847051fa3d57c75b1b5628248e9834f5283ccb2eb6d013b7e97225a01f82e4c384d33c69d77755b1c340f8da44e87f13a1cb7ef779f68aee5034b7207b675fc76839475d3dc2661bd54cbf57b1535c7e4b7062a315beb469c505882c23adb120810ecc6f895720e498c98adadde8993edba182e68b62498afdee239e22207c3cc5e208a1d519793638d565fcf8f1fdc560909802ee3c8a479dd1c64ca94e36d74ad83ecd32eec2f93fd70d2c789e8aa8a58afcff177434956089fdcf88024edc97158c8d91b313a88e2973b32b65158a2f832b4515c2ba79f5242a3bcc63757e4d86fda87b9fa6179a9b2bed13f6a96d7d9ce87dcf53a08dd646f50d9dedce522de5217af2ae9d3a5c324e1c94ac1863177b824d15705c72a1d31568d8d9f7ea9bf06a8e0c8e0371d35becc2896be68d95d574534be552a5923fde8fac67e42b116b0d6801f7081263f0f9002ade20075eb4aa62386f253609655c4dfcab1bb963465d766a7ef1e9d00f3902c2eebbc6a6210246b76b2b7a2f318104b5e6acd863b98891bb366931f0307406dd0875cbbf4dd6601e813d96d83238bd0fa88aab97ed382ec2b00e7f093f10799c1b1cacce0eb1c69d32782ab27532c0dbea3d7bf5edc2e68ce14d04a889a6276d529f7722a68bf4747181a7999a6d62a35a411a815209d28c6aa5ebf6f8d90d561f0541341f42b67b6c50508dea6608b07a1dbedd04572d3c2e4506ff59445b5a3ecf82a4c4b6f1df0f31bc8f8c153f54ff74dfa20849f31473e5e05da4fbb619cd7262000d60771432a516ac372e12c8b2d966014752a6ef27e8d261b168cf9af53d68b5de9b269496c8114e7e0ec5d65deba477afafe7ba00ca418c3289eae530a144f52e7413477e35db5cf6b05884a7b1409ae38adabe0d1deebb280bc5ec35f94ea4e1b102874625ba65a850f06d3cd0dd0506aa1322859c12e2988aea106b27d61bfa914eed771ad485916b33274d3b9ebb9b7d3a1ebe1710f33c4f0fa97528181c78d34e49d66b4af2cc27c948e98e65592b48600deea7b97cfe976653a020a1aa1955f70f16b243bcbd45825c8cf6501972ec74a43d6690289a16dea63a23c248d9036fa171c3a690fd29cc5da91a6797315148a5f3b8c0e6023f40a46989a363ce4e5eb6ceecda0488dfc81a8e4cc0e8fdb5dc17ba4a3fb1d725420871205602e9c421fa8fb5be1957be05bc68486b4ed7588ed532d024439c9ba271efc1031ff9fdc55716726c15a19a62c4dd1b3d3460bd81a24aef083748b839c36b3447160f36d6c010b2af2e9ab7b82dd1600ab9b249b3fa905888aa5fa87bcf8d432e92af69e38347bba6773ee586962c248a1c7871fbccdf61ebe3be942e21e314e2bfbee135a649394641744105f5564d8cd2a5098f84b2075c7b67d205d1bdb54eb2308b66e24a8480ecb5bba60fde4bb78fe34817a81e96bb83cc37e19e7839c55fca388aa61d6718055a5bf2c9e4b619af0ac09050ef766c2f3624961efc203d0e2225c6b9269a515b5465e39ae5830bf66ca1dac95bb9e3d3de9636e720cf80df2ab43149670bd72917dfd5bc252ffe5b5a17014f3f95b4185db219448bebed2f05c8389d06ee60b058dbefa1e6ce630c68ed11383df6d0101158b330373f1b4a95d7d1b448609c40655a80ec9cd1368f68b525fea8e21461976952ae6a3916e855d8de49c2a1a607b8247fd8ba32bbdd429623e34d8947d80129cbb737711ab9908cb87902babde1941619d6d323aec54a99a042c438f46e4d3a2d3aeea4f26d83a791d5a96d6c04cb584042a19bba545c44adec7f5d6718769fcc1236b467b12031358ec3f21b4def005e2fda16f560dc055648bd2e5b5555690467f2fcd29183580966bb3a683856006c80ad617a68568332b461e01650f2bab983bb872e254b64b0f07b9f76a11861f2c3de70e9f3cc9f596eaff8347140f68610e0e778d75fc9b87313e525b2412a0fc35ef3821e814d6e2c56c7d462f09880582a8931325ac7a3e02417fb58f0d972427cf728190071ee8cfe88117365a862f20cf3d4205489afb4b366fb6b1f9c25bbf7d587ed41e3ae101ae7e543a25a966e99bd51b4da07ee3a56b99ee97364eea8d275a67a76112f02690bf10599cdda840b1b39befc2159b0f574678e260667ff9bf85ea4b736a1212e3217cbad4627ce85d02e69bd40c7f5a725d4a5fefc36f837c0d1e0221cfe14f0aed6d9e21d224144bdd6b44211aba0820470d0965a5f5ab57ecf779a12ddbc6e17b5d00b5cd22a35fb13abf3bd667d38e1cccc0b98c997cf7216126d620dcf86372243d8fa006afda3cfb42c564676d6c8fd8ecc32bf6ac6f9978297ef1aa7e97f145cd6d8490be49c01a543470795c6a82228c7d33366dc36809ed33490fe9a08ebd9ee27c09211fdd752cd32ba5697d5b229533b6588210a4e2e3755d9ee4a687e591d39e1b0a6e4058db67981b5ff7a983d1f92fc7d3cfdc9baa1ec3f2b3026caaf41279425e8edbf3b5248c67763054b57601ab9775641aaa273221f019309d5fef778b5d239b1e1b47d958064c3d53ad0f02c1fe20040ad7000e123157eeffdd6cfc9b36e6a517a626cdb9600cfad8f6af0fbf4f565f282204de2546fd97673bd0ac4954dffa7eb531e2ce88729da1c80294b9e74c5ef5070efa1a9e5daa0fa436cd7abff4c36243744a3f1d0c1a2851143362ada81f303acb9839f04a4311e52f8d199b167988a1adba156d6e152b76b5d4359f66d5e04582976fb6875ddf814e28157eeed0b5bcb0384250c9d10a9043be1ea9e02faf0a3f226a16a4ecb47f21fda4b456f99e2aef8f0c9ecd4701ac0832cfc40a4290286da25a5d87cd3dd88d6a0ea27076e2f248144cd64432c7fba88b469111d1007c0ac41d4c4ff7579b100c30cc66a2a61ff2b23d7d2678e74f59b1d34aca8c19f22972ba69b4ba819dc2b879ab8a052f58877ef1b7acf1dd9703abd7286e310ccf0749cdeff0bc1b32938ca80ff109fb17f41a6924ae340059ac472c430465d4ba38ac04d16b941a6c9c7501a2444f3590db0b696510aaf46f840a2d0e2c01d16475342b8e27e977c672f65786e9757a746be652321091402b4ac572c4e2f3610252db85dc4ee9622c2c72f6d8ef28109f8158ff3344a42aa04adac192761041dc92e1053ab44c05481fe3b4ce842d2ae1dfa389d77324c5a1425de45123f061c7a9d1398b26be8cdf199cc38e0dca5cf45cde1ba6c819efca55c0a06c75d870d02581243676c2f056ee149467a0ef463d4f267986c9ab29eccec654b2ed1b95998540512213ae6e8912e7ccdda90ad4e559c19e0a516e3e6386e2704d7b66a0c9675b71a4ca099cd1b97cee35a73a34b1f383a14410557191443f242d640bb4125a160a72553b93ffd137945fde22811c8390a2411ecf31197f6e6331b65f1635aefd4cb1540078515c2f3103a343a7f8323e94387900e026c62235bdd611a78f52812d4fc987dd20d7941a52bf61b8a2e51163f869f0a174c0e65a3337e42f2f99abe74ced5448516dc58ab655d863c616c20e1144ec9d197b82815cddb467f68a0993d41a9519e53e6be90acaac921f71bf4e9790423542a35f2c3a63fe1fdf8bbc94a2f4a7ab3df26b4f9f4d2b95210867d1fe1781633404fcce84975ff9855fb94d2e737e1a4bda737abbbc8b46752881ef1e69255a66bbe2abc72049234297a41f15c79f36cbdd8594e0b45e58e8ddb421b5e78205355cf00df006a7b63f8600cfe14b67f0819d750b9ad01a1ba6d4878330fb4c8aeda1a4725eebe814aa9f3dfa670ba05d03c1e909ed36d5a7adb490a4e9a321a78bfd3347af44a012af42001e94f4844373b37e2226c7c129ab99bba5cb83d9d17967f3d72ec8841bf14ef9f2df9c746d4de9c298ae726d850a3af310f7e7e1b3dc5b8ac3a6b8374ce8fa3240260acca3000fd3097ad25838c3dcdc4ba4656ab054bab120dc0e3baee4fb078b9d71027e61b59a281b52749da1287affe9472f47e608b3fdb5af9ef828021da2963a1cc97317c9cb42b1b241d928e980b043392f6c99cec49eac2e42e056520d05dcf5f464038f60b9917d3d7020b35ae72fa7699c9c7df21ac9353e8e6a01faa888e7e8e359f157beef4cd50565ff97998c6544cf57f227e8a665a3a0f725a9a6df59c59dc57e822b69c0cd7e6c3d385bc53a03d3f642367553e79f1f0926456ef34ff35108eb68fee979520632e3443efa662587a2d79b96228be373b1a43e0b0717c9b2b10c53b55149a09f81f13b019edd9ddcac4d044efd989323f787b465086033000b9c9e76fa503f8f179e7ac926eaf379323590df8c89d79b450a2c153c328b87f8d503d03dc6de93f65efff59e12873f581fcd500f7194274d1fb7ed3d9f70a5ab837a539e13551eea003ee772c73644f5a916990719b8cbd2bcbdab556d2e5dc882c99f4b3e3dc4afa4e9ad48023897b32fb9c4a7a15cb93cc5565f8ecae56bf7dc1d3f365e5646f64bf00229fc1bfde01885ef1ee8c234bea31e0b07a6a12f32d2ade473eceadc22d64412cc39c081707135a2648d0355228b430ffb0c05e1699b32fad3acc07cc32aec3cf10885505116eb6f969fb8e816f2c48f96eaf7b30cbe626ba04e22b7fb44d5395781f56b67236b3f9d75f44fdd8c5836a1ebd16fc5a63a4b24953647b4ac616796bffc3043533bd3270d0f718f36336f5d6a5ea6e7546c58a0a6257146fad5afef1dbbf38bd003dc6459b82d8de92e9c79fb606101e0be3fcd948bdf1a5e17afcee17bdc307f3a229adafc5f513a3639b425d746280f23f8f14fdd85a81e61231615c1d90ee96ec7cafa2328cc3b326abfb663ee21eb4b0c49354275343caead7ed6b0ee1ff591bcce3e76685498d22a2ef36f33b7ab6b37a150b1fb1e4f63614437134aedf7614a02c6dd412e3fec1108b09dd400e12ac72fa20d24187d7272b75498926f5ba5fc20023b2a7ecdc37514d9ebdf51b8c5cabc7b952ed7ae9c50e4ebba4fa5349718d153ef29eda4ebb4932d2fcad9e94ec4f06ae4607d15d82d70b5cfd7a20c2b8e22c3b43f7e0a0b64a79a00f51bac42155c89033254c3652dc572f2018e82ea9ed48429d7158505dcc7b8c06d0fef85552604f93a1ec8fabd6a07c80cbe063fabc860b88356dec3101ff1f18768cef63482da5a13fdcc035d14a79f098bb8eea072d8db228fc4339d65919dbabe12b9ac8ea99e2987cc20c08d46e5cc0def4b5a8ded5c8f94fc19ec4cff7c6c718a592fd0234d6068938054f1554864ecde4462415a2c94b7dbfab8ce6294dbcdb786bc88308b7ce617dd2423414850f3cab5d2687c5b49e96ecd014d9cb0907e7c8adc4a864931767ecffd6120c7cbf7d797d4b38ea053c1f5a99407961aed1243190b05bc20120021c7a7ee63aea03c1f9bb35", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r8, 0x1, 0x20, &(0x7f0000000140)="b5057018bb0188b4e129ec2ea967e5c2a289098fb9000081c2c1b4d2c25731e57505a78db379a04ad4df1e6ccd06a9bfeb797bf1e8c1457c7c6f033f07c203c800"/77, 0x4d) close_range(r6, 0xffffffffffffffff, 0x0) 42.742953597s ago: executing program 0 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1c9181, 0x162) pwrite64(r2, &(0x7f0000000e00)="be23676ac1be3235139970adf32984257a90e159b4d01ca33ce9d00ca45ce83bfb6eb0b6a6691aa0e1ee816a72e87e3a34d5c5d9910d24c98ecde903e79e1052b25a8aec3b597dca44950179b7194983289362e68a183e483264a0cd824fe6604710d61d84ee3acd09f61476a00996f9f8a9c629acf6", 0x76, 0x8) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r3) r4 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdaf9, 0x0, 0x0, 0x0, 0x80}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000900)='GPL\x00', 0x5, 0x39, &(0x7f0000000980)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r0, r0, r3, r0], &(0x7f0000000d00)=[{0x4, 0x5, 0xc, 0x2}, {0x2, 0x2, 0xf, 0x4}, {0x3, 0x4, 0xa, 0x6}], 0x10, 0x12}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) writev(r9, &(0x7f00000022c0)=[{&(0x7f0000000080)="ccd5750bf35d60c5bcba8bdc380b7cafa9ad76122aec576606649691ee9f", 0x1e}, {&(0x7f00000000c0)="844be0ed2c6c5679896c8b55329d7e238255f9ee75d413fae614ec6061419bbe67232d1504e668d60b7103aec08c6b4f31afa64020a1a865a4650d468c35d67aad9733a57698cd74db030c8cfa2602c497c1d3c9db801cb3dcb2096621f3a4ff64a1460d1d951a325938bf2670c4152023140deca9a942825566aaafbe787d7c2fc8fe22667308220718d1d7250617c3f3b0ca4f9944aabca3f8af4af415329a91a4a24f3d82070831cac69eb08bc77a2b3fd43f64840efd1d387f68ff191a8e44c8617b55d66c10c6db66920a05753d0ec8b6b60735a8ce1cce023508b26720ba01c8ec7ca4bf1ddc16ea8e5d250b7d6edda336ed", 0xf5}, {&(0x7f0000000200)="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", 0x6c2}], 0x3) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) 42.711179268s ago: executing program 0 (id=363): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) utimes(0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r3, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000240)) 42.642298751s ago: executing program 0 (id=364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nombcache}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX=r1, @ANYBLOB="000000000000000000320c6ca400000000000000", @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d5d81b17be9abbfceba868b4b7e0373b297c49457742a23117a99c4cf906e1ae241cd52bfedf3fe24f8897c040f3ba6149b7c20bcf54a6e063ac63240edfa3be3cbd14c3957b4aab4774b4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000e3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000009000000000900000000fa5a33829f52cd825c7997afa73da936e6d01d34bdd22cae4f2953bab2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2d6dfdee81000000000000000000000000010000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000403000000000000000000000000000000000007ff07ff07ff"], 0x48) pwrite64(r0, &(0x7f0000000000)="c0e0", 0x2, 0x8080c61) fallocate(r0, 0x3, 0x80008, 0x8000c60) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@noquota}, {}, {@sysvgroups}, {@journal_async_commit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_continue}, {@noauto_da_alloc}, {@prjquota}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040d804720a01000000000109022400010000c000090400fc01030002000921000000012205000905810308000c0000"], 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4221c1, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "d3672c75"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="001027"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 42.632692612s ago: executing program 4 (id=365): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket(0x41503864490ca358, 0x6, 0xffffffff) sched_setscheduler(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES8, @ANYRESOCT=r2, @ANYBLOB="8d4c569fb48e5e9b959a6a07fe0605156d9cab3e21f661353437fcb628bcf26559d98ea4c5f073a8d71614683d610af4d0fe1f6d4403ce18c5bf93d650db28e1216ff329b4686a17bbaf777b2aa397cbfd5729d798b71a73551eb3492c4d8dc5ef887ead03a1250a1ee7669c7c4d8e486596c8418e66f6d0b47c758d20b254143c147bafc57abbc2579ec74e208b5b6bed66de1b8482c0f271cc5059da966e404d967dafa23646d9"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f0000000000)={0x4, 0x3}, 0x0) r3 = gettid() r4 = gettid() tkill(r3, 0x12) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x20, 0x0) tkill(r4, 0x14) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000000c0)) ioprio_set$pid(0x2, 0x0, 0x6000) 42.145066763s ago: executing program 4 (id=366): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x78, @link='broadcast-link\x00'}}}}, 0x68}}, 0x24008050) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x78, @link='broadcast-link\x00'}}}}, 0x68}}, 0x24008050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r4}, 0x10) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) (async) r5 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r7, &(0x7f0000000b00), 0x91) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r6, 0x0, r5, &(0x7f0000000140)=0x8008, 0x9, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 42.064416586s ago: executing program 3 (id=367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r6, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03"], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r9 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="f69ce9008000000000000000000000ffffff", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28], 0x50) 2.923378124s ago: executing program 33 (id=364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nombcache}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX=r1, @ANYBLOB="000000000000000000320c6ca400000000000000", @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d5d81b17be9abbfceba868b4b7e0373b297c49457742a23117a99c4cf906e1ae241cd52bfedf3fe24f8897c040f3ba6149b7c20bcf54a6e063ac63240edfa3be3cbd14c3957b4aab4774b4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000e3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000009000000000900000000fa5a33829f52cd825c7997afa73da936e6d01d34bdd22cae4f2953bab2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2d6dfdee81000000000000000000000000010000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000403000000000000000000000000000000000007ff07ff07ff"], 0x48) pwrite64(r0, &(0x7f0000000000)="c0e0", 0x2, 0x8080c61) fallocate(r0, 0x3, 0x80008, 0x8000c60) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@noquota}, {}, {@sysvgroups}, {@journal_async_commit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_continue}, {@noauto_da_alloc}, {@prjquota}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040d804720a01000000000109022400010000c000090400fc01030002000921000000012205000905810308000c0000"], 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4221c1, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "d3672c75"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="001027"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.881861695s ago: executing program 34 (id=351): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x67}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2], 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb49, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x6}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000000000017000a00000000000000ff02000000000000000000000000000100"/144], 0x90) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.880878255s ago: executing program 35 (id=356): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001600)={0x14, &(0x7f0000001480)=ANY=[@ANYBLOB="40210101000001053e697198e7f6f06a2490c98aba4d3a5d948df0b9e8042f44a73c6aae3258b2a3b74b2e07835cca9f028b2b59c6136b45bbd1771b72e0f97dd7a8e2d962a024e648bf47c9c238d66e9c835369dd3c57db349750157abe052a1f50f5d17c5ceeb7508ed7feb8a54b857a47e3c3690190ad3c15ec08f7353c6ffb5b18855f229848a0c8a7a3da9d291b65d33c2ae7cf6e5ee6a8cf2c5460f4458f942b3be3958fd50b71b0a4fa4b772bfcce139d171ef14b778d8fe5d6f2ebc2a71cae2ed86f101a0c93c29eedbcf9e1920c14c8be1be2ea60e0f053cc9e98e56c7513564e34595c3b2302006710fd26302c10583c656bbceb0bea982238c3591ef27be24977fa"], &(0x7f00000015c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001700)={0x1c, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000001680)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x10}}) 2.843951787s ago: executing program 36 (id=367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r6, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03"], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r9 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="f69ce9008000000000000000000000ffffff", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28], 0x50) 2.795656939s ago: executing program 37 (id=366): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x78, @link='broadcast-link\x00'}}}}, 0x68}}, 0x24008050) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x78, @link='broadcast-link\x00'}}}}, 0x68}}, 0x24008050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r4}, 0x10) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) (async) r5 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r7, &(0x7f0000000b00), 0x91) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r6, 0x0, r5, &(0x7f0000000140)=0x8008, 0x9, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 835.530584ms ago: executing program 7 (id=369): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="24005d0af1d00000", @ANYRES16=r5, @ANYBLOB="a1ab27bd7000fdffffff32000000080017015700000008000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x486be04c96786eba}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4c891) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390429bd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0198000000000000280012800b00010069703667726500eb170002800400120008000d00050000000800050001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000300)="31144fab", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, r8, 0x1, 0xaa, 0x6, @broadcast}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4845}, 0x0) 730.526449ms ago: executing program 7 (id=373): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)) (async) syz_clone3(&(0x7f0000000080)={0x301054300, &(0x7f0000000000), 0x0, 0x0, {0x14}, 0x0, 0x36, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) 649.533882ms ago: executing program 7 (id=374): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0xfffd, @rand_addr=0x64010100}, 0x10) sendmmsg$inet(r6, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6ea0, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = dup(r7) connect$inet6(r8, &(0x7f0000008900)={0x27, 0x4821, 0x1, @local, 0xa}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r8, 0x4068aea3, &(0x7f0000000580)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) getegid() 545.020197ms ago: executing program 8 (id=370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000001680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfe00, r2, &(0x7f0000000000)="8a", 0x1, 0x9}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 366.751264ms ago: executing program 6 (id=368): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 32) r0 = dup(0xffffffffffffffff) (rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000540)={'\x00', 0x0, 0x8e, 0x8, 0x0, 0x4, 0x7000, 0xa000, '\x00', 0x1}) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be", @ANYRESDEC], 0xfdef) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000007000000080000000800000005", @ANYRES16=0x0], 0x48) (async, rerun: 32) r4 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffa2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x200000000000001a, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff00080005"], 0x44}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) (async, rerun: 32) rt_sigqueueinfo(r4, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) (rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp, 0x1}, 0x20) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='unmap\x00', r10, 0x0, 0x100000000}, 0x18) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff96) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 60.241768ms ago: executing program 8 (id=375): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x20080) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0xfffffffffffffffa, 0x401) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8cc1, 0x0, 0xffffffffffffffff, 0x76f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r1, &(0x7f0000000100)="69697acc038377ed6ec9c5d5469a0aefe612c5b744ab67ad622349c5657ac990da95b7839d3d3e1ce63d6ff956a642b9fe8afb9953144825cc85b1925e4d57f2ec0bd24b13d4f396e0ad83450aaf873d0637619fc29ada44ed6c9b717d689de8312cae90af1b85e4adbdd26f739a52b686f37756156bfdaf113d77b207618b255d46a9cef0a6c0e1587e536f8a9d5d0cc5e32886abd7325433af0d6e4f7943ce6ddd34e1379694497a87174c80309af93a1544908bad5aa1b6ef14dea273c88508c5a8411dd144cfc759c4e485f3e33667dc6e57a57dd799f477a6b7f51c1869", &(0x7f0000000200)=""/4096}, 0x20) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000001240)=[{}, {}], 0x2, 0x7, &(0x7f0000001280)={[0x7f]}, 0x8) clock_gettime(0x0, &(0x7f0000001380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000012c0)={0xd9a9, 0xfb94, 0xcd0b, 0x4, 0x307a, 0x5e9d8ea7, 0x4, 0x1d80}, &(0x7f0000001300)={0x5, 0x7, 0x1, 0x4, 0xa0, 0x9, 0x40, 0xc}, &(0x7f0000001340)={0x6, 0x10001, 0x0, 0x4, 0x2, 0x8, 0x7fffffff, 0xae6}, &(0x7f00000013c0)={r3, r4+60000000}, &(0x7f0000001440)={&(0x7f0000001400)={[0x5]}, 0x8}) bind$inet6(0xffffffffffffffff, &(0x7f0000001480)={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xdb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001700)={r5, &(0x7f0000001540)="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", &(0x7f0000001640)=""/189}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x12, 0x7, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendfile(r0, r1, &(0x7f0000001880)=0x5, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0x8, 0xc, 0x4}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f00000019c0), &(0x7f0000001a00)=0x1c, 0x800) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000001a40)={0x4, 0x9, 0x40, 0x7, 0xe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001ac0)={0x7, &(0x7f0000001a80)=[{0x40, 0x7, 0x1f, 0x7}, {0x64e, 0x5, 0x0, 0x4}, {0x8, 0x80, 0xf, 0x7}, {0x3, 0x7, 0x9, 0x3}, {0x2, 0x8, 0x8b, 0x19880}, {0xb, 0xec, 0x2, 0x7}, {0xc, 0x0, 0x71, 0x2}]}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000001b00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b80)={&(0x7f0000001b40)='btrfs_add_block_group\x00', r5, 0x0, 0x100000001}, 0x18) close_range(0xffffffffffffffff, r8, 0x0) r9 = dup2(r6, r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001bc0)={@initdev, @remote, 0x0}, &(0x7f0000001c00)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000001c80)={'gre0\x00', &(0x7f0000001c40)={'syztnl1\x00', r10, 0x80, 0x20, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x16, 0x18, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@noop, @end]}}}}}) r11 = io_uring_setup(0x517e, &(0x7f0000001cc0)={0x0, 0x869d, 0x20, 0x3, 0x208}) ioctl$int_out(r2, 0x0, &(0x7f0000001d40)) io_uring_register$IORING_REGISTER_PROBE(r11, 0x8, &(0x7f0000001d80)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}]}, 0x4) userfaultfd(0x801) 33.382789ms ago: executing program 8 (id=376): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000200)={@broadcast, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x58, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x75, 0x2b, 0x0, @mcast1, @dev, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}]}]}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000340)="659efcf9f900a9b5d263622a6a16492bec8499f9a77ab2cc8435977c4181eed5b9dfc7dcf17ede1cbffd0cb3c8dd74d019e8fef937f0bd3f5322ec4739f1edbe1ac4d830013e89d41c489bd9b90f55469285541de01b89dc1f", 0x59}, {&(0x7f00000004c0)="bdc3d54811050e66a1fcb1f68b1fab74472d07869c72884787fc70520b8825aca2b377d7cc5d5480ba45eec28e7825c1ab37cd2123dc08ca83d8db310c22492922851da4eb69677e838ed96b67aa7b201858cc5fb9af3308d4dcf3a4eedf3b8305026b5f13f0262d03a59f6b44e998de168b558ed8f1c5adf8063c28997cc3bfab1dc603731da8270f9fe3a1c12b67ed05cb48634ba3a13be9411946c2e1fced2eb5b556199cad0d0c965b5bd2bc24488331ac6a7ad850cf7c25b52e8c1e63dffd66b4b583add80ce810e18fdc9968668bd7d3128ddf73c7846791e66c6a73910287611abbc716ff5ee6a8b2f4f314252979eeb64bdeb50c", 0xf8}, {&(0x7f00000003c0)="60badba0745ebe749eddf2b5868f49730bf614396fd156f65f7341e2ac3b7a6b398a6f396b098cd43f9c01c2da7ea0abcd293129eb8afee1ca93dd822f504a9c8e6afc88540ce37bb81598888a900ec2705f03a7fdfb334046e2a06b113762cae06d4bdc3f0158717171e0351fc1f9f26a5a1006c12c2abd62207acc0ba3f18d9a09b339f59d", 0x86}, {&(0x7f00000002c0)="6396fc20cbf8eb", 0x7}, {&(0x7f00000005c0)="fdf6f954c88ecfe96386eda1682772a58d8e324275959443273060637ac84c6a693ea5bdbe7ea11d79682e503c514d3cc664682f79dcbeaabae76493749551b2096cba2cbadc627a439134360281b301b8014db644a2178346da9ad9e014ebe4f697e54dd503b4b9b1", 0x69}, {&(0x7f00000006c0)="d0fd66a667812b01d2545447d8ae0c6ec858c31d060a8ba8ea612376eb5d014116f7408d917bf1bf2cb03f3b1ed32b", 0x2f}, {&(0x7f0000000740)}, {&(0x7f0000000d80)="ae491a98fe733d4c3bd3ee6e9b68c63474dbb87fbdc520e8c9a422abd9ce8b770f0b6b0a5310fe175d9190f49a", 0x2d}, {&(0x7f0000000e00)="7c1bd1ebe68b410e735ead4cd2666c79b9b071557b598667a3af1f8350b2f28441604cfdf69a8205dcea39237eec50f187c810656e881b628ce8676f2bb302c95c1da3587be93ccc470d2f70160ba09fe23cc5ef8aa77f48be6551fd0175c61125f0a5f823eedde6e4f2b6604240d59c0a799e7d8af65dd65ed10faacc5c715687a136a892dcd19bd0dd66550d3637034040fdb0e23557bdbe998834b2", 0x9d}], 0x9, &(0x7f0000000f80)="22b77bf5a959082343afaa8c49499ec9d5d11fa40b308782030708367f44a657006b10392fe18f1fa1706f762068f6729aff24f3fbcd6888ffdc870d5796d9c3cb80c7eefa5dde15d87d82af4f9a7a1ba456690479361f395f5815ca8ba4bfcfe23511a0e30677d6ed28ada2fd06a9519dbec8d3b8b08ea9174c4cae99252fb4", 0x80, 0x80}, 0x2000c054) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x1) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000feffffffffbf000000bd4786e667d86f1ee0fab0861fd4"], 0x198}}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)={'b', ' *:* ', 'r\x00'}, 0x8) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) 20.658189ms ago: executing program 9 (id=371): getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socket$inet6(0xa, 0x3, 0x3c) r1 = socket$inet6(0xa, 0x80000, 0x8001) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8], 0x248}}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000300)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYRESHEX=r9], 0x0) 0s ago: executing program 2 (id=372): bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @private2}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fdatasync(r0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000000640)=""/111, 0x6f) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 29.571289][ T382] loop4: detected capacity change from 0 to 512 [ 29.592646][ T382] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 29.629771][ T382] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 29.650692][ T20] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 29.663894][ T20] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 29.681671][ T387] fuse: Bad value for 'group_id' [ 29.687445][ T20] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 29.698368][ T387] fuse: Bad value for 'rootmode' [ 29.704256][ T387] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.727494][ T20] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 29.759058][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.849556][ T394] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0014 with DS=0x19 [ 30.121100][ T284] attempt to access beyond end of device [ 30.121100][ T284] loop3: rw=2049, want=45104, limit=40427 [ 30.821951][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 30.854977][ T416] loop3: detected capacity change from 0 to 16 [ 30.882999][ T418] loop2: detected capacity change from 0 to 2048 [ 30.894559][ T420] 9pnet: Insufficient options for proto=fd [ 30.946699][ T418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.960997][ T416] erofs: (device loop3): mounted with root inode @ nid 36. [ 30.970803][ T417] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.974493][ T416] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 30.986432][ T417] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 30.995284][ T416] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 31.007212][ T417] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.007212][ T417] [ 31.016657][ T416] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 31.026369][ T417] EXT4-fs (loop2): Total free blocks count 0 [ 31.042045][ T417] EXT4-fs (loop2): Free/Dirty block details [ 31.048027][ T417] EXT4-fs (loop2): free_blocks=2415919504 [ 31.054984][ T416] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 31.058614][ T417] EXT4-fs (loop2): dirty_blocks=32 [ 31.069615][ T417] EXT4-fs (loop2): Block reservation details [ 31.075762][ T417] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 31.125189][ T436] loop2: detected capacity change from 0 to 256 [ 31.155189][ T436] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.170628][ T344] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.200369][ T436] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 31.210524][ T436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 31.355831][ T448] loop2: detected capacity change from 0 to 512 [ 31.384662][ T448] EXT4-fs (loop2): Ignoring removed nobh option [ 31.391199][ T448] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.404025][ T448] EXT4-fs (loop2): orphan cleanup on readonly fs [ 31.411506][ T448] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 31.411832][ T458] loop3: detected capacity change from 0 to 512 [ 31.425949][ T344] usb 5-1: Using ep0 maxpacket: 32 [ 31.437746][ T448] EXT4-fs (loop2): Remounting filesystem read-only [ 31.444567][ T448] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.27: Failed to acquire dquot type 0 [ 31.452074][ T458] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 31.461205][ T448] EXT4-fs (loop2): Remounting filesystem read-only [ 31.469392][ T458] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.469421][ T448] EXT4-fs (loop2): 1 truncate cleaned up [ 31.476732][ T458] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.483346][ T448] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 31.495571][ T458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.534669][ T448] syz.2.27 (448) used greatest stack depth: 21024 bytes left [ 31.539210][ T458] EXT4-fs (loop3): 1 truncate cleaned up [ 31.548023][ T458] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,discard,usrquota,. Quota mode: writeback. [ 31.580701][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.585190][ T458] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 31.695755][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.705612][ T344] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 31.716358][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.728315][ T344] usb 5-1: config 0 descriptor?? [ 32.059063][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 32.059078][ T30] audit: type=1400 audit(1765334174.951:244): avc: denied { mounton } for pid=475 comm="syz.2.34" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 32.088399][ T476] incfs: mount failed -22 [ 32.094254][ T476] process 'syz.2.34' launched '/proc/sys/fs/binfmt_misc/syz0' with NULL argv: empty string added [ 32.108942][ T478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'. [ 32.175274][ T395] attempt to access beyond end of device [ 32.175274][ T395] loop0: rw=2049, want=40992, limit=40427 [ 32.200781][ T20] usb 1-1: string descriptor 0 read error: -71 [ 32.214430][ T20] usb 1-1: USB disconnect, device number 2 [ 32.246496][ T30] audit: type=1400 audit(1765334175.141:245): avc: denied { write } for pid=486 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.306246][ T30] audit: type=1400 audit(1765334175.141:246): avc: denied { read } for pid=486 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.341388][ T344] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 32.380461][ T30] audit: type=1400 audit(1765334175.271:247): avc: denied { create } for pid=493 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.402501][ T30] audit: type=1400 audit(1765334175.301:248): avc: denied { ioctl } for pid=493 comm="syz.3.40" path="socket:[16569]" dev="sockfs" ino=16569 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.501270][ T424] udevd[424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.529685][ T499] loop3: detected capacity change from 0 to 512 [ 32.539666][ T500] netlink: 'syz.0.39': attribute type 4 has an invalid length. [ 32.551514][ T30] audit: type=1400 audit(1765334175.451:249): avc: denied { create } for pid=498 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.645936][ T289] usb 5-1: USB disconnect, device number 2 [ 32.653837][ T499] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 32.680029][ T30] audit: type=1400 audit(1765334175.571:250): avc: denied { mount } for pid=497 comm="syz.3.42" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.680045][ T499] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.764839][ T504] netlink: 'syz.0.39': attribute type 12 has an invalid length. [ 32.775159][ T504] netlink: 25 bytes leftover after parsing attributes in process `syz.0.39'. [ 32.981396][ T30] audit: type=1400 audit(1765334175.881:251): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.056336][ T30] audit: type=1400 audit(1765334175.951:252): avc: denied { ioctl } for pid=508 comm="syz.1.44" path="socket:[16595]" dev="sockfs" ino=16595 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.110639][ T30] audit: type=1326 audit(1765334176.001:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=510 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 33.194886][ T488] loop2: detected capacity change from 0 to 131072 [ 33.251212][ T488] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 33.259505][ T488] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 33.269157][ T488] F2FS-fs (loop2): invalid crc value [ 33.278205][ T488] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.318069][ T488] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 33.325364][ T488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 33.340890][ T500] syz.0.39 (500) used greatest stack depth: 20864 bytes left [ 33.431526][ T488] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 33.450633][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.505317][ T545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 33.668374][ T548] device syzkaller0 entered promiscuous mode [ 34.005114][ T545] syz.4.52 (545) used greatest stack depth: 20544 bytes left [ 34.534008][ T556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=556 comm=syz.4.55 [ 34.594196][ T558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=558 comm=syz.4.55 [ 34.643044][ T560] loop3: detected capacity change from 0 to 512 [ 34.726683][ T560] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.56: inode has both inline data and extents flags [ 34.790810][ T560] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.56: couldn't read orphan inode 15 (err -117) [ 34.810609][ T20] usb 2-1: device descriptor read/64, error -71 [ 34.827161][ T560] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 34.942703][ T570] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.283835][ T589] loop1: detected capacity change from 0 to 4096 [ 36.346463][ T568] loop0: detected capacity change from 0 to 40427 [ 36.359873][ T589] EXT4-fs (loop1): Ignoring removed bh option [ 36.390946][ T589] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.398424][ T594] loop4: detected capacity change from 0 to 512 [ 36.406176][ T589] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 36.414642][ T589] System zones: 0-5 [ 36.422404][ T596] Zero length message leads to an empty skb [ 36.453447][ T589] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 36.557517][ T594] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.66: inode has both inline data and extents flags [ 36.594985][ T568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.743688][ T594] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.66: couldn't read orphan inode 15 (err -117) [ 36.767877][ T594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.828496][ T619] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.062939][ T568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.161737][ T281] attempt to access beyond end of device [ 37.161737][ T281] loop0: rw=2049, want=45104, limit=40427 [ 37.601891][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 37.601906][ T30] audit: type=1400 audit(1765334180.501:315): avc: denied { connect } for pid=633 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.606470][ T607] loop2: detected capacity change from 0 to 40427 [ 37.634859][ T634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.76'. [ 37.644151][ T607] F2FS-fs (loop2): fault_injection options not supported [ 37.751138][ T607] F2FS-fs (loop2): invalid crc value [ 37.760811][ T607] F2FS-fs (loop2): invalid crc value [ 37.766149][ T607] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 37.799874][ T632] loop1: detected capacity change from 0 to 40427 [ 37.813799][ T641] loop4: detected capacity change from 0 to 512 [ 37.828676][ T632] F2FS-fs (loop1): fault_type options not supported [ 37.839024][ T632] F2FS-fs (loop1): fault_injection options not supported [ 37.856695][ T632] F2FS-fs (loop1): invalid crc value [ 37.864656][ T632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.922158][ T30] audit: type=1400 audit(1765334180.821:316): avc: denied { name_bind } for pid=645 comm="syz.3.79" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.948053][ T632] F2FS-fs (loop1): Start checkpoint disabled! [ 37.953966][ T30] audit: type=1400 audit(1765334180.841:317): avc: denied { node_bind } for pid=645 comm="syz.3.79" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.054729][ T647] loop0: detected capacity change from 0 to 128 [ 38.082269][ T30] audit: type=1400 audit(1765334180.861:318): avc: denied { create } for pid=640 comm="syz.4.78" dev="anon_inodefs" ino=16740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.109042][ T632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 38.316795][ T648] 9pnet: Insufficient options for proto=fd [ 38.371325][ T30] audit: type=1400 audit(1765334180.861:319): avc: denied { ioctl } for pid=640 comm="syz.4.78" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16740 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.907839][ T30] audit: type=1400 audit(1765334181.791:320): avc: denied { setattr } for pid=631 comm="syz.1.75" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.010899][ T10] attempt to access beyond end of device [ 39.010899][ T10] loop1: rw=2049, want=40976, limit=40427 [ 39.100838][ T663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 39.126407][ T30] audit: type=1400 audit(1765334182.021:321): avc: denied { bind } for pid=670 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.185810][ T660] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 39.195231][ T660] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 39.341163][ T30] audit: type=1326 audit(1765334182.241:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 39.379750][ T30] audit: type=1326 audit(1765334182.261:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 39.386007][ T687] loop1: detected capacity change from 0 to 1024 [ 39.403096][ T30] audit: type=1326 audit(1765334182.261:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 39.410621][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.462975][ T687] EXT4-fs (loop1): Ignoring removed bh option [ 39.470650][ T687] EXT4-fs error (device loop1): ext4_quota_enable:6408: comm syz.1.89: inode #2304: comm syz.1.89: iget: illegal inode # [ 39.483650][ T687] EXT4-fs (loop1): Remounting filesystem read-only [ 39.490214][ T687] EXT4-fs error (device loop1): ext4_quota_enable:6411: comm syz.1.89: Bad quota inode: 2304, type: 2 [ 39.501616][ T687] EXT4-fs (loop1): Remounting filesystem read-only [ 39.508249][ T687] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 39.523643][ T687] EXT4-fs (loop1): mount failed [ 39.650599][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.681323][ T693] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 39.767995][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 40.050886][ T26] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.059069][ T26] usb 1-1: config 0 has no interface number 0 [ 40.270681][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.283003][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.291326][ T26] usb 1-1: Product: syz [ 40.295548][ T26] usb 1-1: Manufacturer: syz [ 40.346071][ T26] usb 1-1: SerialNumber: syz [ 40.355879][ T26] usb 1-1: config 0 descriptor?? [ 40.361603][ T20] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 40.373354][ T20] usb 5-1: config 1 interface 0 has no altsetting 0 [ 40.401160][ T26] smsc95xx v2.0.0 [ 40.465351][ T705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 40.484880][ T705] device vlan2 entered promiscuous mode [ 40.490511][ T705] device gretap0 entered promiscuous mode [ 40.520701][ T58] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 40.841506][ T26] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 40.950035][ T26] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 41.000807][ T26] usb 1-1: USB disconnect, device number 3 [ 41.300750][ T58] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 41.312118][ T58] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.328224][ T58] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 41.338417][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.380869][ T701] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 41.415501][ T58] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 41.668450][ T350] usb 3-1: USB disconnect, device number 2 [ 41.750751][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.40 [ 41.759897][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.767962][ T20] usb 5-1: Product: Й [ 41.772649][ T20] usb 5-1: Manufacturer: ࡃ [ 41.777280][ T20] usb 5-1: SerialNumber: 㐉 [ 42.047280][ T728] loop1: detected capacity change from 0 to 128 [ 42.057701][ T689] UDC core: couldn't find an available UDC or it's busy: -16 [ 42.070384][ T689] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.087892][ T689] UDC core: couldn't find an available UDC or it's busy: -16 [ 42.095808][ T689] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.232695][ T6] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 42.244100][ T689] UDC core: couldn't find an available UDC or it's busy: -16 [ 42.251791][ T689] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.269040][ T727] attempt to access beyond end of device [ 42.269040][ T727] loop1: rw=2049, want=250, limit=128 [ 42.327114][ T727] attempt to access beyond end of device [ 42.327114][ T727] loop1: rw=2049, want=162, limit=128 [ 42.338190][ T727] attempt to access beyond end of device [ 42.338190][ T727] loop1: rw=2049, want=250, limit=128 [ 42.385630][ T745] loop2: detected capacity change from 0 to 128 [ 42.417158][ T745] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 42.425407][ T745] FAT-fs (loop2): Filesystem has been set read-only [ 42.436788][ T745] netlink: 'syz.2.102': attribute type 25 has an invalid length. [ 42.444666][ T745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 42.454883][ T745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'. [ 42.464225][ T745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'. [ 42.474717][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.491577][ T282] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 42.560711][ T20] usbhid 5-1:1.0: can't add hid device: -71 [ 42.567542][ T20] usbhid: probe of 5-1:1.0 failed with error -71 [ 42.578944][ T20] usb 5-1: USB disconnect, device number 3 [ 42.600654][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.611205][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.620772][ T342] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.666569][ T751] loop2: detected capacity change from 0 to 40427 [ 42.725857][ T751] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.758859][ T751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.777866][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 42.777881][ T30] audit: type=1400 audit(1765334185.671:365): avc: denied { append } for pid=750 comm="syz.2.105" path="/23/file0/memory.events" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.780713][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.813185][ T751] attempt to access beyond end of device [ 42.813185][ T751] loop2: rw=2049, want=78368, limit=40427 [ 42.816668][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.832713][ T751] attempt to access beyond end of device [ 42.832713][ T751] loop2: rw=2049, want=78368, limit=40427 [ 42.835754][ T350] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 42.854736][ T6] usb 4-1: Product: syz [ 42.858920][ T6] usb 4-1: Manufacturer: syz [ 42.863703][ T6] usb 4-1: SerialNumber: syz [ 42.911507][ T759] attempt to access beyond end of device [ 42.911507][ T759] loop2: rw=2049, want=81920, limit=40427 [ 42.923065][ T342] usb 2-1: device descriptor read/64, error -71 [ 42.943720][ T759] attempt to access beyond end of device [ 42.943720][ T759] loop2: rw=2049, want=53248, limit=40427 [ 42.979756][ T759] attempt to access beyond end of device [ 42.979756][ T759] loop2: rw=2049, want=65952, limit=40427 [ 43.005124][ T282] attempt to access beyond end of device [ 43.005124][ T282] loop2: rw=2049, want=45112, limit=40427 [ 43.110665][ T350] usb 1-1: Invalid ep0 maxpacket: 64 [ 43.160713][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.180703][ T6] usb 4-1: 0:2 : does not exist [ 43.194536][ T30] audit: type=1400 audit(1765334186.091:366): avc: denied { unlink } for pid=761 comm="syz.2.107" name="#1" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.195177][ T763] overlayfs: filesystem on './file0' not supported as upperdir [ 43.242828][ T6] usb 4-1: USB disconnect, device number 2 [ 43.280639][ T350] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 43.320760][ T342] usb 2-1: device descriptor read/64, error -71 [ 43.388816][ T770] loop2: detected capacity change from 0 to 128 [ 43.432634][ T770] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 43.452237][ T423] udevd[423]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.520653][ T350] usb 1-1: Invalid ep0 maxpacket: 64 [ 43.526174][ T350] usb usb1-port1: attempt power cycle [ 43.531714][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.541742][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 43.554995][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 43.564272][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.842542][ T342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.871783][ T20] usb 5-1: config 0 descriptor?? [ 43.956335][ T789] device wireguard0 entered promiscuous mode [ 43.985844][ T30] audit: type=1400 audit(1765334186.881:367): avc: denied { create } for pid=785 comm="syz.2.114" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.006754][ T30] audit: type=1400 audit(1765334186.901:368): avc: denied { mounton } for pid=785 comm="syz.2.114" path="/30/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.007053][ T786] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 44.040534][ T786] FAT-fs (loop5): unable to read boot sector [ 44.138686][ T30] audit: type=1400 audit(1765334187.031:369): avc: denied { unlink } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.162541][ T792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.115'. [ 44.180645][ T342] usb 2-1: device descriptor read/64, error -71 [ 44.235544][ T30] audit: type=1400 audit(1765334187.131:370): avc: denied { mount } for pid=796 comm="syz.2.117" name="/" dev="configfs" ino=14491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.265599][ T350] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 44.283372][ T30] audit: type=1400 audit(1765334187.131:371): avc: denied { search } for pid=796 comm="syz.2.117" name="/" dev="configfs" ino=14491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.332393][ T30] audit: type=1400 audit(1765334187.231:372): avc: denied { read } for pid=800 comm="syz.3.119" name="/" dev="configfs" ino=14491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.375105][ T30] audit: type=1400 audit(1765334187.251:373): avc: denied { open } for pid=800 comm="syz.3.119" path="/" dev="configfs" ino=14491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.399977][ T30] audit: type=1400 audit(1765334187.251:374): avc: denied { ioctl } for pid=800 comm="syz.3.119" path="/" dev="configfs" ino=14491 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.407116][ T758] loop4: detected capacity change from 0 to 128 [ 44.429806][ T350] usb 1-1: Invalid ep0 maxpacket: 64 [ 44.452120][ T758] EXT4-fs warning (device loop4): ext4_fill_super:3971: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 44.465131][ T758] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.477718][ T758] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 44.814596][ T758] UDC core: couldn't find an available UDC or it's busy: -16 [ 44.822107][ T350] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 44.822142][ T758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.829610][ T342] usb 2-1: device descriptor read/64, error -71 [ 44.847492][ T758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 44.891257][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 44.897400][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 44.897511][ T727] attempt to access beyond end of device [ 44.897511][ T727] loop1: rw=2049, want=146, limit=128 [ 44.905070][ T20] usb 5-1: USB disconnect, device number 4 [ 44.920910][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.931229][ T350] usb 1-1: Invalid ep0 maxpacket: 64 [ 44.936659][ T350] usb usb1-port1: unable to enumerate USB device [ 44.960936][ T342] usb usb2-port1: attempt power cycle [ 45.240086][ T822] loop2: detected capacity change from 0 to 512 [ 45.262729][ T822] EXT4-fs warning (device loop2): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 45.267800][ T812] loop1: detected capacity change from 0 to 512 [ 45.278173][ T822] EXT4-fs (loop2): mount failed [ 45.284766][ T6] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 45.298993][ T6] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 45.310155][ T6] usb 4-1: config 1 interface 0 has no altsetting 0 [ 45.421766][ T812] EXT4-fs (loop1): Ignoring removed oldalloc option [ 45.428502][ T812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.445141][ T822] kvm [821]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 45.445168][ T812] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.454487][ T822] kvm [821]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 45.480714][ T6] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 45.491560][ T812] EXT4-fs (loop1): 1 truncate cleaned up [ 45.496658][ T822] APIC base relocation is unsupported by KVM [ 45.497270][ T812] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,oldalloc,block_validity,dioread_lock,. Quota mode: none. [ 45.507556][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.535954][ T6] usb 4-1: Product: syz [ 45.540213][ T6] usb 4-1: Manufacturer: syz [ 45.545136][ T6] usb 4-1: SerialNumber: syz [ 45.570661][ T809] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.577826][ T809] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.585840][ T831] loop0: detected capacity change from 0 to 1024 [ 45.615004][ T831] EXT4-fs (loop0): Ignoring removed nobh option [ 45.621459][ T831] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.642229][ T831] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,grpjquota=,resgid=0x0000000000000000,nojournal_checksum,discard,nobh,inlinecrypt,journal_ioprio=0x0000000000000002,dioread_nolock,,errors=continue. Quota mode: none. [ 45.673329][ T831] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.126: Allocating blocks 385-513 which overlap fs metadata [ 45.707220][ T831] EXT4-fs (loop0): pa ffff888111d50888: logic 16, phys. 129, len 24 [ 45.715430][ T831] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 45.904405][ T848] loop4: detected capacity change from 0 to 1024 [ 46.610189][ T848] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.044224][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 48.044239][ T30] audit: type=1400 audit(1765334190.941:381): avc: denied { listen } for pid=875 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.071954][ T30] audit: type=1400 audit(1765334190.971:382): avc: denied { ioctl } for pid=871 comm="syz.2.137" path="socket:[17116]" dev="sockfs" ino=17116 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.192703][ T30] audit: type=1400 audit(1765334190.971:383): avc: denied { accept } for pid=875 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.213044][ T30] audit: type=1400 audit(1765334191.001:384): avc: denied { mount } for pid=875 comm="syz.4.139" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.235371][ T30] audit: type=1400 audit(1765334191.001:385): avc: denied { ioctl } for pid=871 comm="syz.2.137" path="socket:[17112]" dev="sockfs" ino=17112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.120557][ C0] sched: RT throttling activated [ 49.194117][ T30] audit: type=1326 audit(1765334192.091:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 49.253495][ T30] audit: type=1326 audit(1765334192.091:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 49.312224][ T884] netlink: 'syz.0.140': attribute type 13 has an invalid length. [ 49.340171][ T30] audit: type=1326 audit(1765334192.091:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 49.363510][ T30] audit: type=1326 audit(1765334192.091:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 49.397938][ T30] audit: type=1326 audit(1765334192.091:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 49.457717][ T884] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.465010][ T884] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.471149][ T913] loop2: detected capacity change from 0 to 512 [ 49.483835][ T913] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 49.621710][ T922] capability: warning: `syz.3.149' uses deprecated v2 capabilities in a way that may be insecure [ 50.840745][ T931] loop2: detected capacity change from 0 to 2048 [ 50.858808][ T937] loop3: detected capacity change from 0 to 128 [ 50.881898][ T935] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 50.890030][ T935] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 50.916454][ T931] EXT4-fs (loop2): Ignoring removed nobh option [ 50.984048][ T931] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,,errors=continue. Quota mode: none. [ 50.995489][ T931] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.426233][ T953] loop0: detected capacity change from 0 to 1024 [ 51.470033][ T964] device wg2 entered promiscuous mode [ 51.494426][ T953] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.513056][ T967] loop4: detected capacity change from 0 to 2048 [ 51.513096][ T953] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.542012][ T953] EXT4-fs warning (device loop0): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 51.542086][ T967] EXT4-fs (loop4): can't mount with commit=184467440737095496, fs mounted w/o journal [ 51.566314][ T953] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 51.592908][ T342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 51.598402][ T953] EXT4-fs (loop0): 1 truncate cleaned up [ 51.607314][ T953] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 51.688608][ T967] 9pnet: Insufficient options for proto=fd [ 51.721916][ T979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=979 comm=syz.4.163 [ 51.830709][ T342] usb 3-1: Using ep0 maxpacket: 8 [ 52.803377][ T992] loop1: detected capacity change from 0 to 4096 [ 52.835290][ T992] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.873658][ T992] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,data_err=ignore,debug_want_extra_isize=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 53.010684][ T6] rtl8150 4-1:1.0: couldn't reset the device [ 53.016771][ T6] rtl8150: probe of 4-1:1.0 failed with error -5 [ 53.023315][ T342] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 53.031466][ T342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.044971][ T6] usb 4-1: USB disconnect, device number 3 [ 53.051518][ T342] usb 3-1: config 0 has no interface number 0 [ 53.057610][ T342] usb 3-1: config 0 interface 86 has no altsetting 0 [ 53.220680][ T342] usb 3-1: New USB device found, idVendor=0421, idProduct=0071, bcdDevice=64.77 [ 53.229865][ T342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.237901][ T342] usb 3-1: Product: syz [ 53.242100][ T342] usb 3-1: Manufacturer: syz [ 53.246696][ T342] usb 3-1: SerialNumber: syz [ 53.252038][ T342] usb 3-1: config 0 descriptor?? [ 53.410610][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 53.650608][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 53.810744][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.890694][ T6] usb 4-1: config 14 has too many interfaces: 36, using maximum allowed: 32 [ 53.899422][ T6] usb 4-1: config 14 has an invalid interface number: 156 but max is 35 [ 53.907831][ T6] usb 4-1: config 14 has 1 interface, different from the descriptor's value: 36 [ 53.916899][ T6] usb 4-1: config 14 has no interface number 0 [ 53.923098][ T6] usb 4-1: config 14 interface 156 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 53.934261][ T6] usb 4-1: config 14 interface 156 has no altsetting 0 [ 54.180649][ T6] usb 4-1: language id specifier not provided by device, defaulting to English [ 54.312518][ T1002] loop0: detected capacity change from 0 to 2048 [ 54.331486][ T1004] loop1: detected capacity change from 0 to 16 [ 54.353264][ T1002] EXT4-fs (loop0): Unrecognized mount option "hash" or missing value [ 54.376460][ T1004] erofs: (device loop1): mounted with root inode @ nid 36. [ 54.447142][ T1004] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 54.500691][ T6] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 54.513033][ T6] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 54.527704][ T6] usb 4-1: Product: syz [ 54.556540][ T1011] loop1: detected capacity change from 0 to 512 [ 54.562976][ T6] usb 4-1: SerialNumber: syz [ 54.611736][ T1011] EXT4-fs (loop1): dax option not supported [ 54.641988][ T1013] tipc: Started in network mode [ 54.654565][ T1013] tipc: Node identity , cluster identity 4711 [ 54.670941][ T1013] tipc: Failed to set node id, please configure manually [ 54.679316][ T1013] tipc: Enabling of bearer rejected, failed to enable media [ 54.702031][ T342] rndis_host 3-1:0.86: skipping garbage [ 54.707665][ T342] usb 3-1: bad CDC descriptors [ 54.723951][ T342] cdc_acm 3-1:0.86: skipping garbage [ 54.730304][ T342] usb 3-1: USB disconnect, device number 3 [ 54.765965][ T1011] syz.1.172 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.835144][ T985] UDC core: couldn't find an available UDC or it's busy: -16 [ 54.842718][ T985] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.090481][ T1032] syz.1.172[1032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.090986][ T1032] syz.1.172[1032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.115411][ T1032] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 55.161649][ T6] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.156/input/input6 [ 55.177121][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 55.177170][ T30] audit: type=1400 audit(1765334198.071:412): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=718 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.182757][ T6] usb 4-1: USB disconnect, device number 4 [ 55.184396][ T30] audit: type=1400 audit(1765334198.071:413): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=718 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.205636][ C1] usb_acecad 4-1:14.156: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 55.257806][ T30] audit: type=1400 audit(1765334198.081:414): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=718 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.400606][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.562055][ T30] audit: type=1326 audit(1765334198.461:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 55.594252][ T1036] loop0: detected capacity change from 0 to 16 [ 55.640625][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 55.671179][ T30] audit: type=1326 audit(1765334198.481:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 55.672423][ T1036] erofs: (device loop0): mounted with root inode @ nid 36. [ 55.711521][ T30] audit: type=1326 audit(1765334198.481:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 55.755063][ T30] audit: type=1326 audit(1765334198.481:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 55.780684][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.794993][ T1034] loop3: detected capacity change from 0 to 40427 [ 55.800631][ T39] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 55.801551][ T30] audit: type=1326 audit(1765334198.481:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 55.810389][ T39] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 55.836356][ T30] audit: type=1326 audit(1765334198.481:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 55.871157][ T1040] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 55.872991][ T1034] F2FS-fs (loop3): invalid crc value [ 55.896952][ T1034] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.910616][ T39] usb 5-1: config 0 interface 0 has no altsetting 1 [ 55.926755][ T30] audit: type=1326 audit(1765334198.481:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 55.930732][ T414] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 55.958558][ T1036] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 55.971751][ T1034] F2FS-fs (loop3): Start checkpoint disabled! [ 55.985664][ T1034] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 56.110681][ T39] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 56.125283][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.134021][ T39] usb 5-1: Product: syz [ 56.138279][ T39] usb 5-1: Manufacturer: syz [ 56.143192][ T39] usb 5-1: SerialNumber: syz [ 56.148569][ T39] usb 5-1: config 0 descriptor?? [ 56.152546][ T1049] loop0: detected capacity change from 0 to 1024 [ 56.201442][ T39] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 56.208456][ T1049] EXT4-fs (loop0): Ignoring removed orlov option [ 56.210738][ T414] usb 3-1: Using ep0 maxpacket: 16 [ 56.216059][ T1054] syz.3.178[1054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.220079][ T1054] syz.3.178[1054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.235136][ T1049] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 56.494496][ T414] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 56.520585][ T414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.539444][ T414] usb 3-1: Product: syz [ 56.546712][ T1108] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 56.560610][ T414] usb 3-1: Manufacturer: syz [ 56.565293][ T414] usb 3-1: SerialNumber: syz [ 56.642346][ T414] r8152-cfgselector 3-1: config 0 descriptor?? [ 57.020913][ T414] r8152-cfgselector 3-1: Unknown version 0x0000 [ 57.044999][ T1114] loop2: detected capacity change from 0 to 512 [ 57.052267][ T414] r8152-cfgselector 3-1: Unknown version 0x0000 [ 57.058645][ T414] r8152-cfgselector 3-1: bad CDC descriptors [ 57.071149][ T1114] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 57.090591][ T20] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 57.100674][ T414] r8152-cfgselector 3-1: Unknown version 0x0000 [ 57.113629][ T1114] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 57.119613][ T414] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 57.331777][ T1114] loop2: detected capacity change from 0 to 2048 [ 57.420968][ T423] loop2: p1 < > [ 57.426747][ T1114] loop2: p1 < > [ 57.483410][ T101] loop2: p1 < > [ 57.500247][ T1117] loop1: detected capacity change from 0 to 8192 [ 57.520705][ T20] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 57.529814][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.562023][ T423] udevd[423]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 57.572192][ T20] usb 1-1: config 0 descriptor?? [ 57.592575][ T1117] loop1: p1[EZD] p2 p3 p4 [ 57.600925][ T1117] loop1: p3 start 117772289 is beyond EOD, truncated [ 57.609009][ T332] handle_bad_sector: 1 callbacks suppressed [ 57.609030][ T332] attempt to access beyond end of device [ 57.609030][ T332] loop3: rw=2049, want=45104, limit=40427 [ 57.613241][ T423] udevd[423]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 57.631504][ T1117] loop1: p4 size 262144 extends beyond EOD, truncated [ 57.637309][ T20] usb-storage 1-1:0.0: USB Mass Storage device detected [ 57.681015][ T20] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 57.681015][ T20] Please send a copy of this message to and [ 57.729645][ T423] udevd[423]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 57.817082][ T424] udevd[424]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 57.827897][ T491] udevd[491]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 57.827922][ T423] udevd[423]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 57.915902][ T414] usb 5-1: USB disconnect, device number 5 [ 57.965140][ T1139] xt_hashlimit: size too large, truncated to 1048576 [ 58.050895][ T20] usb 1-1: USB disconnect, device number 8 [ 58.097546][ T1145] loop4: detected capacity change from 0 to 512 [ 58.268964][ T1145] EXT4-fs (loop4): journaled quota format not specified [ 58.299488][ T1138] loop1: detected capacity change from 0 to 40427 [ 58.321724][ T1138] F2FS-fs (loop1): fault_injection options not supported [ 58.330463][ T1138] F2FS-fs (loop1): invalid crc value [ 58.353781][ T1138] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.445341][ T1138] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.498502][ T283] attempt to access beyond end of device [ 58.498502][ T283] loop1: rw=2049, want=45112, limit=40427 [ 58.694291][ T1157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 58.713376][ T1157] device bridge_slave_1 left promiscuous mode [ 58.762192][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.770858][ T1157] device bridge_slave_0 left promiscuous mode [ 58.777077][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.671677][ T1166] loop2: detected capacity change from 0 to 512 [ 59.720378][ T1176] loop1: detected capacity change from 0 to 512 [ 59.748151][ T1178] loop4: detected capacity change from 0 to 4096 [ 59.795615][ T1176] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 59.813018][ T1178] EXT4-fs (loop4): Ignoring removed bh option [ 59.815761][ T1182] loop2: detected capacity change from 0 to 256 [ 59.829639][ T1178] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.851280][ T1182] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 59.896716][ T1178] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 59.930635][ T1176] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.955172][ T1178] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,delalloc,bh,test_dummy_encryption,nodiscard,jqfmt=vfsv1,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 60.005103][ T1178] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 60.024915][ T1178] overlayfs: conflicting lowerdir path [ 60.033147][ T1182] exFAT-fs (loop2): hint_cluster is invalid (17) [ 60.040852][ T1176] netlink: 96 bytes leftover after parsing attributes in process `syz.1.211'. [ 60.316507][ T1205] sch_fq: defrate 4294967295 ignored. [ 60.360595][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 60.660602][ T6] usb 2-1: device descriptor read/64, error -71 [ 60.943822][ T1218] loop0: detected capacity change from 0 to 4096 [ 60.971972][ T1218] EXT4-fs (loop0): Unrecognized mount option "dont_measure" or missing value [ 61.080631][ T6] usb 2-1: device descriptor read/64, error -71 [ 61.100621][ T342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 61.238532][ T1218] loop0: detected capacity change from 0 to 40427 [ 61.249061][ T1218] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 61.257372][ T1218] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.299836][ T1218] F2FS-fs (loop0): invalid crc value [ 61.341292][ T1218] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.350754][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 61.360593][ T342] usb 4-1: Using ep0 maxpacket: 16 [ 61.428931][ T1218] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 61.436161][ T1218] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 61.490736][ T342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.508872][ T342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.660751][ T6] usb 2-1: device descriptor read/64, error -71 [ 61.700753][ T342] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.726931][ T1234] loop2: detected capacity change from 0 to 4096 [ 61.735425][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.744572][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 61.744587][ T30] audit: type=1400 audit(1765334204.641:502): avc: denied { read write } for pid=1242 comm="syz.0.226" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.777968][ T342] usb 4-1: Product: syz [ 61.790703][ T342] usb 4-1: Manufacturer: syz [ 61.791143][ T1245] loop4: detected capacity change from 0 to 256 [ 61.796892][ T342] usb 4-1: SerialNumber: syz [ 61.807281][ T30] audit: type=1400 audit(1765334204.671:503): avc: denied { open } for pid=1242 comm="syz.0.226" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.807414][ T1234] EXT4-fs (loop2): Test dummy encryption mode enabled [ 61.839822][ T1234] EXT4-fs (loop2): Ignoring removed nobh option [ 61.847146][ T1234] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 61.847146][ T1234] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 61.847146][ T1234] [ 61.865563][ T30] audit: type=1400 audit(1765334204.741:504): avc: denied { read write } for pid=1248 comm="syz.0.230" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.890926][ T30] audit: type=1400 audit(1765334204.741:505): avc: denied { open } for pid=1248 comm="syz.0.230" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.936868][ T1234] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,usrquota,test_dummy_encryption=v1,data_err=ignore,dioread_nolock,nobh,nouser_xattr,,errors=continue. Quota mode: writeback. [ 62.100636][ T6] usb 2-1: device descriptor read/64, error -71 [ 62.190604][ T414] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 62.220694][ T6] usb usb2-port1: attempt power cycle [ 62.230758][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 62.460643][ T414] usb 1-1: device descriptor read/64, error -71 [ 62.490594][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 62.610690][ T39] usb 3-1: config 250 has an invalid interface number: 8 but max is 0 [ 62.618919][ T39] usb 3-1: config 250 has no interface number 0 [ 62.630599][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 62.632783][ T39] usb 3-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9 [ 62.642928][ T1254] fuse: Bad value for 'user_id' [ 62.647379][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.775185][ T6] usb 2-1: device descriptor read/8, error -71 [ 62.901053][ T1257] loop4: detected capacity change from 0 to 16 [ 62.932830][ T1257] erofs: (device loop4): mounted with root inode @ nid 36. [ 62.971505][ T414] usb 1-1: device descriptor read/64, error -71 [ 62.979094][ T1234] UDC core: couldn't find an available UDC or it's busy: -16 [ 62.993829][ T1234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 63.038877][ T1257] loop4: detected capacity change from 0 to 1024 [ 63.059949][ T1257] EXT4-fs (loop4): Ignoring removed bh option [ 63.132104][ T30] audit: type=1400 audit(1765334206.021:506): avc: denied { create } for pid=1256 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.138491][ T1257] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 63.226897][ T1234] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 63.260680][ T414] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 63.313567][ T1261] overlayfs: upper fs is r/o, try multi-lower layers mount [ 63.382120][ T30] audit: type=1400 audit(1765334206.031:507): avc: denied { write } for pid=1256 comm="syz.1.233" path="socket:[19571]" dev="sockfs" ino=19571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.546869][ T30] audit: type=1400 audit(1765334206.031:508): avc: denied { remount } for pid=1233 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.630648][ T6] usb 2-1: device descriptor read/8, error -71 [ 63.694315][ T414] usb 1-1: device descriptor read/64, error -71 [ 63.710679][ T39] usb 3-1: string descriptor 0 read error: -71 [ 63.718628][ T39] usb 3-1: USB disconnect, device number 5 [ 63.734723][ T1264] xt_bpf: check failed: parse error [ 64.110625][ T414] usb 1-1: device descriptor read/64, error -71 [ 64.183444][ T282] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /60/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 64.210728][ T342] usb 4-1: 0:2 : does not exist [ 64.211846][ T282] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 64.235698][ T1278] overlayfs: './bus' not a directory [ 64.249114][ T414] usb usb1-port1: attempt power cycle [ 64.253569][ T342] usb 4-1: USB disconnect, device number 5 [ 64.268306][ T423] udevd[423]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.301262][ T282] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 64.371302][ T1278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.237'. [ 64.382756][ T1278] futex_wake_op: syz.4.237 tries to shift op by -1; fix this program [ 64.493478][ T30] audit: type=1400 audit(1765334207.391:509): avc: denied { mounton } for pid=1285 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.520690][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 64.531739][ T30] audit: type=1400 audit(1765334207.421:510): avc: denied { nlmsg_write } for pid=1283 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 64.562012][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.569091][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.576602][ T1285] device bridge_slave_0 entered promiscuous mode [ 64.586709][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.594086][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.601569][ T1285] device bridge_slave_1 entered promiscuous mode [ 64.664430][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.671516][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.678886][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.685945][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.700623][ T414] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 64.710476][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.710774][ T342] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 64.725418][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.732966][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.744729][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.750670][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.763213][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.770293][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.788599][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.796813][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.803864][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.812795][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.825057][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.840016][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.852296][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.861030][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.868576][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.878916][ T1285] device veth0_vlan entered promiscuous mode [ 64.890040][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.900374][ T1285] device veth1_macvtap entered promiscuous mode [ 64.912042][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.919488][ T414] usb 1-1: device descriptor read/8, error -71 [ 64.932058][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.939593][ T332] device bridge_slave_0 left promiscuous mode [ 64.946019][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 64.946179][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.960761][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.972328][ T332] device veth1_macvtap left promiscuous mode [ 64.974639][ T6] usb 2-1: Product: syz [ 64.979990][ T332] device veth0_vlan left promiscuous mode [ 64.982958][ T6] usb 2-1: Manufacturer: syz [ 64.991258][ T1301] xt_bpf: check failed: parse error [ 64.993215][ T6] usb 2-1: SerialNumber: syz [ 65.016605][ T6] usb 2-1: config 0 descriptor?? [ 65.062575][ T6] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 65.075215][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.090763][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.097087][ T30] audit: type=1400 audit(1765334207.991:511): avc: denied { mounton } for pid=1285 comm="syz-executor" path="/root/syzkaller.uE6tP7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.101788][ T342] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 65.137785][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.153862][ T342] usb 4-1: config 0 descriptor?? [ 65.171058][ T414] usb 1-1: device descriptor read/8, error -71 [ 65.232748][ T1309] loop5: detected capacity change from 0 to 256 [ 65.263693][ T39] usb 2-1: USB disconnect, device number 9 [ 65.710944][ T26] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 65.712491][ T342] lua 0003:1E7D:2C2E.0002: unbalanced collection at end of report description [ 65.749219][ T342] lua 0003:1E7D:2C2E.0002: parse failed [ 65.754886][ T342] lua: probe of 0003:1E7D:2C2E.0002 failed with error -22 [ 65.826877][ T1321] syz.0.248[1321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.826961][ T1321] syz.0.248[1321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.838863][ T1323] UDC core: couldn't find an available UDC or it's busy: -16 [ 65.857960][ T1323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.872198][ T6] usb 4-1: USB disconnect, device number 6 [ 65.896800][ T1327] loop0: detected capacity change from 0 to 512 [ 65.919862][ T1327] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.250: inode #1: comm syz.0.250: iget: illegal inode # [ 65.924761][ T1336] loop3: detected capacity change from 0 to 128 [ 65.940128][ T1327] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.250: error while reading EA inode 1 err=-117 [ 65.967930][ T1336] EXT4-fs (loop3): Ignoring removed nobh option [ 65.969518][ T1327] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.250: inode #1: comm syz.0.250: iget: illegal inode # [ 65.987684][ T1327] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.250: error while reading EA inode 1 err=-117 [ 65.995424][ T1336] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 66.004159][ T1327] EXT4-fs (loop0): 1 orphan inode deleted [ 66.019112][ T1336] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.021032][ T1327] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,barrier=0x0000000000000002,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 66.110715][ T26] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.119021][ T26] usb 5-1: config 179 has no interface number 0 [ 66.126089][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 66.138647][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 66.151352][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 66.163615][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 66.177991][ T26] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.191552][ T26] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 66.200937][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.230694][ T1317] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 66.267935][ T1346] loop3: detected capacity change from 0 to 256 [ 66.281993][ T26] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 66.300812][ T26] xpad: probe of 5-1:179.65 failed with error -5 [ 66.320630][ T342] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 66.880611][ T342] usb 2-1: Using ep0 maxpacket: 32 [ 66.921940][ T1348] loop0: detected capacity change from 0 to 131072 [ 66.950639][ T289] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 66.964628][ T1348] F2FS-fs (loop0): invalid crc value [ 66.972281][ T1348] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.000712][ T342] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.014535][ T342] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 243, changing to 11 [ 67.025845][ T1348] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 67.026168][ T342] usb 2-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.033762][ T1348] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 67.045444][ T342] usb 2-1: config 0 interface 0 has no altsetting 0 [ 67.059557][ T342] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 67.068752][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.083011][ T342] usb 2-1: config 0 descriptor?? [ 67.137069][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 67.137084][ T30] audit: type=1400 audit(1765334210.031:521): avc: denied { write } for pid=1361 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.287119][ T1364] loop5: detected capacity change from 0 to 512 [ 67.406947][ T1364] EXT4-fs (loop5): orphan cleanup on readonly fs [ 67.415948][ T1364] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6) [ 67.425729][ T1364] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 67.435191][ T1364] EXT4-fs error (device loop5): ext4_acquire_dquot:6200: comm syz.5.259: Failed to acquire dquot type 1 [ 67.450235][ T1364] EXT4-fs (loop5): 1 truncate cleaned up [ 67.457406][ T1364] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,lazytime,,errors=continue. Quota mode: writeback. [ 67.801026][ T289] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.820058][ T342] a4tech 0003:09DA:0006.0003: hidraw0: USB HID v0.07 Device [HID 09da:0006] on usb-dummy_hcd.1-1/input0 [ 67.881128][ T289] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.140680][ T289] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.154227][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.171484][ T289] usb 4-1: SerialNumber: syz [ 68.243260][ T1370] syz.0.258[1370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.243384][ T1370] syz.0.258[1370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.316027][ T30] audit: type=1400 audit(1765334211.211:522): avc: denied { mounton } for pid=1369 comm="syz.0.258" path="/45/file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 68.326315][ T342] usb 5-1: USB disconnect, device number 6 [ 68.422661][ T1376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.261'. [ 68.435455][ T1376] loop4: detected capacity change from 0 to 128 [ 68.461374][ T289] usb 4-1: 0:2 : does not exist [ 68.466546][ T289] usb 4-1: unit 5 not found! [ 68.475383][ T289] usb 4-1: USB disconnect, device number 7 [ 69.124520][ T26] usb 2-1: USB disconnect, device number 10 [ 69.158480][ T1385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 69.190633][ T1385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.262'. [ 69.233317][ T30] audit: type=1400 audit(1765334212.131:523): avc: denied { execute_no_trans } for pid=1387 comm="syz.5.264" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.263088][ T1389] loop1: detected capacity change from 0 to 512 [ 69.321513][ T423] udevd[423]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.337516][ T1389] EXT4-fs (loop1): Ignoring removed nobh option [ 69.347136][ T1395] loop3: detected capacity change from 0 to 512 [ 69.367943][ T1389] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.376700][ T1389] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.405568][ T1389] EXT4-fs error (device loop1): ext4_do_update_inode:5249: inode #15: comm syz.1.262: corrupted inode contents [ 69.418238][ T1395] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.430796][ T1389] EXT4-fs error (device loop1): ext4_dirty_inode:6085: inode #15: comm syz.1.262: mark_inode_dirty error [ 69.439994][ T1395] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.442500][ T1389] EXT4-fs error (device loop1): ext4_do_update_inode:5249: inode #15: comm syz.1.262: corrupted inode contents [ 69.464406][ T1389] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #15: comm syz.1.262: mark_inode_dirty error [ 69.476847][ T1389] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #15: comm syz.1.262: mark inode dirty (error -117) [ 69.490901][ T1389] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 69.493183][ T1383] loop0: detected capacity change from 0 to 32768 [ 69.571135][ T1389] EXT4-fs (loop1): 1 orphan inode deleted [ 69.579649][ T30] audit: type=1400 audit(1765334212.471:524): avc: denied { create } for pid=1392 comm="syz.5.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 69.609234][ T1389] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,block_validity,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,acl,norecovery,,errors=continue. Quota mode: none. [ 69.630102][ T423] loop0: p1 p2 p3 < p5 p6 p7 > [ 69.636142][ T423] loop0: p2 size 16775168 extends beyond EOD, truncated [ 69.645048][ T1402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.266'. [ 69.654039][ T423] loop0: p5 start 4294970168 is beyond EOD, truncated [ 69.665796][ T1383] loop0: p1 p2 p3 < p5 p6 p7 > [ 69.673055][ T1383] loop0: p2 size 16775168 extends beyond EOD, truncated [ 69.680177][ T1402] netem: change failed [ 69.688774][ T1383] loop0: p5 start 4294970168 is beyond EOD, truncated [ 69.932675][ T1407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 69.965688][ T372] udevd[372]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 69.968021][ T333] udevd[333]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 69.985542][ T424] udevd[424]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 69.991620][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 70.011121][ T423] udevd[423]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 70.049423][ T424] udevd[424]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 70.098185][ T1422] udevd[1422]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 70.125360][ T1428] loop1: detected capacity change from 0 to 1024 [ 70.132099][ T30] audit: type=1326 audit(1765334213.011:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 70.218280][ T372] udevd[372]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 70.274060][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 70.294305][ T1428] EXT4-fs (loop1): Ignoring removed orlov option [ 70.301718][ T1428] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.312666][ T1428] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.322443][ T1428] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 70.331179][ T1428] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 70.672939][ T30] audit: type=1326 audit(1765334213.011:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 71.083775][ T30] audit: type=1326 audit(1765334213.011:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 71.121719][ T30] audit: type=1326 audit(1765334213.011:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 71.484810][ T1434] loop4: detected capacity change from 0 to 512 [ 71.601331][ T1434] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.274: inode #1: comm syz.4.274: iget: illegal inode # [ 71.631877][ T1434] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.274: error while reading EA inode 1 err=-117 [ 71.654888][ T1434] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.672358][ T1452] loop0: detected capacity change from 0 to 512 [ 71.695323][ T1434] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.274: inode #1: comm syz.4.274: iget: illegal inode # [ 71.736707][ T1434] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.274: error while reading EA inode 1 err=-117 [ 71.751924][ T1452] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 71.760015][ T1452] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 71.769219][ T1452] EXT4-fs (loop0): 1 truncate cleaned up [ 71.775131][ T1452] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 71.810519][ T1452] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 71.833654][ T1434] EXT4-fs (loop4): 1 orphan inode deleted [ 71.839480][ T1434] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,barrier=0x0000000000000002,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 71.912569][ T1434] binfmt_misc: register: failed to install interpreter file ./file0 [ 72.174624][ T1464] loop1: detected capacity change from 0 to 256 [ 72.213145][ T1464] FAT-fs (loop1): bogus number of FAT sectors [ 72.219356][ T1464] FAT-fs (loop1): Can't find a valid FAT filesystem [ 72.692489][ T1471] loop4: detected capacity change from 0 to 256 [ 72.701573][ T1468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 72.724274][ T1471] FAT-fs (loop4): Unrecognized mount option "shortname=wiLnt" or missing value [ 72.821787][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 72.821803][ T30] audit: type=1400 audit(1765334215.721:545): avc: denied { write } for pid=1475 comm="syz.5.285" path="socket:[20013]" dev="sockfs" ino=20013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.063054][ T30] audit: type=1400 audit(1765334215.961:546): avc: denied { read write } for pid=1482 comm="syz.5.286" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.119957][ T30] audit: type=1400 audit(1765334215.991:547): avc: denied { open } for pid=1482 comm="syz.5.286" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.174241][ T30] audit: type=1400 audit(1765334215.991:548): avc: denied { ioctl } for pid=1482 comm="syz.5.286" path="/dev/uhid" dev="devtmpfs" ino=263 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.210745][ T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 73.650948][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.695000][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 73.805690][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 73.931480][ T1494] loop3: detected capacity change from 0 to 256 [ 73.940727][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.150725][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.169845][ T1502] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.187671][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.197511][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 74.211325][ T1504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 74.220709][ T26] usb 1-1: Product: syz [ 74.224908][ T26] usb 1-1: Manufacturer: syz [ 74.238051][ T26] usb 1-1: SerialNumber: syz [ 74.249834][ T1504] loop1: detected capacity change from 0 to 128 [ 74.262797][ T30] audit: type=1400 audit(1765334217.161:549): avc: denied { read } for pid=1507 comm="syz.5.293" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.263291][ T1509] fuse: Bad value for 'fd' [ 74.287128][ T1481] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.302755][ T30] audit: type=1400 audit(1765334217.161:550): avc: denied { open } for pid=1507 comm="syz.5.293" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.314707][ T1515] netlink: 64 bytes leftover after parsing attributes in process `syz.4.295'. [ 74.328367][ T26] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 74.355167][ T1521] netlink: 'syz.4.296': attribute type 12 has an invalid length. [ 74.364133][ T1504] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.376456][ T30] audit: type=1400 audit(1765334217.191:551): avc: denied { mount } for pid=1511 comm="syz.4.294" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.399308][ T1504] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.450227][ T1525] loop5: detected capacity change from 0 to 1024 [ 74.483639][ T1533] netlink: 'syz.4.301': attribute type 12 has an invalid length. [ 74.495922][ T30] audit: type=1326 audit(1765334217.391:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 74.510727][ T1533] netlink: 'syz.4.301': attribute type 12 has an invalid length. [ 74.521126][ T1525] EXT4-fs (loop5): Ignoring removed orlov option [ 74.544585][ T6] usb 1-1: USB disconnect, device number 13 [ 74.553342][ T30] audit: type=1326 audit(1765334217.431:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 74.578457][ T30] audit: type=1326 audit(1765334217.431:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f00a77749 code=0x7ffc0000 [ 74.642880][ T1545] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 74.711146][ T1525] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,data_err=ignore,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nombcache,lazytime,,errors=continue. Quota mode: none. [ 74.794820][ T1573] loop4: detected capacity change from 0 to 512 [ 74.838441][ T1573] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.861847][ T1573] EXT4-fs (loop4): 1 truncate cleaned up [ 74.867541][ T1573] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 74.884349][ T1573] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.307: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 74.904817][ T1573] EXT4-fs (loop4): Remounting filesystem read-only [ 74.911512][ T1573] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 75.004735][ T1581] fuse: Unknown parameter ' 0x000000000000000b' [ 75.018499][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.298'. [ 75.639446][ T1573] EXT4-fs (loop4): Remounting filesystem read-only [ 75.639818][ T1581] syz.5.298 (1581) used greatest stack depth: 17640 bytes left [ 75.646070][ T1573] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #2: comm syz.4.307: Deleting old file: nlink 5, error=-117 [ 75.810642][ T289] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 77.430568][ T289] usb 2-1: Using ep0 maxpacket: 32 [ 77.551031][ T289] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.562252][ T289] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.587961][ T1608] loop5: detected capacity change from 0 to 1024 [ 77.691236][ T1608] EXT4-fs (loop5): Ignoring removed orlov option [ 77.697856][ T1608] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 77.708561][ T1608] EXT4-fs (loop5): invalid journal inode [ 77.714274][ T1608] EXT4-fs (loop5): can't get journal size [ 77.730386][ T289] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 77.739821][ T1491] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 77.758978][ T1608] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 77.783583][ T289] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 77.802154][ T289] usb 2-1: Product: syz [ 77.810601][ T289] usb 2-1: Manufacturer: syz [ 77.830656][ T289] usb 2-1: can't set config #4, error -71 [ 77.839261][ T289] usb 2-1: USB disconnect, device number 11 [ 77.855248][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 77.855263][ T30] audit: type=1400 audit(1765334220.751:603): avc: denied { setopt } for pid=1615 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.901308][ T30] audit: type=1400 audit(1765334220.791:604): avc: denied { connect } for pid=1617 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.922501][ T30] audit: type=1400 audit(1765334220.791:605): avc: denied { write } for pid=1617 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.951232][ T30] audit: type=1400 audit(1765334220.821:606): avc: denied { ioctl } for pid=1617 comm="syz.0.319" path="socket:[20173]" dev="sockfs" ino=20173 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.991510][ T30] audit: type=1326 audit(1765334220.871:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 78.017387][ T1630] loop5: detected capacity change from 0 to 512 [ 78.018026][ T30] audit: type=1326 audit(1765334220.911:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1631 comm="syz.0.322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a2dbb749 code=0x0 [ 78.056264][ T1630] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.074336][ T1630] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.110310][ T30] audit: type=1400 audit(1765334221.001:609): avc: denied { map } for pid=1629 comm="syz.5.318" path="/19/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.191371][ T1491] usb 4-1: config 255 has too many interfaces: 226, using maximum allowed: 32 [ 78.200696][ T1491] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 78.212964][ T1491] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 226 [ 78.224114][ T1491] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 78.234319][ T1491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.485171][ T30] audit: type=1326 audit(1765334221.181:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 78.509989][ T1647] capability: warning: `syz.4.326' uses 32-bit capabilities (legacy support in use) [ 78.509999][ T30] audit: type=1326 audit(1765334221.181:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 78.510029][ T30] audit: type=1326 audit(1765334221.191:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfae931749 code=0x7ffc0000 [ 78.708237][ T1653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.327'. [ 78.721690][ T1491] usb 4-1: USB disconnect, device number 8 [ 78.811490][ T1664] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 78.821492][ T1664] overlayfs: './file1' not a directory [ 78.855479][ T1670] loop0: detected capacity change from 0 to 256 [ 78.959891][ T1680] tipc: Started in network mode [ 78.970646][ T1680] tipc: Node identity 4, cluster identity 4711 [ 78.977449][ T1680] tipc: Node number set to 4 [ 79.694301][ T1695] loop4: detected capacity change from 0 to 128 [ 80.011278][ T289] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 80.019918][ T1706] sch_fq: defrate 4294967295 ignored. [ 80.150594][ T1491] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 80.380615][ T289] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 80.393263][ T289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.400573][ T1491] usb 1-1: Using ep0 maxpacket: 16 [ 80.403769][ T289] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.435483][ T289] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 80.445052][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.465259][ T289] usb 2-1: config 0 descriptor?? [ 80.501165][ T289] usb-storage 2-1:0.0: USB Mass Storage device detected [ 80.509535][ T289] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 80.560653][ T1491] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.572202][ T1491] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.616699][ T1723] netlink: 56 bytes leftover after parsing attributes in process `syz.5.346'. [ 80.640336][ T1725] loop5: detected capacity change from 0 to 16 [ 80.671835][ T1725] erofs: (device loop5): mounted with root inode @ nid 36. [ 80.710028][ T1604] usb 2-1: USB disconnect, device number 12 [ 80.754393][ T1491] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.766462][ T1491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.774889][ T1491] usb 1-1: Product: syz [ 80.779292][ T1491] usb 1-1: Manufacturer: syz [ 80.784207][ T1491] usb 1-1: SerialNumber: syz [ 80.798160][ T1725] 9pnet: Insufficient options for proto=fd [ 80.858447][ T414] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 80.870654][ T1491] r8152-cfgselector 1-1: config 0 descriptor?? [ 81.075303][ T1735] syz.5.349[1735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.075747][ T1735] syz.5.349[1735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.107452][ T1735] loop5: detected capacity change from 0 to 128 [ 81.475447][ T1735] attempt to access beyond end of device [ 81.475447][ T1735] loop5: rw=0, want=1041, limit=128 [ 81.568561][ T1702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 81.651021][ T414] usb 5-1: config 16 has an invalid interface number: 75 but max is 1 [ 81.676762][ T414] usb 5-1: config 16 has an invalid interface number: 236 but max is 1 [ 81.925950][ T414] usb 5-1: config 16 has an invalid interface number: 3 but max is 1 [ 81.949110][ T414] usb 5-1: config 16 has 3 interfaces, different from the descriptor's value: 2 [ 81.959060][ T1740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1740 comm=syz.1.350 [ 81.972256][ T414] usb 5-1: config 16 has no interface number 0 [ 81.978448][ T414] usb 5-1: config 16 has no interface number 1 [ 81.985078][ T1739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1739 comm=syz.1.350 [ 81.997773][ T414] usb 5-1: config 16 has no interface number 2 [ 82.004219][ T414] usb 5-1: config 16 interface 75 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 82.033209][ T414] usb 5-1: config 16 interface 75 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 82.058243][ T414] usb 5-1: config 16 interface 75 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.073614][ T414] usb 5-1: too many endpoints for config 16 interface 236 altsetting 108: 141, using maximum allowed: 30 [ 82.085783][ T414] usb 5-1: config 16 interface 236 altsetting 108 has a duplicate endpoint with address 0x4, skipping [ 82.096855][ T414] usb 5-1: config 16 interface 236 altsetting 108 has a duplicate endpoint with address 0x2, skipping [ 82.107904][ T414] usb 5-1: config 16 interface 236 altsetting 108 has an invalid endpoint with address 0x80, skipping [ 82.118926][ T414] usb 5-1: config 16 interface 236 altsetting 108 has 3 endpoint descriptors, different from the interface descriptor's value: 141 [ 82.132598][ T414] usb 5-1: config 16 interface 3 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 82.143217][ T414] usb 5-1: config 16 interface 3 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 82.153889][ T414] usb 5-1: config 16 interface 3 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 82.164568][ T414] usb 5-1: config 16 interface 3 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 1023 [ 82.180606][ T414] usb 5-1: config 16 interface 3 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 82.191433][ T414] usb 5-1: config 16 interface 3 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 82.202119][ T414] usb 5-1: config 16 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 82.212753][ T414] usb 5-1: config 16 interface 3 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 82.223543][ T414] usb 5-1: config 16 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 82.232169][ T342] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 82.241681][ T414] usb 5-1: config 16 interface 3 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 82.252611][ T414] usb 5-1: config 16 interface 3 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 82.263291][ T414] usb 5-1: config 16 interface 3 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 82.274528][ T414] usb 5-1: config 16 interface 3 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 82.285196][ T414] usb 5-1: config 16 interface 3 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 82.295784][ T414] usb 5-1: config 16 interface 75 has no altsetting 0 [ 82.302620][ T414] usb 5-1: config 16 interface 236 has no altsetting 0 [ 82.309533][ T414] usb 5-1: config 16 interface 3 has no altsetting 0 [ 82.317689][ T1491] usb 1-1: USB disconnect, device number 14 [ 82.324747][ T1748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.352'. [ 82.348651][ T1754] loop5: detected capacity change from 0 to 512 [ 82.370802][ T350] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 82.402760][ T1754] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.353: couldn't read orphan inode 26 (err -116) [ 82.414828][ T1754] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 82.429361][ T1754] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.466707][ T1754] EXT4-fs error (device loop5): ext4_do_update_inode:5249: inode #3: comm syz.5.353: corrupted inode contents [ 82.470742][ T414] usb 5-1: New USB device found, idVendor=1199, idProduct=6851, bcdDevice=dd.c3 [ 82.487008][ T1754] EXT4-fs error (device loop5): ext4_dirty_inode:6085: inode #3: comm syz.5.353: mark_inode_dirty error [ 82.489244][ T414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.501499][ T1754] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.353: bg 0: block 64: padding at end of block bitmap is not set [ 82.520939][ T414] usb 5-1: Product: ࠝ [ 82.520959][ T414] usb 5-1: Manufacturer: ఁ [ 82.520974][ T414] usb 5-1: SerialNumber: ఉ [ 82.536165][ T1754] EXT4-fs error (device loop5): ext4_acquire_dquot:6200: comm syz.5.353: Failed to acquire dquot type 0 [ 82.630715][ T342] usb 4-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 82.642070][ T342] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 82.655375][ T342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 82.662205][ T342] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 82.671556][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.680894][ T342] usb 4-1: config 0 descriptor?? [ 82.700694][ T1729] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.765456][ T1715] UDC core: couldn't find an available UDC or it's busy: -16 [ 82.773288][ T1715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.785986][ T1715] UDC core: couldn't find an available UDC or it's busy: -16 [ 82.793844][ T1715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.842191][ T1715] UDC core: couldn't find an available UDC or it's busy: -16 [ 82.850229][ T1715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.963432][ T350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.973837][ T350] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.053235][ T414] usb 5-1: USB disconnect, device number 7 [ 83.060793][ T350] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.069948][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 83.078258][ T350] usb 2-1: SerialNumber: syz [ 83.120635][ T1491] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.153203][ T342] itetech 0003:06CB:73F5.0004: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.3-1/input0 [ 83.330967][ T1745] loop1: detected capacity change from 0 to 4096 [ 83.374374][ T1745] EXT4-fs (loop1): invalid inodes per group: 204800 [ 83.374374][ T1745] [ 83.385375][ T1491] usb 6-1: Using ep0 maxpacket: 16 [ 83.402828][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 83.402843][ T30] audit: type=1326 audit(1765334226.301:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86045d749 code=0x7ffc0000 [ 83.404367][ T1778] syz.4.359[1778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.409032][ T30] audit: type=1326 audit(1765334226.301:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86045d749 code=0x7ffc0000 [ 83.432579][ T1778] syz.4.359[1778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.451409][ T30] audit: type=1326 audit(1765334226.301:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86045d749 code=0x7ffc0000 [ 83.506911][ T30] audit: type=1326 audit(1765334226.401:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86045d749 code=0x7ffc0000 [ 83.530940][ T30] audit: type=1326 audit(1765334226.401:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86045d749 code=0x7ffc0000 [ 83.556799][ T30] audit: type=1326 audit(1765334226.451:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 83.582404][ T30] audit: type=1326 audit(1765334226.481:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 83.607366][ T30] audit: type=1326 audit(1765334226.481:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 83.613271][ T1491] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 83.635160][ T30] audit: type=1326 audit(1765334226.481:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 83.644168][ T1491] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 83.676228][ T30] audit: type=1326 audit(1765334226.481:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a2dbb749 code=0x7ffc0000 [ 83.742901][ T1491] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.762373][ T1791] loop0: detected capacity change from 0 to 128 [ 83.802832][ T1794] xt_hashlimit: size too large, truncated to 1048576 [ 83.921559][ T1491] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.955502][ T1491] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.017780][ T1796] loop0: detected capacity change from 0 to 512 [ 84.069602][ T1491] usb 6-1: SerialNumber: syz [ 84.092794][ T1797] loop4: detected capacity change from 0 to 512 [ 84.104503][ T1796] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.120834][ T1773] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 84.120974][ T1796] EXT4-fs (loop0): 1 truncate cleaned up [ 84.134914][ T1796] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,nombcache,minixdf,,errors=continue. Quota mode: none. [ 84.168208][ T1797] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.175396][ T1797] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.365: Failed to acquire dquot type 1 [ 84.196887][ T1797] EXT4-fs (loop4): 1 truncate cleaned up [ 84.203288][ T1797] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 84.346498][ T1773] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 84.402134][ T342] usb 4-1: USB disconnect, device number 9 [ 85.983498][ T6] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 86.021528][ T350] usb 2-1: 0:2 : does not exist [ 86.026727][ T350] usb 2-1: unit 170 not found! [ 86.141100][ T350] usb 2-1: USB disconnect, device number 13 [ 86.250726][ T1491] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 86.262505][ T1491] usb 6-1: USB disconnect, device number 2 [ 86.431549][ T423] udevd[423]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.300593][ T6] usb 1-1: device descriptor read/64, error -32 [ 96.630580][ T6] usb 1-1: device descriptor read/64, error -32 [ 96.900571][ T6] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 97.140600][ T6] usb 1-1: device descriptor read/64, error -32 [ 97.470567][ T6] usb 1-1: device descriptor read/64, error -32 [ 97.590654][ T6] usb usb1-port1: attempt power cycle [ 98.000592][ T6] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 98.140611][ T6] usb 1-1: device descriptor read/8, error -32 [ 98.350597][ T6] usb 1-1: device descriptor read/8, error -32 [ 98.620603][ T6] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 98.740615][ T6] usb 1-1: device descriptor read/8, error -32 [ 98.950591][ T6] usb 1-1: device descriptor read/8, error -32 [ 99.070653][ T6] usb usb1-port1: unable to enumerate USB device [ 104.740615][ T1807] UDC core: couldn't find an available UDC or it's busy: -16 [ 104.748055][ T1807] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.914546][ T1814] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.921951][ T1814] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.929427][ T1814] device bridge_slave_0 entered promiscuous mode [ 123.936453][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.944040][ T1816] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.951624][ T1816] device bridge_slave_0 entered promiscuous mode [ 123.959504][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.966662][ T1816] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.974130][ T1816] device bridge_slave_1 entered promiscuous mode [ 123.988383][ T1814] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.995489][ T1814] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.003027][ T1814] device bridge_slave_1 entered promiscuous mode [ 124.097834][ T1818] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.104934][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.112502][ T1818] device bridge_slave_0 entered promiscuous mode [ 124.134697][ T1818] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.141844][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.149292][ T1818] device bridge_slave_1 entered promiscuous mode [ 124.155875][ T1815] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.162963][ T1815] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.170348][ T1815] device bridge_slave_0 entered promiscuous mode [ 124.191004][ T1815] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.198057][ T1815] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.205533][ T1815] device bridge_slave_1 entered promiscuous mode [ 124.223380][ T1817] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.230674][ T1817] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.238561][ T1817] device bridge_slave_0 entered promiscuous mode [ 124.259271][ T1817] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.266363][ T1817] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.273983][ T1817] device bridge_slave_1 entered promiscuous mode [ 124.421451][ T928] device bridge_slave_1 left promiscuous mode [ 124.427830][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.435875][ T928] device bridge_slave_0 left promiscuous mode [ 124.442148][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.450280][ T928] device veth1_macvtap left promiscuous mode [ 124.456631][ T928] device veth0_vlan left promiscuous mode [ 124.560989][ T1814] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.568225][ T1814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.575529][ T1814] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.582570][ T1814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.632100][ T1815] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.639172][ T1815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.646500][ T1815] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.653541][ T1815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.667749][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.674842][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.682173][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.689207][ T1816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.702699][ T1818] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.709762][ T1818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.717080][ T1818] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.724136][ T1818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.743426][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.751566][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.758882][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.766539][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.774063][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.781370][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.788555][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.796125][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.803556][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.833338][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.843316][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.851837][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.858890][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.887201][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.895802][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.904379][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.911431][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.918955][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.926755][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.934282][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.942640][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.950976][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.958008][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.965448][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.973553][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.981657][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.989994][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.998314][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.005376][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.012866][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.021083][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.031390][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.038942][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.057307][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.065508][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.088514][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.096640][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.104979][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.113958][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.122413][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.130262][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.138359][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.145875][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.157123][ T1814] device veth0_vlan entered promiscuous mode [ 125.165418][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.173841][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.182153][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.189180][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.196755][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.204452][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.211997][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.220312][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.228583][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.235666][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.244338][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.252969][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.261219][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.268249][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.290870][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.299180][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.307028][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.315939][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.324348][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.331392][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.338984][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.347651][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.355934][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.362983][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.370456][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.378673][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.386709][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.395112][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.407713][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.418798][ T1814] device veth1_macvtap entered promiscuous mode [ 125.435637][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.444257][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.452737][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.459839][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.467564][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.486068][ T1815] device veth0_vlan entered promiscuous mode [ 125.496675][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.505024][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.513619][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.521870][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.529935][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.538510][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.546969][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.554629][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.569107][ T928] tipc: Left network mode [ 125.576693][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.584666][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.603237][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.613679][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.634035][ T1816] device veth0_vlan entered promiscuous mode [ 125.641285][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.649942][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.660429][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.668751][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.676653][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.686229][ T1815] device veth1_macvtap entered promiscuous mode [ 125.695308][ T1865] netlink: 7 bytes leftover after parsing attributes in process `syz.7.369'. [ 125.704683][ T1865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=1865 comm=syz.7.369 [ 125.714837][ T1817] device veth0_vlan entered promiscuous mode [ 125.730993][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.740097][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.749002][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.756965][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.765363][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.774889][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.783522][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.792390][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.829231][ T1818] device veth0_vlan entered promiscuous mode [ 125.843351][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.852145][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.860348][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.868553][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.886454][ T1816] device veth1_macvtap entered promiscuous mode [ 125.930216][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.949380][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.957926][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.966966][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.975583][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.984434][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.984576][ T30] kauditd_printk_skb: 666 callbacks suppressed [ 125.984590][ T30] audit: type=1400 audit(1765334268.881:1334): avc: denied { connect } for pid=1870 comm="syz.7.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.992983][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.026918][ T30] audit: type=1400 audit(1765334268.921:1335): avc: denied { ioctl } for pid=1870 comm="syz.7.374" path="socket:[22334]" dev="sockfs" ino=22334 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.052365][ T30] audit: type=1326 audit(1765334268.951:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.7.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f4276749 code=0x7ffc0000 [ 126.064829][ T1818] device veth1_macvtap entered promiscuous mode [ 126.082048][ T30] audit: type=1326 audit(1765334268.951:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.7.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f4276749 code=0x7ffc0000 [ 126.109149][ T30] audit: type=1326 audit(1765334268.951:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.7.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd0f4276749 code=0x7ffc0000 [ 126.133613][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.144221][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.152841][ T30] audit: type=1326 audit(1765334268.951:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.7.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f4276749 code=0x7ffc0000 [ 126.153011][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.176815][ T30] audit: type=1326 audit(1765334268.951:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.7.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f4276749 code=0x7ffc0000 [ 126.186175][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.208025][ T30] audit: type=1326 audit(1765334269.031:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1878 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c206b9749 code=0x7ffc0000 [ 126.219866][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.239140][ T30] audit: type=1326 audit(1765334269.031:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1878 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c206b9749 code=0x7ffc0000 [ 126.270474][ T1817] device veth1_macvtap entered promiscuous mode [ 126.276932][ T30] audit: type=1326 audit(1765334269.041:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1878 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c206b9749 code=0x7ffc0000 [ 126.307529][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.315710][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.324285][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.333188][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.341669][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.368212][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.377746][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.386643][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.395268][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.459096][ T1888] xt_hashlimit: size too large, truncated to 1048576 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.612620][ T928] device bridge_slave_1 left promiscuous mode [ 127.618777][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.626423][ T928] device bridge_slave_0 left promiscuous mode [ 127.632666][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.641174][ T928] device bridge_slave_1 left promiscuous mode [ 127.647296][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.654685][ T928] device bridge_slave_0 left promiscuous mode [ 127.660856][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.669564][ T928] device bridge_slave_1 left promiscuous mode [ 127.675948][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.683626][ T928] device bridge_slave_0 left promiscuous mode [ 127.689737][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.698330][ T928] device veth1_macvtap left promiscuous mode [ 127.704511][ T928] device veth0_vlan left promiscuous mode [ 127.710496][ T928] device veth1_macvtap left promiscuous mode [ 127.716708][ T928] device veth0_vlan left promiscuous mode [ 127.723129][ T928] device veth1_macvtap left promiscuous mode [ 127.729130][ T928] device veth0_vlan left promiscuous mode [ 130.873437][ T928] device bridge_slave_1 left promiscuous mode [ 130.879608][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.887213][ T928] device bridge_slave_0 left promiscuous mode [ 130.893548][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.901505][ T928] device bridge_slave_1 left promiscuous mode [ 130.907722][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.915478][ T928] device bridge_slave_0 left promiscuous mode [ 130.921713][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.929575][ T928] device bridge_slave_1 left promiscuous mode [ 130.935925][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.943430][ T928] device bridge_slave_0 left promiscuous mode [ 130.949549][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.957648][ T928] device bridge_slave_1 left promiscuous mode [ 130.963866][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.971402][ T928] device bridge_slave_0 left promiscuous mode [ 130.977517][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.985562][ T928] device bridge_slave_1 left promiscuous mode [ 130.992125][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.999677][ T928] device bridge_slave_0 left promiscuous mode [ 131.006031][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.014789][ T928] device veth1_macvtap left promiscuous mode [ 131.021101][ T928] device veth0_vlan left promiscuous mode [ 131.026968][ T928] device veth1_macvtap left promiscuous mode [ 131.033007][ T928] device veth0_vlan left promiscuous mode [ 131.038868][ T928] device veth1_macvtap left promiscuous mode [ 131.044957][ T928] device veth0_vlan left promiscuous mode [ 131.050965][ T928] device veth1_macvtap left promiscuous mode [ 131.056968][ T928] device veth0_vlan left promiscuous mode [ 131.063007][ T928] device veth1_macvtap left promiscuous mode [ 131.069006][ T928] device veth0_vlan left promiscuous mode