last executing test programs: 1m42.132454826s ago: executing program 32 (id=44): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1m34.370140447s ago: executing program 33 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040cb06f67300000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '\x00'}, &(0x7f0000000380)=""/205, 0xcd) (async) syz_usb_control_io(r2, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x20, 0x3, 0x14, {0x14, 0x22, "849517d902a03fcdadee8156a818baf7891d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m22.375430733s ago: executing program 5 (id=160): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-%,utf8=1,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp775,uni_xlate=1,rodir,utf8=1,uni_xlate=0,tz=UTC,rodir,uni_xlate=0,utf8=0,codepage=1255,nonumtail=0,\x00'], 0x25, 0x2a1, &(0x7f0000002300)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800) fallocate(r0, 0x0, 0x0, 0x1000f4) 1m22.228321822s ago: executing program 5 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) unshare(0x22020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x6}, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r6, @ANYRES16=r7, @ANYBLOB="00000000000000000009000000000000de113693", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 1m22.115060782s ago: executing program 5 (id=164): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x54b61000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10d}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x50002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x852}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x440400, 0x0) memfd_create(&(0x7f0000000380)='/dev/vcs\x00', 0x4) r4 = getpid() capset(&(0x7f00000003c0)={0x20080522, r4}, &(0x7f0000000400)={0x101, 0x7, 0x0, 0xf, 0xf, 0xc}) r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x4fd, 0xb, 0x1, {0x22, 0xd37}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x3, 0x6}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x7, 0x1, 0x26, 0x8, 0x4}, 0xc7, &(0x7f00000004c0)={0x5, 0xf, 0xc7, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xfa, 0x2, 0x0, 0xf, 0x7, [0x30, 0xff00]}, @generic={0x8f, 0x10, 0x1, "cf21fe6c5a3d6223b28939f89db3cedb60f9f1214f74fa4899747c6e849365acba7b6a3d93681b3e78a73b80de9de9753ed1755d03c57daad2d808d5aa73cdd9ff1c82598bc54ceca5c4ffdce02780f9eb9590641040ae9c1da04f44b2aa6b4d1937dee5c08030d32d17d7f8c400148c36452dbfb15f246f762c62f6eb5afbec927506e922d70fbb75039df9"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x62, 0x6, 0x5, 0x4, 0x9d}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c0dbbfe360bc53a8efa2cb5d48ea69bb"}]}, 0x4, [{0x93, &(0x7f00000005c0)=@string={0x93, 0x3, "f128ed720063c42d9b81fefe915a24aa417b9a93b8bde0d98fe61418efa0a6c0d4c5f0c221783c42e8758db5811941f8fac082c523e6d8ab3c569671ad767c2cf5769e51d806d262df2e1af2c602a534aa2a929432ff499d8d7a53c99d030ec045c144304d3b9419e77252a2a7cfe8d59bc0ac0e7421279ba9b432dc94756dcbc61012820fd242ed828933f514a293ffcf"}}, {0x4f, &(0x7f0000000680)=@string={0x4f, 0x3, "9d17857ab1e10375fb3370f115be7f40ee6a1b858de85f3b1f06679286169e7ab6849961951876b3927eeeabca0c348f5ac77f313a1f654fa62c7680c31957dbe94b2e7d854b4f7aaf4ad90840"}}, {0xa7, &(0x7f0000000700)=@string={0xa7, 0x3, "80d8eb3b5b2ee577c8e7ea5bd70c882f2300fd3ee2d7e686340eff8eb5e9621b4474400416b698aebeb95a74aa57fc7a2d92ea90325aade7949efeb24187cdee2e2a2e514503d72378dec3c4c2eb144900bcffc2f7618b3a426dcedbe6fb3bcf5f33431f4eeeb7709887deeb65f240beb64162edd1633ed297aedbafdda69388b22b510dc8433668a23bf30839f53c71561d7ebb38c3293e998dbc5bc600834443250803f1"}}, {0x7e, &(0x7f00000007c0)=@string={0x7e, 0x3, "a7c363c3e05e6fcb330fd1fd2e3dad17106d535f4924b31881c30e19fc41eda36ff1d0b3a8f47ec0df788853650a0df70f3c3cf9e47779d207f3ec5b646258577ecb8cf18d2d7aef57e3417bce016d477bba326e85a5f5202a133d057c23a7c721d2cc4028e66987ad979c9b7f9d5ca42bddd6b6d2f81ba42ae91f15"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000a80)={0x24, &(0x7f00000008c0)={0x20, 0xb, 0xca, {0xca, 0x8, "3719dafbd3dd98c8681b95af581ffaab6cb02e8e569cfe4bd0479e0e28ecb8d3e7bd2be724fa6e59cec71101f883d3206e9bfec076ca89c699174a9cfeff374de99489afcc5d665605ec51c261ec62bd637dd82a76439664746142116525b7e3dc287601e3cb5b6d78b33e930b71b9dc6a36944d3e20e9e65cf0807b9e759f0b7c73f41d62b49ce730d2aa612ac4c431e2e2c23b00e891486d51a6fb17d7b7ff50aee831350001e48898a852ca2bfa35f2e393d0e94b6e059f157cbc25c9f0d9d0241d8edd0e015f"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000a00)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0xa, "7b9b"}, @main=@item_4={0x3, 0x0, 0x8, "914c8116"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xda0}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x0, 0x16, 0x32, "ad999d142ab9811396991bfba899aaf546b96ea2afcf3fcba933da6a57d1309bcfa887be30839d7dcec44fe4d0695a547c9a"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0x74, "fe5a245ae08397d6e1f4bb9a4a52017b8a6bfd1085929e8f945768fdda5cbbeb3ac3cedfa56d35b2018a6dfdf41fd70570343a5cb8468f33a0c98d2c10a30352df8355f55a9d713498338d0296c891bd7119a67c19fb99a3b3c35a0e1fa28ca1f16b2a3d723aa617648a8e5439cf7f9fee96e9cf"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x9}}) syz_usb_connect$cdc_ecm(0x0, 0xd6, &(0x7f0000000c80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x1, 0x1, 0x81, 0x70, 0xf8, [{{0x9, 0x4, 0x0, 0x2e, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x3, 0x7, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x3, 0x7, 0x1, 0x5, 0x36}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @mdlm_detail={0x59, 0x24, 0x13, 0x0, "6c5deaceffe69ec3dcf2ecc2fb19472f00ee6607fb8090d1276948e1cd30adb880103ce59787a310353228ae6c7e37ab845e8d6b901e987c3abd00f5d0902c329f01db16a52db31f3de9abfa47ef339685964a6614"}, @mbim_extended={0x8, 0x24, 0x1c, 0xfd1d, 0x65, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x6, 0x5, 0x2}, @dmm={0x7, 0x24, 0x14, 0x800, 0xf11}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x258, 0xf, 0x18, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xb, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xc, 0x6, 0xba}}}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x250, 0x2, 0x8, 0xb, 0x10, 0x8}, 0x5, &(0x7f0000000dc0)={0x5, 0xf, 0x5}, 0xa, [{0xe3, &(0x7f0000000e00)=@string={0xe3, 0x3, "645858ee6b1fdaad4b7c9983b2ed95740059953443d79a985c4eb4ef3281f7a9138a000b17105240d8b4400f6240b9d0a57d31ce1b7ceeb9e2e82aab0fdc67620c0228dedfe737e7e7b9952c0e4397c92f921dd027511fe09d678f2b2731c5359d8f0ad20371d6569aa6335351539c6c05ebd87ac48fd2398b9775d302186b3916bcd56a094a215e6a48feab18a02b4a430e786e382f0a3940e7debcfa81d0512dd50f94fdb08fcc9460b8f5636ac75e5870b0e40d5615c1ea7867181bd38ecc2750dd57ef89854317412f7a72b13d012cf0a5bbfc97de5806d32118cbf0438ef7"}}, {0xc1, &(0x7f0000000f00)=@string={0xc1, 0x3, "9c040bea63b439e41331b916ba6842a7d2311f4ff27e2379e018762afb3c83207451350525dd533b9e5a4ea1928c7878b7b44529e4658f4cbd44163e036c55bba4db0a73673a9efd162f718cccd080000680159f61be4df36957134d351533f1dfb49e096d3ef5415a6ac8eb2eb14b3cd106e7cd585808012f5ac548da4dd116b827db1df761539179a602cd3dc35313aebbee22494388847b4ad9842384ff231d3ec9a92ff10ebf196009a6e808090b25380398fc1de8024c259132420ef3"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1c09}}, {0x9a, &(0x7f0000001040)=@string={0x9a, 0x3, "cc6c81186e78ee7a13aced3db229027e84d1a9d3ba51c2d5314d4645289ba3ba6ef1909a4c3c4fcaeee4d77ab06257db4401f547c39f0f347951b5fb6c04227ffbd803bf67bc846f1c0fe2a23e2502ddca39988229cbc2cbf949d4db3d3d586cd84f6bc9f88f5f3e982e2418aee33dea88c6bfe4f793f5e5fbf34eecda02084a6f5358a385f1acc83434c2120dcfdefcec44408e9ccd89a1"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x814}}, {0xe9, &(0x7f0000001140)=@string={0xe9, 0x3, "ef90624c54c4b9ce07008989bec321da99d025ea1d8280510a469e7530b45b7d1d256baf1475900c2ae24a3b8c3102d854d4a554866f2e31ab83415421c70a523e00eddcff27f4553fcd762225633185c8ef41f30cf198c40a6080cc7bb8af03695f13af17d8dd0cca4336e02951d73e848a44cf882046003f914f9608695c4c6e638d8a4d6ca621485d94d4ba76445b9ae46e9ab913ed90ef1bdbac9be9bc6f2e77ced94f1b570eb07c3c5550550b6c0170f68818cfd405450d06835b4d7b1da5d83f8cac446062f0aecb097fbcb5a75a527dd3777fc8a897caece469da2e81bb7cd6ecfcb91d"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x405}}, {0x1e, &(0x7f0000001280)=@string={0x1e, 0x3, "21f6b8b297e8fbf720009812a7ad83366efea8f0649f3b7c92d38539"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x44e}}]}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001400), 0x40080, 0x0) prlimit64(r4, 0x9, &(0x7f0000001440)={0x7fffffff, 0x2}, &(0x7f0000001480)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x15, 0x1b, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x1, 0xa, 0xa, 0x5, 0x80}, @generic={0x8, 0x2, 0xb, 0x1dd7, 0x2ed}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000015c0)='GPL\x00', 0x10001, 0x5c, &(0x7f0000001600)=""/92, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2, r0, 0x8, &(0x7f0000001680)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x2, 0x1, 0x2, 0x3}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000001700)=[{0x5, 0x2, 0x7}], 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000029c0)={r7, 0x0, 0x1000, 0x2f, &(0x7f0000001800)="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", &(0x7f0000002800)=""/47, 0xffffffff, 0x0, 0x9b, 0x82, &(0x7f0000002840)="c17ffe823fa417e0c0309ce1c6f7ad7bcd39b2988b9b38ddc5e65d451e5a1185757ba0d8dad5e86ede85c71af7a222326619f90aa13d5059b7c0572594e42153c9e220bfcafa6267301d01bce09e65594c378c417349a372146ca35ae43021e492bc11f0c1229aa3aaf9bdebd0d614faf2b62eb49082eb5ae21b5f329de4edc2c0a5d2627c586fdba4b1d411205b23b06a1f95fe1df0b5fc99ce42", &(0x7f0000002900)="8067a5e7fe8e9389be4000933c84baa8879a8b6061be4e93dabda2c4bcc89adfdfd559e4dc04942bbfa6dac6b3e837ff02d7d62f3c208732d2b73ab5072d0884f596313234b732db6571dbe813294c05bfafbe2d517ac53c6d2d28007c06dd94f02cc7b0ddbb94694fa74653996aea915067316e77a9e1b986bf4be6edfad82904fd", 0x3, 0x0, 0x3}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b40)) capget(&(0x7f0000002b80)={0x20071026, r4}, &(0x7f0000002bc0)={0x0, 0xd3, 0x6, 0x0, 0x9, 0x8}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000002c00)={@mcast1, 0x0}, &(0x7f0000002c40)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000002c80)={@private0, 0x63, r8}) write$binfmt_script(r0, &(0x7f0000002cc0)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '/dev/vcs\x00'}], 0xa, "2396f056647d90c520e58f49091ba5b5854a3e8fbd485bdbfcc4108346aeb311cdad7ad2dc4f0378af9dcbaa828c9ea225bf5f1b"}, 0x54) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002f40)={r2, &(0x7f0000002d40)="d357e2cf93877675d6ccf3bb3e29dbc4b58761aa31a5ba83edea0dacdbf37c7df5ab7e67b165ee6d20e54cf6332d085d98bc4428e96e64b3a7cc4f1deddd1c0ec2bfe5daf0728e0ac3e3d823951ce348131f8b2a5870b79b55e018bbcf88ed752c55bc67b32f0aabf5368e7239ffc323a820f3cd5308166e12bb60d2c971c353102537518d3e36d1080f8da8c831a1ed2d9a06f771c948306fbcd99a10265da28e643de4876730e5ad353a669ce1f17e07ce3fb6c811d916d8dd5d1326dc182e9bfc9d8ec9565d56e656", &(0x7f0000002e40)=""/239}, 0x20) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002fc0), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000003080)={'syztnl1\x00', &(0x7f0000003000)={'syztnl1\x00', r8, 0x4, 0x17, 0x0, 0xa, 0x4f, @remote, @mcast1, 0x700, 0x707, 0x81, 0x1}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000003180)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x58, r9, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x880) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000003200)) 1m22.080832712s ago: executing program 34 (id=164): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x54b61000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10d}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x50002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x852}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x440400, 0x0) memfd_create(&(0x7f0000000380)='/dev/vcs\x00', 0x4) r4 = getpid() capset(&(0x7f00000003c0)={0x20080522, r4}, &(0x7f0000000400)={0x101, 0x7, 0x0, 0xf, 0xf, 0xc}) r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x4fd, 0xb, 0x1, {0x22, 0xd37}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x3, 0x6}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x7, 0x1, 0x26, 0x8, 0x4}, 0xc7, &(0x7f00000004c0)={0x5, 0xf, 0xc7, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xfa, 0x2, 0x0, 0xf, 0x7, [0x30, 0xff00]}, @generic={0x8f, 0x10, 0x1, "cf21fe6c5a3d6223b28939f89db3cedb60f9f1214f74fa4899747c6e849365acba7b6a3d93681b3e78a73b80de9de9753ed1755d03c57daad2d808d5aa73cdd9ff1c82598bc54ceca5c4ffdce02780f9eb9590641040ae9c1da04f44b2aa6b4d1937dee5c08030d32d17d7f8c400148c36452dbfb15f246f762c62f6eb5afbec927506e922d70fbb75039df9"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x62, 0x6, 0x5, 0x4, 0x9d}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c0dbbfe360bc53a8efa2cb5d48ea69bb"}]}, 0x4, [{0x93, &(0x7f00000005c0)=@string={0x93, 0x3, "f128ed720063c42d9b81fefe915a24aa417b9a93b8bde0d98fe61418efa0a6c0d4c5f0c221783c42e8758db5811941f8fac082c523e6d8ab3c569671ad767c2cf5769e51d806d262df2e1af2c602a534aa2a929432ff499d8d7a53c99d030ec045c144304d3b9419e77252a2a7cfe8d59bc0ac0e7421279ba9b432dc94756dcbc61012820fd242ed828933f514a293ffcf"}}, {0x4f, &(0x7f0000000680)=@string={0x4f, 0x3, "9d17857ab1e10375fb3370f115be7f40ee6a1b858de85f3b1f06679286169e7ab6849961951876b3927eeeabca0c348f5ac77f313a1f654fa62c7680c31957dbe94b2e7d854b4f7aaf4ad90840"}}, {0xa7, &(0x7f0000000700)=@string={0xa7, 0x3, "80d8eb3b5b2ee577c8e7ea5bd70c882f2300fd3ee2d7e686340eff8eb5e9621b4474400416b698aebeb95a74aa57fc7a2d92ea90325aade7949efeb24187cdee2e2a2e514503d72378dec3c4c2eb144900bcffc2f7618b3a426dcedbe6fb3bcf5f33431f4eeeb7709887deeb65f240beb64162edd1633ed297aedbafdda69388b22b510dc8433668a23bf30839f53c71561d7ebb38c3293e998dbc5bc600834443250803f1"}}, {0x7e, &(0x7f00000007c0)=@string={0x7e, 0x3, "a7c363c3e05e6fcb330fd1fd2e3dad17106d535f4924b31881c30e19fc41eda36ff1d0b3a8f47ec0df788853650a0df70f3c3cf9e47779d207f3ec5b646258577ecb8cf18d2d7aef57e3417bce016d477bba326e85a5f5202a133d057c23a7c721d2cc4028e66987ad979c9b7f9d5ca42bddd6b6d2f81ba42ae91f15"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000a80)={0x24, &(0x7f00000008c0)={0x20, 0xb, 0xca, {0xca, 0x8, "3719dafbd3dd98c8681b95af581ffaab6cb02e8e569cfe4bd0479e0e28ecb8d3e7bd2be724fa6e59cec71101f883d3206e9bfec076ca89c699174a9cfeff374de99489afcc5d665605ec51c261ec62bd637dd82a76439664746142116525b7e3dc287601e3cb5b6d78b33e930b71b9dc6a36944d3e20e9e65cf0807b9e759f0b7c73f41d62b49ce730d2aa612ac4c431e2e2c23b00e891486d51a6fb17d7b7ff50aee831350001e48898a852ca2bfa35f2e393d0e94b6e059f157cbc25c9f0d9d0241d8edd0e015f"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000a00)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0xa, "7b9b"}, @main=@item_4={0x3, 0x0, 0x8, "914c8116"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xda0}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x0, 0x16, 0x32, "ad999d142ab9811396991bfba899aaf546b96ea2afcf3fcba933da6a57d1309bcfa887be30839d7dcec44fe4d0695a547c9a"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0x74, "fe5a245ae08397d6e1f4bb9a4a52017b8a6bfd1085929e8f945768fdda5cbbeb3ac3cedfa56d35b2018a6dfdf41fd70570343a5cb8468f33a0c98d2c10a30352df8355f55a9d713498338d0296c891bd7119a67c19fb99a3b3c35a0e1fa28ca1f16b2a3d723aa617648a8e5439cf7f9fee96e9cf"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x9}}) syz_usb_connect$cdc_ecm(0x0, 0xd6, &(0x7f0000000c80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x1, 0x1, 0x81, 0x70, 0xf8, [{{0x9, 0x4, 0x0, 0x2e, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x3, 0x7, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x3, 0x7, 0x1, 0x5, 0x36}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @mdlm_detail={0x59, 0x24, 0x13, 0x0, "6c5deaceffe69ec3dcf2ecc2fb19472f00ee6607fb8090d1276948e1cd30adb880103ce59787a310353228ae6c7e37ab845e8d6b901e987c3abd00f5d0902c329f01db16a52db31f3de9abfa47ef339685964a6614"}, @mbim_extended={0x8, 0x24, 0x1c, 0xfd1d, 0x65, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x6, 0x5, 0x2}, @dmm={0x7, 0x24, 0x14, 0x800, 0xf11}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x258, 0xf, 0x18, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xb, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xc, 0x6, 0xba}}}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x250, 0x2, 0x8, 0xb, 0x10, 0x8}, 0x5, &(0x7f0000000dc0)={0x5, 0xf, 0x5}, 0xa, [{0xe3, &(0x7f0000000e00)=@string={0xe3, 0x3, "645858ee6b1fdaad4b7c9983b2ed95740059953443d79a985c4eb4ef3281f7a9138a000b17105240d8b4400f6240b9d0a57d31ce1b7ceeb9e2e82aab0fdc67620c0228dedfe737e7e7b9952c0e4397c92f921dd027511fe09d678f2b2731c5359d8f0ad20371d6569aa6335351539c6c05ebd87ac48fd2398b9775d302186b3916bcd56a094a215e6a48feab18a02b4a430e786e382f0a3940e7debcfa81d0512dd50f94fdb08fcc9460b8f5636ac75e5870b0e40d5615c1ea7867181bd38ecc2750dd57ef89854317412f7a72b13d012cf0a5bbfc97de5806d32118cbf0438ef7"}}, {0xc1, &(0x7f0000000f00)=@string={0xc1, 0x3, "9c040bea63b439e41331b916ba6842a7d2311f4ff27e2379e018762afb3c83207451350525dd533b9e5a4ea1928c7878b7b44529e4658f4cbd44163e036c55bba4db0a73673a9efd162f718cccd080000680159f61be4df36957134d351533f1dfb49e096d3ef5415a6ac8eb2eb14b3cd106e7cd585808012f5ac548da4dd116b827db1df761539179a602cd3dc35313aebbee22494388847b4ad9842384ff231d3ec9a92ff10ebf196009a6e808090b25380398fc1de8024c259132420ef3"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1c09}}, {0x9a, &(0x7f0000001040)=@string={0x9a, 0x3, "cc6c81186e78ee7a13aced3db229027e84d1a9d3ba51c2d5314d4645289ba3ba6ef1909a4c3c4fcaeee4d77ab06257db4401f547c39f0f347951b5fb6c04227ffbd803bf67bc846f1c0fe2a23e2502ddca39988229cbc2cbf949d4db3d3d586cd84f6bc9f88f5f3e982e2418aee33dea88c6bfe4f793f5e5fbf34eecda02084a6f5358a385f1acc83434c2120dcfdefcec44408e9ccd89a1"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x814}}, {0xe9, &(0x7f0000001140)=@string={0xe9, 0x3, "ef90624c54c4b9ce07008989bec321da99d025ea1d8280510a469e7530b45b7d1d256baf1475900c2ae24a3b8c3102d854d4a554866f2e31ab83415421c70a523e00eddcff27f4553fcd762225633185c8ef41f30cf198c40a6080cc7bb8af03695f13af17d8dd0cca4336e02951d73e848a44cf882046003f914f9608695c4c6e638d8a4d6ca621485d94d4ba76445b9ae46e9ab913ed90ef1bdbac9be9bc6f2e77ced94f1b570eb07c3c5550550b6c0170f68818cfd405450d06835b4d7b1da5d83f8cac446062f0aecb097fbcb5a75a527dd3777fc8a897caece469da2e81bb7cd6ecfcb91d"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x405}}, {0x1e, &(0x7f0000001280)=@string={0x1e, 0x3, "21f6b8b297e8fbf720009812a7ad83366efea8f0649f3b7c92d38539"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x44e}}]}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001400), 0x40080, 0x0) prlimit64(r4, 0x9, &(0x7f0000001440)={0x7fffffff, 0x2}, &(0x7f0000001480)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x15, 0x1b, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x1, 0xa, 0xa, 0x5, 0x80}, @generic={0x8, 0x2, 0xb, 0x1dd7, 0x2ed}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000015c0)='GPL\x00', 0x10001, 0x5c, &(0x7f0000001600)=""/92, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2, r0, 0x8, &(0x7f0000001680)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x2, 0x1, 0x2, 0x3}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000001700)=[{0x5, 0x2, 0x7}], 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000029c0)={r7, 0x0, 0x1000, 0x2f, &(0x7f0000001800)="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", &(0x7f0000002800)=""/47, 0xffffffff, 0x0, 0x9b, 0x82, &(0x7f0000002840)="c17ffe823fa417e0c0309ce1c6f7ad7bcd39b2988b9b38ddc5e65d451e5a1185757ba0d8dad5e86ede85c71af7a222326619f90aa13d5059b7c0572594e42153c9e220bfcafa6267301d01bce09e65594c378c417349a372146ca35ae43021e492bc11f0c1229aa3aaf9bdebd0d614faf2b62eb49082eb5ae21b5f329de4edc2c0a5d2627c586fdba4b1d411205b23b06a1f95fe1df0b5fc99ce42", &(0x7f0000002900)="8067a5e7fe8e9389be4000933c84baa8879a8b6061be4e93dabda2c4bcc89adfdfd559e4dc04942bbfa6dac6b3e837ff02d7d62f3c208732d2b73ab5072d0884f596313234b732db6571dbe813294c05bfafbe2d517ac53c6d2d28007c06dd94f02cc7b0ddbb94694fa74653996aea915067316e77a9e1b986bf4be6edfad82904fd", 0x3, 0x0, 0x3}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b40)) capget(&(0x7f0000002b80)={0x20071026, r4}, &(0x7f0000002bc0)={0x0, 0xd3, 0x6, 0x0, 0x9, 0x8}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000002c00)={@mcast1, 0x0}, &(0x7f0000002c40)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000002c80)={@private0, 0x63, r8}) write$binfmt_script(r0, &(0x7f0000002cc0)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '/dev/vcs\x00'}], 0xa, "2396f056647d90c520e58f49091ba5b5854a3e8fbd485bdbfcc4108346aeb311cdad7ad2dc4f0378af9dcbaa828c9ea225bf5f1b"}, 0x54) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002f40)={r2, &(0x7f0000002d40)="d357e2cf93877675d6ccf3bb3e29dbc4b58761aa31a5ba83edea0dacdbf37c7df5ab7e67b165ee6d20e54cf6332d085d98bc4428e96e64b3a7cc4f1deddd1c0ec2bfe5daf0728e0ac3e3d823951ce348131f8b2a5870b79b55e018bbcf88ed752c55bc67b32f0aabf5368e7239ffc323a820f3cd5308166e12bb60d2c971c353102537518d3e36d1080f8da8c831a1ed2d9a06f771c948306fbcd99a10265da28e643de4876730e5ad353a669ce1f17e07ce3fb6c811d916d8dd5d1326dc182e9bfc9d8ec9565d56e656", &(0x7f0000002e40)=""/239}, 0x20) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002fc0), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000003080)={'syztnl1\x00', &(0x7f0000003000)={'syztnl1\x00', r8, 0x4, 0x17, 0x0, 0xa, 0x4f, @remote, @mcast1, 0x700, 0x707, 0x81, 0x1}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000003180)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x58, r9, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x880) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000003200)) 55.161168003s ago: executing program 3 (id=321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@data_err_abort}, {@noinit_itable}, {@nouid32}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r7, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) unshare(0x22020600) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001c00070c00000000ffffffff07000000", @ANYRES32=r4, @ANYBLOB="020064000a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[], 0x48}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x6, "6f78c0fb"}, @global=@item_012={0x2, 0x1, 0x2, "0100"}, @main=@item_012={0x2, 0x0, 0x8, "b10a"}]}}, 0x0}, 0x0) 51.847018471s ago: executing program 3 (id=343): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x7, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0xfffffbffffffffff, 0x7753, 0x0, 0xfffffffffffffffa, 0x9111, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x7, 0x4, 0x7, 0xfffffffffffffffd, 0x2], 0xdddd0000, 0x20004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r6) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 51.805575811s ago: executing program 3 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000b000080230000000000ff7df5185f50a799cb67e1f8a51e27a1ac169e9e05f6d897510a8fd4a1feb646d2160f8302814ec6a0cf0809190c50c7b89d1a50ba5da65a15df7015e7d930337fafbe9a2837b08bb7a7a4b6d8f4b01ff496ffa18b28a5180bc2436727a39dd4abff228a779e571fc627c4107841530fda7a2741186fc65cea3e69b136a104002f425afbe1b8d29915706f41e8eedb31afb5bc337facbe5ca422fcf5088798173162fa2cd4941b1e8ff32314f5c86409bcabc02200d9fdca15cf3be1859119ca30d78c341b44b12b8dec39a0ca5a62875d2221056dc7e605dd5982c63646be1e557109cac69033a92ef4e2f299afb20f5fea824498db02eac6bfc516d93c73392b381743743b3451b85930851590bbd347f64daad878ffac90b7349388a220eac543a8f7bf9551571869f57b2bcc8de803940acf48c102b7d78eab8e4150b4a4ad46deb1bef4416dad12e95da9983c365c6f7a3de9e10191c1e73f74ddfe27f0ce4949c3b1e69f32d02e391c533e164065f8a52ef4fa1cd6423cfb07720f6ea2a5c678b7d699de4ca1ef30a47b61b6c3ca17d2bb9887f60682", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="32ec36c6a3e8bf7eb99380b1038d3f5cfcc9b1121e3acaa7015f9bd35e192b80"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000000101040000000000000000010000001800ef7f06000340ff0300000c00028005000104800c0002800500020006000000"], 0x3c}}, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000001010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000e523d98bf4db65960f5fa8000000000000000000005f0000000000000000000001100002800c0000800500010000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 50.862728027s ago: executing program 3 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10, 0x100000) (async) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10, 0x100000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) pread64(r0, &(0x7f0000000340)=""/87, 0x57, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x301800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r7) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x2f4, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe61a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfdda}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x34, 0x3, "9799f85f22148ac9bab977ec221b7c14c0a47f67b246936cce6ea4d9746418700fc3924f2f89218762a5f329fa6855ed"}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "546185d84fbc897e098beb09c9c7e65cb77d2b6bb36aa0e061a2fafa9688d7720c24eb11747124fbb082111a620b634c2f0013904211ed3f7d0253e50035cc9a009d7c50c20aa1fdb664040fe3222b57e4e71b3367926fbdeead9f460f4ce86b4e626a50205801c77c20039cfc69acffb99e9586fc1e15466b5f69c391d03a73e5a460d922886ccc26934d1c9fbd6b9df9bfc34acce29c2ea124ce63ab598c722f14310834"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3071}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x627}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) rmdir(&(0x7f00000001c0)='./file1\x00') (async) rmdir(&(0x7f00000001c0)='./file1\x00') mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x8, 0x1) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 50.694465047s ago: executing program 3 (id=357): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000002e6300000f00"/22, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0xf) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40040) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8a00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300ecff9400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000000, 0x0) syz_usb_disconnect(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000f5692456e5512bae0000000000000000002e53430a587e74a11646354eb2d30192e621fe27d8b4d61e0ca09c1c97668ff30adacbb6ce091b78046b4b8465d0cae99ad6ac36220e61810c9d20b932a6a97ff45724ecef365eb1d4d25a4913c4662140d268d9e1b090faa6e2c07351549e7ba44813b9e293ff8f4acc9300000000000000008f945260eaacdf5cd3a445211bf320441b42ad74bbc41d990924a4c6796c2f25b1d75b13935bd0409376e6e214c756304c0e2f43ee77ec18a54031e11b67b8b748b8cc9b5464470f8de73633", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 50.187001855s ago: executing program 3 (id=360): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r0}, 0xc) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r4 = dup2(r3, r3) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="adb443bf059b21fc9a7ea0fe4119f6df485984a1ac32ba07b5362b1305134c6052642ff14d19df8b397f0ac7c854ba594b14453ee75fe0492bbd3055af59edd9e38146edc43f7c1e656c8f6557e96e04dc67fe100b90bc979ea933a5e26369bd12254599672e6855b6332a725aa873d5221a1fbd949b8f1322627bd73d9f096715e8bf7e48e437ad860b7b94fd7ffe0ca01a3b9b1d45aa92daa7202025e039b970859d5b8a9464724d587ff73019c0b846c6abe39d5f6dcb3685a54d6b6bb2aa217d6b72439434e916bca7e4", @ANYRESOCT, @ANYRESOCT], 0x46) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000240)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r5, r6) getpid() waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000340)='./bus\x00', 0x0) 50.181714655s ago: executing program 35 (id=360): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r0}, 0xc) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r4 = dup2(r3, r3) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="adb443bf059b21fc9a7ea0fe4119f6df485984a1ac32ba07b5362b1305134c6052642ff14d19df8b397f0ac7c854ba594b14453ee75fe0492bbd3055af59edd9e38146edc43f7c1e656c8f6557e96e04dc67fe100b90bc979ea933a5e26369bd12254599672e6855b6332a725aa873d5221a1fbd949b8f1322627bd73d9f096715e8bf7e48e437ad860b7b94fd7ffe0ca01a3b9b1d45aa92daa7202025e039b970859d5b8a9464724d587ff73019c0b846c6abe39d5f6dcb3685a54d6b6bb2aa217d6b72439434e916bca7e4", @ANYRESOCT, @ANYRESOCT], 0x46) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000240)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r5, r6) getpid() waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000340)='./bus\x00', 0x0) 34.650953478s ago: executing program 0 (id=444): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x23108000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x0, &(0x7f00000002c0)={[], [], 0x2c}) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101000) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000300)=""/150) 34.314401306s ago: executing program 8 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x6, @empty, 0x5}, 0x1c) listen(r2, 0x0) r3 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000005}) epoll_pwait(r3, 0x0, 0x0, 0xfffffffa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r3, 0x0, 0x0, 0x7ffffffd) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_NAN(r4, 0x0, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000280)={&(0x7f0000000040)=""/58, 0x3a, 0x200000, 0x7}) dup(r7) lgetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00', &(0x7f0000000340)=""/178, 0xb2) 34.303794046s ago: executing program 0 (id=448): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@nojournal_checksum, 0x0}, {@noauto_da_alloc}, {@noload}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@acl}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$eJzs3MtvVNUfAPDvnbaU/oBfK754KaNobDRSWp4LF0A0YWNiojG4rG0hSAFDawKkkWIMJC40/AU+dib+Ba50Y9S40LiVuDUmxHQDujDX3Jk7ddrb6Ytpx9LPJ5nh3Nec8733HuY85jaAdaucvSURmyPil4jori7O3KFc/efu1MTQn1MTQ0mk6at/JJX97kxNDNV2rR23KV/oLUWU3k9iZzHbzrHLV84Ojo6OXMxX9I2X8tS5wdMjp0fODxw5cmB/1+FDAwebEmdWpjs73r2wa/uJN26+PHTy5pvffZGVN82318dR1VN537DoHNoKa8pRnnku6zy9+KKvCVvq0kl79l5qXWFYtOyuzS5XR6X+d0dbZamqO156r6WFA1ZUmqZpZ2Ht9HfZZFovSaoHpOm1FLgPJNHqEgCtUfuivzOV9VQnhor94Pvb7WNR6QFlcd/NX9Ut7ZUebLmn2jfqWKH8H4qIk5N/fZy9Ys5xCACA5vrqWMSN49V2R+1V3VKKR+r2+38+N9QTEQ9ExNaIeDBvvzwcUdn30YjYVnfMlkXMApRnLRfbPz915Yn65mrTZO2/F/K5rZntv+mS97TlS1sq8Xckp86MjuzLz0lvdHRmy/3Fj54eVvv6xZ8/apR/ua79l72y/Gttwbwcv7fPGqAbHhwfvNe4a25fq5zYq8X4k2hPaqmI7RGxYxmfn52zM89+vqvR9hnxZ3EW4v+w8Ye3L6NAs6SfRjxTvf6TMSv+yOf/ksr85Lm3+8YuX3n+TP38ZP/hQwMH+zbG6Mi+vtpdUfT9j9dfyZOFbsQ8179WNVZ0Ii27/v+b8/6fnrnsyVLT87VjS8/j+q0bDfs0y73/NySvVdK1+dlLg+PjF/sjNiSTxfUD/x57abBrxv5Z/L175q7/WyP+/iQ/bmdEZDfxYxHxeETszsv+REQ8GRF75on/2+NPvdWoC7lw/Csri394Sde/UeLoDxFzb2o7+82XhYw/KBfi74hG1/9AJdWbrxkeHN+4UFzzlbQ+cc8nEAAAANaA3RGxOZLS3nygaXOUSnv3RmyaHkEZG3/u1IV3zg9XnxHoiY5SbaSru248tD8fG86Ws6MG6paz7fsr48ZpmqZd2XLWfx/d1trQYd3b1KD+Z34rPtIC3G+WNI/W6Ik2YE2aXf9vLfrI5v8gA1hdTfgdDbBGqf+wfi26/q/UU3BAy8xV/69G3G1BUYBVNlf9f72w5uiqlAVYXfr/sH4tv/77MQCsdb7/YV1a1EPyy0hsPTHPPkn7ymTaOFGK+f8KQE9EbU2tTTP/B/5aimhOCduaGmnXjGtamnOfjdGMvKK04D7tS/hDDKubKP03ilFNdEbEAnfv9M12tZa4stIFq1SCz1r7vxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC9+ycAAP//rnPT9g==") r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './bus\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x3, 0x7f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x800) 33.302923232s ago: executing program 8 (id=450): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r5, 0x108, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004a000}, 0x1) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r5, 0x108, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004a000}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0, @ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a8500000005000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a8500000005000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x13) (async) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdir(&(0x7f0000000440)='./file1\x00', 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000530410002dbd7000fddbdf25f0e796891ed8c4a6b2381ba828678d7352caab79ee1847dc5ea597b03922c9cefe0e1e7d93cce0e6f308a41d7e127a739e3ad82c7915440192250a934a76ae5c580cc0260e56167e81157d999deab998ffaf8a414b7c7790bf224054b75f9922c62085daf541a80a654e66fda4dcfe2f6192acaebb5e71fb40c6ec607c190e83793a284d12de57a2b9196e10f478c93c268711166be7325cdb4f2c0e9a6165a54476509db520d61bfc241706e67fb2e7288c65ba03a851fe14325b7abc96cd8e2c1ba6b76e4cc2365599281931ff75891b97000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8090) (async) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000530410002dbd7000fddbdf25f0e796891ed8c4a6b2381ba828678d7352caab79ee1847dc5ea597b03922c9cefe0e1e7d93cce0e6f308a41d7e127a739e3ad82c7915440192250a934a76ae5c580cc0260e56167e81157d999deab998ffaf8a414b7c7790bf224054b75f9922c62085daf541a80a654e66fda4dcfe2f6192acaebb5e71fb40c6ec607c190e83793a284d12de57a2b9196e10f478c93c268711166be7325cdb4f2c0e9a6165a54476509db520d61bfc241706e67fb2e7288c65ba03a851fe14325b7abc96cd8e2c1ba6b76e4cc2365599281931ff75891b97000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8090) bpf$PROG_LOAD(0x5, 0x0, 0x0) 33.040736191s ago: executing program 0 (id=453): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x40, &(0x7f0000000040)}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_emit_ethernet(0x3a, 0x0, 0x0) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bf"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000ef0000000000000000000040000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x80) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r7, 0x0, r8, 0x0, 0x10000000000016, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 32.086899498s ago: executing program 0 (id=457): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x1502, &(0x7f0000002a80)="$eJzs3Qu0jtX2MPA511oPm6Q3yX3NNR/e5LJIklyS5JIkSZLklpAkSRKSW25JSELuSe4hucVO7vdb7klyJEkSkluyvqFOxzn/zn90znfO//P/zp6/MdZ41xzrmetZ65177/d5njH23t+2H1S5bpUKtZkZ/iX460s3AEgBgL4AcA0ARABQIkuJLJfGM2js9q+dRPx7PTT1Sq9AXElS/7RN6p+2Sf3TNql/2ib1T9uk/mmb1D9tk/oLkZZtmZbzWmlpt/3rz/9Tfn2R5///H5LP/7RN6v+f5lSGf+Zoqf9/koshhH8uQ+qftkn90zapf9om9U/bpP5pm9RfiLTsSj9/lnZl25X++hNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIkTacDZcZAPitf6XXJYQQQgghhBBCiH+fkP5Kr0AIIYQQQgghhBD/8xAUaDAQQTpIDymQATLCVZAJrobMcA0k4FrIAtdBVrgeskF2yAE5IRfkhjxggcABQwx5IR8k4QbIDzdCASgIhaAweCgCReEmKAY3Q3G4BUrArVASboNSUBrKQFm4HcrBHVAe7oQKcBdUhEpQGarA3VAV7oFqcC9Uh/ugBtwPNeEBqAUPQm14COrAw1AXHoF68CjUhwbQEBpB4/+r/BehM7wEXaArdIPu0ANehp7QC3pDH+gLr0A/eBX6w2swAAbCIHgdBsMbMATehKEwDIbDWzACRsIoGA1jYCyMg7dhPLwDE+BdmAiTYDJMgakwDabDezADZsIseB9mwwcwB+bCPJgPC+BDWAiLIBU+gsXwMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIFPYCtsg+2wA3bCLtgNn8Ie+Az2wuewD774J/PP/Jf8DggIqFChQYPpMB2mYApmxIyYCTNhZsyMCUxgFsyCWTErZsNsmANzYC7MhXkwDxISMjLmxbyYxCTmx/xYAAtgISyEHj0WxaJYDG/G4lgcS2AJLIklsRSWxtJYFstiOSyH5bE8VsAKWBErYmWsjHfj3XgPVsNqWB2rYw2sgTWxJtbCWlgba2MdrIN1sS7Ww3pYH+tjQ2yIjbExNsEm2BSbYnNsji2wBbbEltgKW2FrbI1tsA22xbbYDtthe2yPHbAjdsQX8UV8CV/CrlhRdcce2AN7Yk/sjX2wD76C/fBVfBVfwwE4EAfh6/g6voFD8DQOxWE4HIdjOTUSR+FoZDUWx+E4HI/jcQJOwIk4CSfhFJyK03A6TscZOBNn4vs4Gz/AD3AuzsX5uAAX4EJchKmYiovxDC7BpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsZP8BPchttwB+7AXbgLP8VP8TP8DAfgPtyH+3E/HsADeBAP4iE8hIfxMB7BI3gUj+IxPIbH8QSexBN4Ck/haTyDZ/EsnsfzeAEv4EW8eOmbX11ilFHpVDqVolJURpVRZVKZVGaVWSVUQmVRWVRWlVVlU9lUDpVD5VK5VB6VR5EixSpWeVVelVRJlV/lVwVUAVVIFVJeeVVUFVXFVDFVXBVXJdStqqS6TZVSpVUzX1aVVeVUc19e3akqqAqqoqqkKqsqqoqqqqqqaqqaqq6qqxqqhqqpHlC1VHfsjQ+pS5WpqwZiPTUI66sGkKIaqTfwMdVEDcGmqplqrp5Qw3AotlRNfCv1tGqtRmEb9awajc+pdmostlcvqA6qo+qkXlSdVVPfRXVVE7G76qGmYE/VS/VWfdQMrKQuVayyek0NUAPVIPW6mo9vqCHqTTVUDVPD1VtqhBqpRqnRaowaq8apt9V49Y6aoN5VE9UkNVlNUVPVNDVdvadmqJlqlnpfzVYfqDlqrpqn5qsF6kO1UC1SqeojtVh9rJaopWqZWq5WqJVqlVqt1qi1ap1arzaojWqT2qy2qE/UVrVNbVc71E61S+1Wn6o96jO1V32u9qkv1H71J3VAfakOqq/UIfW1Oqy+UUfUt+qo+k4dU9+r4+qEOql+UKfUj+q0OqPOqnPqvPpJXVA/q4sqKNColdba6Ein0+l1is6gM+qrdCZ9tc6sr9EJfa3Ooq/TWfX1OpvOrnPonDqXzq3zaKtJO8061nl1Pp3UN+j8+kZdQBfUhXRh7XURXVTfpIvpm3VxfYsuoW/VJfVtupQurcvosvp2XU7focvrO3UFfZeuqCvpyrqKvltX1ffoavpeXV3fp2vo+3VN/YCupR/UtfVDuo5+WNfVj+h6+lFdXzfQDXUj3Vg/ppvox3VT3Uw310/oFvpJ3VI/pVvpp3Vr/Yxuo5/VbfVzup1+XrfXL+gOuqPupH/WF3XQXXRX3U131z30y7qn7qV76z66r35F99Ov6v76NT1AD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYPU6/rcfrd/QE/a6eqCfpyXqKnqqn6d5/nmnWP5D/zt/J7//L2TfrLfoTvVVv09v1Dr1T79K79W69R+/Re/VevU/v0/v1fn1AH9AH9UF9SB/Sh/VhfUQf0Uf1UX1MH9PH9Ql9Tv+gT+kf9Wl9Rp/R5/R5fV5f+PN7AAaNMtoYE5l0Jr1JMRnMuRBCJnO1yWyuMQlzrclirjNZzfUmm8lucpicJpfJbfIYa8g4wyY2eU0+kzQ3mPzmRlPAFDSFTGHjTRFT1Nz0L+f/vfVlNFeZ39bX2DQ2TUwT09Q0Nc1Nc9PCtDAtTUvTyrQyrU1r08a0MW1NW9POtDPtTXvTwXQwnUwn09l0NgEAuplupod52fQ0vUxv08f0Na+Yfqaf6W/6mwFmgBlkBpnBZrAZYoaYoWaoGW6GmxFmhBllRpkxZowZZ8aZ8Wa8mWAmmIlmoplsJpupZqqZbqabGWaGmWVmmdlmtplj5ph5Zp5ZYBaYhWahSTWpZrFZbJaYpWapWW6Wm5VmpVltVpu1Zq1Zb9abjWajWWLgbEgHAGG72W52mp1mt9lt9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplD5rA5bI6YI+aoOWqOmWPmuDluTpqT5pQ5ZU6b0+asOWvOm/PmgrlgLpqLly77IhWpyEQmSheli1KilChjlDHKFGWKMkeZo0SUiLJEWaKs0fVRtih7lCPKGeWKckd5IhtR5CKO4ihvlC9KRjdE+aMbowJRwahQVDjyUZGoaHRTVCy6OSoe3RKViG6NSka3RaWi0lGZqGx0e1QuuiMqH90ZVYjuiipGlaLKUZXo7qhqdE9ULbo3qh7dF9WI7o9qRg9EtaIHo9rRQ1Gd6OGobvRIVC96NKofNYgaRo2ixv/W+UM4nf1x38V2td1sd9vDvmx72l62t+1j+9pXbD/7qu1vX7MD7EA7yL5uB9s37BD7ph1qh9nh9i07wo60o+xoO8aOtePs23a8fcdOsO/aiXaSnWyn2Kl2mp1u37Mz7Ew7y75vZ9sP7Bw7186z8+0C+6FdaBfZVPuRXWw/tkvsUrvMLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Cd2q91mt9sddqfdZXfbT+0e+5ndaz+3++wXdr/9kz1gv7QH7Vf2kP3aHrbf2CP2W3vUfmeP2e/tcXvCnrQ/2FP2R3vanrFn7Tl73v5kL9if7UUbLl3cX/p4J0OG0lE6SqEUykgZKRNlosyUmRKUoCyUhbJSVspG2SgH5aBclIvyUB66hIkpL+WlJCUpP+WnAlSAClEh8uSpKBWlYlSMilNxKkElqCSVpFJUisrQpfuR2+kOuoPupDvpLrqLKlElqkJVqCpVpWpUjapTdapBNagm1aRaVItqU22qQ3WoLtWlelSP6lN9akgNqTE1pibUhJpSU2pOzakFtaCW1JJaUStqTa2pDbWhttSW2lE7ak/tqQN1oE7UiTpTZ+pCXagbdaMe1IN6Uk/qTb2pL/WlftSP+lN/GkADaBANosE0mIbQEBpKw2g4vUUjaCSNotE0hsbSOBpH42k8TaAJNJEm0mSaTFNpKk2n6TSDZtAsmkWzaTbNoTk0j+bRAlpAC2khpVIqLabFtISW0DJaRitoBa2iVbSG1tA6WkcbaANtok20hbbQVtpK22k77aSdtJt20x7aQ3tpL+2jfbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO40k6SafoFJ2m03SWztJ5+oku0M90kQKluAwuo7vKZXJXu8zuGpfiMnQFgL/EOVxOl8vldnmcddlc9r+JyTlXwBV0hVxh510RV9Td9Lu4lCvtyriy7nZXzt3hyv8ururucdXcva66u89VcXf/TVzD3e9qukdcLfeoq+0auDqukavrHnH13KOuvmvgGrpGroV70rV0T7lW7mnX2j3zu3ihW+TWuLVunVvv9rjP3Fl3zh1x37rz7ifXxXV1fd0rrp971fV3r7kBbuDv4uHuLTfCjXSj3Gg3xo39XTzZTXFT3TQ33b3nZriZv4sXuA/dbJfq5ri5bp6b/0t8aU2p7iO32H3slrilbplb7la4lW6VW/2XtS53G90mt9ntdp+6rW6b2+52uJ1u1y/xpX3sdZ+7fe4Ld9h94w64L91Bd9Qdcl//El/a31H3nTvmvnfH3Ql30v3gTrkf3Wl35pf9X9r7D+5nd9EFB4ysWLPhiNNxek7hDJyRr+JMfDVn5ms4wddyFr6Os/L1nI2zcw7Oybk4N+dhy8SOmWPOy/k4yTdwfr6RC3BBLsSF2XMRLso3cTG+mYvzLVyCb+WSfBuX4tJchsvy7VyO7+DyfCdX4Lu4IlfiylyF7+aqfA9X43u5Ot/HNfh+rskPcC1+kGvzQ1yHH+a6/AjX40e5PjfghtyIG/Nj3IQf56bcjJvzE9yCn+SW/BS34qe5NT/DbfhZbsvPcTt+ntvzC9yBO3InfpE780vchbtyN+7OPfhl7sm9uDf34b78CvfjV7k/v8YDeCAP4td5ML/BQ/hNHsrDeDi/xSN4JI/i0TyGx/I4fpvH8zs8gd/liTyJJ/MUnsrTeDq/xzN4Js/i93k2f8BzeC7P4/m8gD/khbyIU/kjXswf8xJeyst4Oa/glbyKV/MaXsvreD1v4I28iTfzFv6Et/I23s47eCfv4t38Ke/hz3gvf877+Avez3/iA/wlH+Sv+BB/zYf5Gz7C3/JR/o6P8fd8nE/wSf6BT/GPfJrP8Fk+x+f5J77AP/NFDgwxxirWsYmjOF2cPk6JM8QZ46viTPHVceb4mjgRXxtnia+Ls8bXx9ni7HGOOGecK84d54ltTLGLOY7jvHG+OBnfEOePb4wLxAXjQnHh2MdF4qLxTXGx+Oa4eHxLXCK+NS4Z3xaXikvHZeKy8e1xufiOuHx8Z1whviuuGFeKK8dV4rvjqvE9cbX43rh6fF9cPL4/rhk/ENeKH4xrxw/FdeKH47rxI3G9+NG4ftwgbhg3ihvHj8VN4sfjpnGzuHn8RNwifjJuGT8Vt4qfjlvHz/zheLe4e9wjfjl+OQ7hXj0vOT+5IPlhcmFyUTI1+VFycfLj5JLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5OZkCFXSg0evvPbGRz6dT+9TfAaf0V/lM/mrfWZ/jU/4a30Wf53P6q/32Xx2n8Pn9Ll8bp/HW0/e+QwQ+7w+n0/6G3x+f6Mv4Av6Qr6w976IL+ob+ca+sW/iH/dNfTPf3D/hn/BP+if9U/4p/7Rv7Z/xbfyzvq1/zrfzz/vn/Qu+g+/oO/kXfWf/ku/iu/puvpvv4Xv4nr6n7+17+76+r+/n+/n+vr8f4Af4QX6QH+wH+yF+iB/qh/rhfrgf4Uf4UX6UH+PH+HF+nB/vx/sJfoKf6Cf6yX6yn+qn+ul+up/hZ/hZfpaf7Wf7OX6On+fn+QV+gV/oF/pUn+oX+8V+iV/il/llfoVf4Vf5VX6NX+PX+XV+g9/gN/lNfovf4rf6rX673+53+p1+t9/t9/g9fq/f6/f5fX6/3+8P+AP+oP/KH/Jf+8P+G3/Ef+uP+u/8Mf+9P+5P+JP+B3/K/+hP+zP+rD/nz/uf/AX/s7/ogx+XeDsxPvFOYkLi3cTExKTE5MSUxNTEtMT0xHuJGYmZiVmJ9xOzEx8k5iTmJuYl5icWJD5MLEwsSqQmPkosTnycWJJYmliWWJ5YkViZCCH31jjkDflCMtwQ8ocbQ4FQMBQKhYMPRULRcFMoFm4OxcMtoUS4NZQMt4VSoXQoEx4N9UOD0DA0Co3DY6FJeDw0Dc1C8/BEaBGeDC3DU6FVeDq0Ds+ENuHZ0DY8F9qF50P78ELoEDqGTuHF0Dm8FLqErqFb6B56hJdDz9Ar9A59Qt/wSugXXg39w2thQBgYBoXXw+DwRhgS3gxDw7AwPLwVRoSRYVQYHcaEsWFceDuMD++ECeHdMDFMCpPDlDA1TAvTw3thRpgZZoX3w+zwQZgT5oZ5YX5YED4MC8OikBo+CovDx2FJWBqWheVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS/gkbA3bwvawI+wMu8Lu8GnYEz4Le8PnYV/4IuwPfwoHwpfhYPgqHApfh8Phm3AkfBuOhu/CsfB9OB5OhJPhh3Aq/BhOhzPhbDgXzoefwoXwc7gov7MmhBBCCPEP0X8w3v2/yVF/7vcAgKu35Tz0X8c3ZPu13yt9rhYJAHi6a/uHfmsVK3br1u3Pxy7REOWbCwCJy/np4HK8FJrDk9AKmkGxv4yn/NW51uXteJ7/YP7krQAZ/yrnUv5v8eX5b/67+++lRs7+w/nnAhTIdzknA1yOL89f/L+ZP3uTP5g/w5fjAJr+VU4muBxfnr8oPA7PQKu/OVIIIYQQQgghhPhVL1Wm7R/d3166P89lLuekh8vx37s/F0IIIYQQQgghxP8uz3Xs9NRjrVo1ayud/6lOuObXt/p/y3qkI51/oHOlfzIJIYQQQggh/t0uX/Rf6ZUIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBp1/+LPyf227n+6H8NCiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEP+p/k8AAAD///wROr8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$pidfd(0xffffffffffffff9c, 0x0, 0x50000, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) r6 = syz_open_dev$loop(&(0x7f0000001580), 0x7, 0x82480) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b460a1a93c5209000000000000003d458dd4992861ac00", "90be8b040000140008000000007f00"}}) 32.005375498s ago: executing program 8 (id=458): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x63}, [@func={0x85, 0x0, 0x1, 0x6400, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) (async) write$binfmt_aout(r2, 0x0, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) timer_create(0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x140001, 0x0, [0x0, 0x611, 0x8000000000000000, 0x2, 0x9fd1, 0xd, 0xa, 0x9]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 32) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x39, 0x61, 0x66, 0x33, 0x61, 0x61, 0x34, 0x62, 0x1, 0x30, 0x64, 0x34, 0x65, 0x32, 0x34, 0x63]}, &(0x7f00000003c0)={0x0, "a870000cdb3706734ea8a7c624c5408c95f5745a57daff629177d8aa1ed853aa3097747642b6b3c190359cd345a4413bf0c81fd33f6f9d69b6fb86e4eb2e0d28", 0x33}, 0x48, 0xfffffffffffffffe) (rerun: 32) keyctl$describe(0x6, r6, &(0x7f0000000500)=""/62, 0x3e) (async) close(r1) (async) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, '.yz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x50]}, 0x30) 31.936204597s ago: executing program 8 (id=460): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nojournal_checksum}, {@nombcache}, {@errors_remount}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bh}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfa, 0x55d, &(0x7f0000000980)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQggR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68LIym9l00+wmabJtttnPByZ5b2Z237x983282TfLBDCwRrM/hYjXIuK7JOJo27Zi5BtHV/ZbfnxzKluSaDQ+/zuJJF/X2j/J/x9uZYoRv38Tcbqwvtza4tJsuVJJ5/P8WH3u2lhtcenMlbnyTDqTXp2YnDz37uTEB++/17O6vnXx3x8/u//xuW9PLv/w68Njd5M4H0fybe312IFb7ZnRGM0/k+E4/9SO4z0orJ8ku30AbMtQHufDkfUBR2Moj3pg7/s6IhrAgErEPwyo1jigdW3fo+vgl8ajj1YugNbXv7jy3UgcaF4bHVpO1lwZZde7Iz0oPyvjt7/u3c2W6N33EACbunU7Is4Wi+v7vyTv/7bv7Bb2eboM/R+8OPez8c/bncY/hdXxT3QY/xzuELvbsXn8Fx72oJiusvHfhx3Hv6uTViNDee6V5phvOLl8pZJmfdurEXEqhvdn+Y3mc84tP2h029Y+/suWrPzWWDA/jofF/WtfM12ul3dS53aPbke83nH8m6y2f9Kh/bPP4+Lat2rs71LGifTeG93K37z+z1fjl4g3O7b/kxmtZOP5ybHm+TDWOivW++fOiT+6lb/b9c/a/9DG9R9J2udra89exs8H/ku7bdvu+b8v+aKZ3pevu1Gu1+fHI/Yln65fP/Hkta18a/+s/qdObtz/dTr/D0bEl1us/53jd7ru2g/tP/1M7f/siQeffPVTt/K31v7vNFOn8jVb6f+2eoA7+ewAAAAAAACg3xQi4kgkhdJqulAolVbu7zgehwqVaq1++nJ14ep0NH8rOxLDhdZM99G2+yHG8/thW/mJp/KTEXEsIr4fOtjMl6aqlendrjwAAAAAAAAAAAAAAAAAAAD0icNdfv+f+XNot48OeO7WPPLbk9xhoGz6yP9ePOkJ6Eubxj+wZ4l/GFziHwaX+IfBJf5hcIl/GFziHwaX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunjhQrY0lh/fnMry09cXF2ar189Mp7XZ0tzCVGmqOn+tNFOtzlTS0lR1brP3q1Sr18YnYuHGWD2t1cdqi0uX5qoLV+uXrsyVZ9JL6fALqRUAAAAAAAAAAAAAAAAAAAC8XGqLS7PlSiWd39OJoby2/XI8eylR7I/DkOhxYpc7JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo838AAAD//xBfNi0=") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x200, 0x52) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x42) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 31.647134077s ago: executing program 8 (id=463): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8238ca474c97243b7d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d64200000000b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322", 0x8f}, {&(0x7f0000000580)="8d039b2a7adc54fb5bb208", 0xb}], 0x2, 0x0, 0x0, 0x2400c800}, 0x4000000) close(r1) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a050000000000000001090224000100000000090400000103000000092100400001220b000905810300"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000003f80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000007100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80094}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4004}}], 0x2, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = io_uring_setup(0x195e, &(0x7f0000000000)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220389736a7e3d5994271e9b38214ab7640000401b9ea3730418831ebcce36"], 0x0}, 0x0) 31.450823156s ago: executing program 8 (id=464): r0 = socket(0x10, 0x8000000803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x64, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dccd5995f6a0c7e8074ce379ef54cb9419ede0b067a95b2d189a043ed366cfa5bdbb0e33"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = gettid() r7 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) tkill(r6, 0xb) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r14, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1000}]}}}]}, 0x3c}}, 0x0) 31.394644305s ago: executing program 36 (id=464): r0 = socket(0x10, 0x8000000803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x64, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dccd5995f6a0c7e8074ce379ef54cb9419ede0b067a95b2d189a043ed366cfa5bdbb0e33"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = gettid() r7 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) tkill(r6, 0xb) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r14, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1000}]}}}]}, 0x3c}}, 0x0) 31.226881895s ago: executing program 0 (id=468): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '9J\t', 0x0, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2}}}}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x71f38175fb7fed84) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0), 0xfecc) 31.163067654s ago: executing program 0 (id=469): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x22020400) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 31.151751015s ago: executing program 37 (id=469): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x22020400) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 18.9309335s ago: executing program 2 (id=556): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f00000004c0)=""/181}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', r4}, 0x18) listen(r6, 0x9) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file2\x00', 0x19) utimensat(r0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000280)={{0x77359400}, {r7, r8/1000+60000}}, 0x100) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @empty, 0x7f}, 0x1c) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x0) getrusage(0xfffffffffffffffe, 0x0) openat(r0, &(0x7f0000000080)='./file3\x00', 0x0, 0x0) 18.255182017s ago: executing program 2 (id=559): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000072bd27d901ef7b2b764f1e6d4e89c9193cf44e4a4be8912d01b3ee527e95069c2224fb"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40040, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000340)}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=r2, @ANYBLOB="0040040000c1000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00cd5d0cd77ad5cc37d6000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) 18.163716207s ago: executing program 2 (id=560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bd080000000000007b8af8ff00000f00000000000000800007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000009500ecffffadff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000280)=""/230, &(0x7f0000000000)=0xe6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x0, 0x0, {0x5}}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r6, 0x400454cd, 0x301) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e975bebe0c8dcba86ebdbd1de034c492086b36d1448f000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18.022887646s ago: executing program 2 (id=561): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x200010, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@nojournal_checksum}]}, 0xfe, 0x569, &(0x7f0000001500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket(0x10, 0x80002, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000.u']) write$FUSE_BMAP(r7, &(0x7f00000003c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r7, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x10}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3700000000080003000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c009900030000000000000010001d800c00008008000d8004000280"], 0x38}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 17.854084946s ago: executing program 2 (id=563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) uname(0xfffffffffffffffc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='net_dev_xmit\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000004c0)={0x4f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = eventfd2(0x7a49, 0x80800) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000080)={0x2, r9}) poll(&(0x7f0000000000)=[{r5}, {r9, 0x40}, {r8, 0x20}], 0x3, 0x2) mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x800000, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40100001300010226bd7000fcdbdf25ffffffff000000000000000000000000fc0100000000000000000000000000004e23fffa4e2000060200202000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="87ae000000000000090000000014000006000000000000000500000000000000080000000000000008000000000000008100000000000000030000000000000004000000000000000080090000000000ffff000000000000ffffffff00000000040000000000000002010702000000008400050000000000000000000000000000000001000004d52b0000000a000000000000000000000000000000000000010435000001033a00080000000080000001800000ac141432000000000000000000000000000004d43300000000000000fc01000000000000000000000000000104350000038d720000000000220ad51915000000760008"], 0x1b4}}, 0x0) 16.800959522s ago: executing program 2 (id=570): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000002540)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRESOCT], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES32=r3, @ANYRES32=r0], &(0x7f0000002180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000020c0)=ANY=[@ANYBLOB="340000000301010200400000000000005a120000080008400000010108001a40ffffffff08000340000024020800000000000000936b"], 0x34}, 0x1, 0x0, 0x0, 0x30000045}, 0x84) r6 = syz_mount_image$fuse(0x0, 0x0, 0x8000, &(0x7f00000023c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC, @ANYBLOB="2c67a69aef75775f69643d96e0197fef3b2d04816b6bc9ccf74ffa23eda6274dde2a8c2d9189ba0fe8830463c3c9ae5407bec2a6d8b361c557f0a8f217d19c4eebec343d73d8a09f135c91202b346b7f9a237c963935ad6450d489ec125727247231b41d2b533a9d10edb542fb162ea36e", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="4400000010000104000000000000000000000000afb29b80acdabb727ff0168e92fc9e689babc326ad14ea90e6f3165b3e41facdd1d12fc008533d2eb12bcc8cd2b6414b1047fe92bcce848200000000edd4bd9aac91fe5102efef151ce5b8dd498e", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017", @ANYRES8], 0x44}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r8 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000002100)='./file2\x00', 0x10, &(0x7f0000002240)=ANY=[@ANYRES8=r4, @ANYBLOB="c1c9ff4f7a23e4decfc83b32d4d7b31d0985f63966b61384573ae7ba68a309d3187575f227c2c6fd773b3e15bd7be7c1c4f662bfc0d8612e3b256dec83426eb02cf46d0132af1413016b222566738ea0b61d668fca96c39b69a38059e1209c49ada71d9e58476503ebcabfc137", @ANYRESDEC=r7, @ANYRESOCT], 0xd, 0x2ba, &(0x7f00000002c0)="$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") r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001900010000000000000000000a00000000000009002e000008001e000002000014000500fc00000000004a6fd595e23608390001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000021c0)="6094ba06ef07ad4a20237b3b77fca423e2e3", 0x12}], 0x1, &(0x7f0000002700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c0000000000000001000000010000009f2110c949d55025058e72ffb9a71952f2b5f09900148b169bed0739ddc02a646cb870944e7664fdc8a03c8fb6a8cfa026447be17cefcef9116ce3d5c978fbbc2ad3aff1bf7478eba63aa814fce966b20ce4ecf5c7784f10433ab0f258fc844f6e65eaa67158e299cb9eda6473bb702a9985c723b298207fef5fd1382f106d1a06f2db6894d7a3529335aaf0cf1149b7addee44e09ef0ca7043775e8e06203df4a90de1c4c39ac5b0ba7934b9fe54d94ff3f46b43b3f67667c68922720bc6d110cd9febec180b12dea17b44eacfc52e4ed1dfd505b3398e336830c8efeee01be95a3a7e9bf1eaeef", @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x54}}], 0x1, 0x24000040) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000000080)={0x2020}, 0x2020) 16.799568102s ago: executing program 38 (id=570): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000002540)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRESOCT], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES32=r3, @ANYRES32=r0], &(0x7f0000002180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000020c0)=ANY=[@ANYBLOB="340000000301010200400000000000005a120000080008400000010108001a40ffffffff08000340000024020800000000000000936b"], 0x34}, 0x1, 0x0, 0x0, 0x30000045}, 0x84) r6 = syz_mount_image$fuse(0x0, 0x0, 0x8000, &(0x7f00000023c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC, @ANYBLOB="2c67a69aef75775f69643d96e0197fef3b2d04816b6bc9ccf74ffa23eda6274dde2a8c2d9189ba0fe8830463c3c9ae5407bec2a6d8b361c557f0a8f217d19c4eebec343d73d8a09f135c91202b346b7f9a237c963935ad6450d489ec125727247231b41d2b533a9d10edb542fb162ea36e", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="4400000010000104000000000000000000000000afb29b80acdabb727ff0168e92fc9e689babc326ad14ea90e6f3165b3e41facdd1d12fc008533d2eb12bcc8cd2b6414b1047fe92bcce848200000000edd4bd9aac91fe5102efef151ce5b8dd498e", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017", @ANYRES8], 0x44}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r8 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000002100)='./file2\x00', 0x10, &(0x7f0000002240)=ANY=[@ANYRES8=r4, @ANYBLOB="c1c9ff4f7a23e4decfc83b32d4d7b31d0985f63966b61384573ae7ba68a309d3187575f227c2c6fd773b3e15bd7be7c1c4f662bfc0d8612e3b256dec83426eb02cf46d0132af1413016b222566738ea0b61d668fca96c39b69a38059e1209c49ada71d9e58476503ebcabfc137", @ANYRESDEC=r7, @ANYRESOCT], 0xd, 0x2ba, &(0x7f00000002c0)="$eJzs3cFqK1UYAOB/kjSNukgRN4rggC5clVu3bhrlCmJXSgR1ocF7L0gSLtwLASuYdtUnEFe+gE/gI7hx4xsIbgVx0y4qI5OZaRI6qVHTFur3rQ7nnP+fP+eUdBHy57OXx8MHj5M4Pv0lOp0kGvuxH2dJ7EQjKkfRCgDg7jjLsvg9i4jk6B9GthrXVBIAcM2K//+F264FALgZH3z08Xu9g4P776dpJ17snkz6SUSMTyb9Yr33KL6IUTyMe9GN84jsQjF+592D+9FKczvx2ng66eeR409/KvP3fouYxe9FN3bq4/fSwkL8dNLfimcjjd6jrarUbrxQH/9GTXz02/H6qwv170Y3fv48HscoHkQeO4//ei9N386+Of3qk/wxeXzSiP72bF/u29nHH1nzxi8HAAAAAAAAAAAAAAAAAAAAAIA7azdNk6J9z6x/Tz5V9t9pns/Wd9PKYn+f7/8o45MqUdEfKIuyRc80i++q/jr30jTNyo3z/j6teKnlhwUAAAAAAAAAAAAAAAAAAAAg9/TLw+FgNHr4ZCODqhtA9bX+f5tnf2HmlTgcDpqrE26v/6zFbgN5rVdujlYrNnQsfzd4Jq9n45m355f7YRSD6mI2+qzn3yqSHg4HablUHfJwkES7OvD68E51cT8sLrVjeXNykXDdwrLZn8R5tnynnYtSl6PaGzqN9nO1S39mWbZenjd/Le6onElmLTbWe/pWOah9gfmgc/nef1ydcOVbRvM/veEAAAAAAAAAAAAAAAAAAAArzb/0W7N4fGVo49qKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAbNv/9/2rQiYjlmUuDaRlctyeWZ9rx5Oktv0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//yMDSh4=") r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001900010000000000000000000a00000000000009002e000008001e000002000014000500fc00000000004a6fd595e23608390001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000021c0)="6094ba06ef07ad4a20237b3b77fca423e2e3", 0x12}], 0x1, &(0x7f0000002700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x54}}], 0x1, 0x24000040) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000000080)={0x2020}, 0x2020) 8.430962961s ago: executing program 9 (id=615): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10602, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000040), 0x1, 0x4f3, &(0x7f0000000d40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r2}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000740)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESHEX, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc7ac5b1b113e1119b83f1cf9f686b3dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06fb302b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156791f49bf9e904cf364616ba0d1bf1"], 0x1, 0x29b, &(0x7f0000000480)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000017e2dd086307802040d9010203010902120001000000000904000000ffe46000a787efc1ce7aa903ccf7f27e9e4479d07315a1f4ef9f707638db965a8bb1bdab81e6990fc18909d1ea9127a2d5c780cfc3d5e881043e1b838797f00105950ce75e5812d1f281305e5d788b9d4a8fe420f91ad0bc924c85e17e55260c444b9d1c517ef79417"], 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e, 0x80000) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 5.724128612s ago: executing program 9 (id=627): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)='devpts\x00', 0x200468, &(0x7f0000000700)='lowerdir') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) eventfd2(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}}}, 0x10, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5.28818773s ago: executing program 1 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c40)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47", 0x87}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xcfa, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000580), 0x13, 0x80801) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x4, 0x2bcc8a99, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffefffe}, {0x4, 0x0, 0x0, 0x3b03}, {0x6, 0x1}]}) 4.969769409s ago: executing program 9 (id=647): socket$packet(0x11, 0xa, 0x300) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102393, 0x18ff9) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dvmrp0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988cafbe882cac5", 0x13}], 0x1) 4.708185118s ago: executing program 9 (id=648): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x3}]}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x94d23000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f0000000000)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) unshare(0x2000400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsmount(r1, 0x0, 0xdab1f0e11a1a8efc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x10000, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x24}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086d044fc2000000000001090224000100000000090420000103000000092100000001220500090581030000"], 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000380), 0x3, 0x4c1, &(0x7f0000000e40)="$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") socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000004, 0x4, 0x0, @void, @value, @void, @value}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 4.321116356s ago: executing program 1 (id=651): r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) clock_getres(0x9, 0x0) capset(&(0x7f0000000d80)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffe}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, r5) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f00000008c0)='wchan\x00') pread64(r7, &(0x7f0000000280)=""/252, 0xfc, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) nanosleep(0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x700, 0x80, 0x80000001, {{0xd, 0x4, 0x2, 0x2a, 0x34, 0x66, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @multicast1, {[@lsrr={0x83, 0x1f, 0xb9, [@multicast2, @remote, @private=0xa010102, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @noop]}}}}}) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000fbeedf2501000000080008000200000005000d002200000014000c00200100"/50], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) 3.613445503s ago: executing program 7 (id=653): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x25, 0x354, &(0x7f0000000fc0)="$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") socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup3(r2, r0, 0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000300)=@usbdevfs_driver={0x4, 0xfffffffc, 0x0}) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, 0x0}, @ptr={0x70742a85, 0x4001, 0x0, 0x0, 0xfffffffffffffffc, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x40}}, 0x4000000) 3.560074123s ago: executing program 1 (id=654): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09ff0f00000053156d7f410000009e53b4d79d71ab9a9e577f31484a9e9d4fcc9253a8bbc25d2cfd11fc5ec7eb33c5c2a469bb0d24e42bd2377dda8aef524e6b0b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x40, &(0x7f00000005c0), 0x1, 0x583, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xbc, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x2}}]}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x42, 0x0, 0x8, 0x5, 0x0, 0x8, 0x2, 0x8}}, {0x14, 0x2, [0x3, 0x7b3, 0x4, 0xb, 0x8001, 0x6, 0x92, 0x1]}}, {{0x1c, 0x1, {0x2b, 0x6, 0x4, 0x230, 0x1, 0x1, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0xffff, 0x2788, 0x84d2]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) fallocate(r6, 0x10, 0x0, 0x7000010) 3.051845892s ago: executing program 1 (id=656): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) sigaltstack(0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newtaction={0x10e4, 0x30, 0xffff, 0x2, 0x0, {0x0, 0x0, 0x1300}, [{0x10d0, 0x1, [@m_simple={0x10cc, 0x5, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xbb5f, 0x8, 0x9, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xbb, 0xfffffffa, 0x20000000, 0xffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x6e18, 0x7, 0x8, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x5, 0x1, 0x1000, 0x91}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7, 0x8, 0x100}}, @TCA_DEF_DATA={0xb, 0x3, '}^/+#}\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'mirred\x00'}, @TCA_DEF_DATA={0x9, 0x3, '&#.!\x00'}]}, {0x1004, 0x6, "4f484a574883f23e1e4db2740a5e2799e8f16d83d92cbe9b1058180ae960a239652016499ad0942f90583117f7ef21f17384bd3a48850cc6abc8bcedcc0e2187ad8aebaee946cd58303ea1f3bafb2a268971fd6fd05facc3c26645e25349cee43275c124af34484152a0ef9beac36f9cd0a7b577e4f936ff4e2a6e7349e77bd7713b54ef4db057ede15f35f2d4cd66b141abb148106e0f3cd2152e8b152f7c24b322f387802bd9633c5f91fb19784eccd27e4a88da7b619260dbd13bfddf7941593b5cc013f7bcbc9590aed0c67574ea3f1a0b5f6780ce399674780a8ca08ab239505cfa22a0f11041450914f7d8db5267b7a468eaf974dd83d04ca7c4c6acd5115253bcf905372d819012bbe6ecbc319dd4076da9e9d6559fc6a1c9a2d3f6c1acaf6170ce23cd72ad3baea8a9a4f4d022eb2ab9e736a45dbb3fa1773129979bf7845d38a808bd0b6c4be0dd26684b8d37f078fb27a709d5c836c2ffe9a842ae0f41b93ae9973ab97448c98d45a220d9c8f7c87e9dae197c1727811779a0fdf5f570631c50a002d85ae003501b472bc104e0efffc51b893d7fecd63c620eb5b20638ba5d579ca9612e8e61b4310bdac1f1b1de9a9c2bf43682f132483ee9dde191f91510a6ae7175edf4404e132703085eaa5c020c003948fe1fb7a8dfd0d55f1ad35996fdc02f0fff15e62e1128d7807510e60e1d5d1e991a25e285c5925534931a08b8103a7432ef66a1789ebf8f6645d7255c2e4e243873a9c76269bd1d08eabc88cf81e3056925254c8bf390de55a5210d9103153e66670323f01fc7adaf57988805f0b0c6a58ec9b1142161f475a628a7b38f90ee78fb5170b4f03a149bd68147c07f19e527237baacc5d11412b9f7cc59366a7334a128d53b3ede8dc85f9de41634e31ddaad4493e79069a92707ab2ababa15d66aea017cdd05f3dced84cef8fd9459273b97b20df91388c353e2404a78bbc045f6cc87470b5fd00ef0d37b3d58ecfe46c46d6718d1c0bae86ae884671f909ddadc09f5c678a368eff7544b299aab364ed1ba733128c754682170acc1b69050cfd01242ea1fb5d8e4d8aa36898673af7c15bf8ac21fbfe135e28b2dea3e33372ccd40dc0a29f581701e8a2a2983854eb0bbac9227a8ed8dda75c22f61cf04f4f1c9bde9d2fd92b7e4218a5021b3031f5257fac71181ac8fb1a1466fb0072ff648d4a76db7176dace3605c8fae4a0b9c7be6f080e0d56a0ad6bb170ddeef1aa556e84eec5444da054d2eedb01ed93b63319e086c035fc57e2b9fe7124982899f38f99e976c06fa39d368af5d7ea54b45e68d3f981f4f439aaca05c9c4ebb6804e683cf03e1fc93a7b3b4480dd3e9023f7bed4b49201b5581dd9b705ff31733ce861846e588806bd08a37b1feb63c19a0cb508a0a3ad82d16150035533b15fc53ca26c077e70749b2bf8884fc5297306ae6e2c9086e2d206384f3e3b820335922e2d434d2bf45fe5dcf4ef22c8ee4991a5e8bac84e0eb5c75b1f5f92ffa4a5388e330ad981ca5a5ead3dc2307c8d19b07f5f1cb1c5cc410202ffb8298c11398e508e40a58ef6ddac1e2fae2f6fb411ac73967cb118540f3569347cdced5713efde003119d0707614bdb5566ef8ac6fd5b0bf93a93a5038dd7fa97810e992f0a8f49a81e4a9b054c305911096f92a88d960981e629b8ae2d09713dcb39c8b7ae4a2d764256a35e52e4d46a18610856acf65768cb79b0a7dda7ba6dbc04571a5375642d0610746ef9d34a3d396466280a5199336cdacd18fa150781d2dca97041e00ba56206d730cc09f399cf3e50cf7f139f61d8de60fa901d06a1d8cf650e678661b37a0003be0d3f64586f21010d21aff7504b5db48ff0e6b8a7d3693c2f8273f66881630d84444c6d064112ca9580926a9da3eeb0d40a0e0c5488e4be69226ae81844b53c02ad04f8ca321c2f34b304fac87edc68af5f00b46e28cd353e8847848a43d53b7ac263652d71e7526abfefa98ca54935e4854bb1ad84d8ae8fcbff14b9d31d9147cb720974f7b2b19c4e5ce7446f2fcc47950de1af80c966b29ec66ab0ffad31165b0079ddbd7983d4441a212df7232c0d5929afeb67e750230bf3eea6451fce8abd1ad6a81dcadd927d95137c89096049ed1563214f82e6efc7434b37cac8e1c742dd7da6ef4181e4b6387d4b4d81562acb78aa50261df9b8d465976e65badaf49243c15eafbcb8774dd363acfc9a2b693fdadad4a8624844dbb7b84e35d3de10608b1e7a96999555c04dd48062bc3b2aaa694ca2697c38b6e95ab92b058af60a86c9969140db8bfec4194da110a2e26c7621f8ec82524f8867a5e93fab3e1266fd1e5fb68aa7b1ce58d6c3211f24c097e084695e5d6c31a5f393105724b1eedbdf6917d4a55daa4997c1e0efd62fd1b167fb7d8c1db8c65a715740e1ad5e9da71977f8c4a68c0a8179d83e35c274ee246cfe5837ac92eab2c2241d42bb0e3a9d59348f16cae2be4d7e07fd1939fa135c62a7b267a6a6f9e811c73d31b7241ebc8a36367c80d23b7485c0d5315183770ed0c40b48d0a809303ee3aebfa1e0dfa90f9fd2b2c13e7496bf3bce62e81662b8ac5cb17d5306c70bfca20069bd7109153c7a0804390e8a529674eb152902fcd835681cf1574009e745dbf3468749fcf7249df30bd0ba4ba7da88bc9209768586179d6b6f60b5e9e37525ccc7b12450ef9bda7a680d936f71286ef6348d5fbe134db5b6331fc6c734424f3f44941cb914d45d8aaa6117f1b2386e30c435e585f8d9dbcd90c963b6ccb47fda25a502327eb650c5af983ced795f7c2fcfbe05fdeca7cde62191dbba82c90e52821afdefb097d21bca1eff0daa927bb0b28be0f2cfe90ad213ef79727a4c92c1c026db41eede6c1caa1a68433834f91bac51836ba3ba6be5b745f784ca3ae071c4de9299d21f4a91b8c2547c4d4a5001a5e2cdfe38d2bf8b4aaa1161709a9dd21372a6912fc382f4cf3830994491102e89732dbae63aafab47972ffe4195e1acb5ee0aca3fa5a30efc42d924c02fb31730c7dd64b87fdefe2929ca73100d71e7125cd47b27c9d8ec1b2c193d27c6d8d2c951dc8d90ba66bf22ca55d84b38e0ad3c086b701e9e5c205cccb52c878216dfa200df47537e10ffe426a9deeb0cf189465f3be01cc2606d1e7c45528ad60220fad8876ea890af4d4801e7c5551f48bbcafdd06cfb0b077470c943aa03698c2f71b6db85d035012079264095013db2c2d5747accc238f0df777189c30a3c2d8297fff88ca9da4bf83a52d0b2c49f85eab8faff2a752bb3308c4350790ea279263439bcc706c067724e5bad074e7167a2bcb41d6b476d61c6562d585eef7887b71c1d960303c775ea9b762228bb1bde41e5ad81da351c612c2c19c29474126b12fe3965199b03a0fbefa44c0963a3de72c921978674584291bf679e61324bdbd4cf38cf8d27748b564f11f32539d9c742903a5af1ca1ab27ae82144a87eb01405d63ef533a576ab5d779cd6ac6263755d56ebfdd67bf1712cc0ae7241a963b99392bce4b1f7aa2ddfddd46638d7a092c9d21f29670a831b174adb6168edb4157d392abbf3baa0b13a94378087ec52a8d0c39e6ff06a2dbfab919127f2dd6f7e8708bb0a7396adf69198db2846778a165327aa2277430a9feb8067305a1240cf4598cef8ebd23301d4c267fde3320cf4fb3132296d5ed8ec31914d5947a9ba222a2eada6ed44523f85a5cfafc29b824a57dde76f74d16fd4100503b96a6db4278aa379193584a0f2286213ae8cdf64942fe190d33728d5a569be34108953c3b57455972fd05923d38d3bc0c91efbd02dff4775c9ef50aa794a9e8fbb37b64a0850b5bdf5312c79b60a02182f963e505cd9f3e0f934d95885a79050c1a6cc258ab6253440b6464aefaa469b21925f1b5adbe077380c8bd08648fbe7019dffb0835c2bbeacca1161323dd1a0b3ac91ce614185a4aaca9216d11df75964180a03224ad192d5c37e7b1da3d23b60130fdef8b4d644ab1736071b051dee3da32c79ab012bbf18db17f247d7ed783c95795afc8a43793be3e6d9b7729e1602014cce3c76a21cc7f99250095567d1d25a856c8d079e996a69164521b6f73f82ba0ec914d247d674094f1d580e72e5b68e09e39ee08592a38e6147d18e6bb29cad2f588ad859ae57d9f79057e3b56b4b6f0abb66622872f2673dcaea29ba842fb88773873a1cdd78dda6d69514c0b0a86653948bedfe47883a5d9d95d223c4aca3b8a9735b1358fa94488a54654bdc6a254a9a9843e7ccbab50e88ecaf01e4fc53ee2ae01a04b0045f810726c55aef1c4b77c6f3139686b066d4d3ec2a6f2649226cb5d437807ae840414d6458aaddf5c67b8f608936df6951b4ef97ee52448d1976b9628b71baf6a2b153e6e8d974170553bf438d105516136e330992b35ed11a499ed835b4ff6ce694a8144bba2e9dfe63f5af0015120d2227520baae68fd4bfb9f3e395b2991d01070cd6ca922f760a34152c3c8c7a4dc713df08e875b33fc8cec93937af7e7e75c1631ca3e669a5deba2443cc1a730ba6b2e3c1e9211ea2f5292ce5850fdf5036b97d408ff96a56cb3ac1cb55217c425a3d8af69a188a2b062a8b1f2f57078d1cdb5fc607f5c2518c084cc954fbe6802379ede412a96c55cde8f01efddb079d13e8e216187fdaf3f8240c2a379fdeaf54f9fa51b5451626d2857017b8c19bc7ecd08aedee328ebc8772c98fc81889bfc1a8c6e4f4a96c74c1fbf63585bd8785bfaca489ee8973d6dc34d19552f2a9c7827347acd2dfeb0216b5d71b6f3bbd1f37849060db33670b62e8aad05dda5fc9fefd75b61b951e4697f186408092eae57b9d4505dde65692d48eb2b8b9da6db043181211e4b8cfc2a283df1647fb955565b96bb6f650a248b923bb537ca0db62655f78e5bab9e87af29cf6aaf5d8d27cae06bc3929cb03693851b624742e7a38768beb3447bf8c1455945fa4133ba58591779599697fdf0824f9b96b94c1fa95ee54bcde21ca927f80d4931522f343c087c3d1d1a97de4cb50794f624760cd7edaeec31bd0ac9f838b6bab46371518ac463b9f1f1275fd8c7a67115e160059c6157a766d01b2ef326520e624a311131df84c0d3c20c11391cf6c844a2d42784c944889539bd375c7b50724fb9a02f6f94889aa1cf7c1ec2679ddb8fab1e5fc23f41b60badff18c896818bce250d8b2a00b3c51ce60e98ae4c217620f77500c4caa6b352368226370199df13e2a74d10061a6fefafb68cfd52651c76c369d01b8b398b30e6a5521cc8247fbe1087c1dc1f70d63b49fd947e6dee83bf6b017e5f4940012572fb99fc3233c354be71d3b8b4f8352b5c6673586486ab08c308d896c9960707e1f1cbf97c6fe32e11b13407057517150b49b606129b5285f2fa60efa736b95bb02b820d9e48d6ed47216b10438583f53153af36ace5d370067a35762e9d1323927aca103a6f58640b52d8d76a175308e62c4046b3ab1fa4b1089a14697e6301fd59d26d17acf7b721524df9c25865ea1c366c77dfbc1215c8b78a25bf342eb6f621df8bebbf9f561bc4dadd9048ef95efd6ebe040c31a874fada988458d2214677cd6e5cd0c85ce7ccfee5bbe94ef523acdbf94fa4eb234430c44c5373b943c1dae67ad68b0d7d2697f3bc394d54099e41c15084b53d2849cb68360cbf6cc37f59be2fefe85528bc89aafd6191d905e03d765c7441d5e4ff2644cd8e936195476e8639d81a27810887d5e2ef26051776dec15568cb8241af91f675a5cfd0372c0aad0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x10e4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) sigaltstack(&(0x7f0000000240)={&(0x7f0000001b40)=""/4096, 0x80000002, 0x1000}, 0x0) 2.922937591s ago: executing program 7 (id=658): openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) socket(0x840000000002, 0x3, 0xff) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 2.921504251s ago: executing program 1 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b1138000000008d3f10000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a7ff070000000000004da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05dfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f9ff86086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace85c370183f23cf0838fb5a1d75c145feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000000000000000000000000000000096e4a7b57a867432217cf0be18b96865ee3dca3a03a5e0d3060705c499776bb3e8c442aa1d3b26842c96080c4c251b8cbc5de68938316e95857b0e3cdb14d4a93d49dd4f7a08639ee6943861886fabfac35f9aab09c77bc495b5c7116de70619c5ac798f1974d7a6e9b80ac4bab0f1657488278a40480731b7f51ff921e8ad8a1986b6da1660c40875504d1265679a718dc9a1400ac15ce81696f712a1074ac47de09e95d64eb72a186f11bf360e5841a283841762a0cda06ac7c74520427465c128763e3258169d32bce06dbf95fcf8e19ffdb7c56fb5e236f2422f631ead769969699318140ad2b431b21f88bf824e1590524a0aea10ad2c5f961533e78d8e46da0e6ef484d25bd09f6de08e398485d95c51f3a5dc76dbdea7b2d236d819018b22467116b359e8c38147565203c75a4a2789019e7e4bf06a2b3779cea3206cc2d10e5a458b81"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x600}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000000c0)}, 0x10) 2.54764824s ago: executing program 1 (id=661): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000000000000000000080680716b190d0ad", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8092c2507c6c91f4348af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095f20c616755f1f5b867d5a4e135601869b3cd92780a754e3a83bf44d78ca468c0e729ede4ee545fc2c4b406b5a5712043b0e3ac776c34a22a2772428981084cf09868dc87b484045f650023d810d2010000800000000039c9984da5021e36e9aa558cef368f2ed7c4b1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001d0001e97bc10e0000ffffff7f00000000000200"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000050000000300000000000000", @ANYRES32=0x1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000cbce0390626783056652"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7, 0x20, 0x0, 0x5, {{0x12, 0x4, 0x3, 0x2a, 0x48, 0x65, 0x0, 0x8, 0x4, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @end, @timestamp={0x44, 0x2c, 0xb, 0x0, 0x3, [0x7, 0x33961e16, 0x1, 0x7fff, 0x400, 0x9, 0xffffffff, 0x7, 0xdf05, 0x9]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecff69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d80a00302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='fib_table_lookup\x00', r9}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r10 = syz_socket_connect_nvme_tcp() close(r10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) r11 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@country_functional={0x8, 0x24, 0x7, 0x1, 0xfff7, [0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r11, 0x82, 0x5, &(0x7f0000002340)='hello') 2.036476658s ago: executing program 7 (id=665): setresuid(0x0, 0xee01, 0xee00) r0 = inotify_init1(0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0004000000100000000000a53ac967405b837e000000000086edcdeba92e906d156acd277a2d892b811b80f1a321f0a2de6776439ec8b9de8d8f2511f486df365c6a06291f7f981264a471b1020c851f8220926b47a4fa780004ce8c5090137502c1e7ec6c64a50d5700eeb47984ba390b529fdf27ff13d25b33688eea0869c516299b8c"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_ext_convert_to_initialized_fastpath\x00', r3}, 0x18) r4 = io_uring_setup(0x195e, &(0x7f0000000000)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) flock(r2, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) 1.978996898s ago: executing program 7 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000040)=ANY=[], 0x46) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0) 1.976349757s ago: executing program 7 (id=667): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000040)=0x7ff, 0x4) (async) r1 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x135840, 0x4) r2 = dup2(r0, r1) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f00000000c0)={0x1d, 0x3}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) setpriority(0x2, r3, 0x58) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x32, 0x6, 0x0, 0xfffb, 0x8000000}, @ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0xffffffffffffffe0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x3, 0x4, 0x6, 0x8, 0x4, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x7d, &(0x7f0000000280)=""/125, 0x40f00, 0x20, '\x00', r4, @fallback=0xd, r0, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x4, 0x1}, 0x10, r5, r2, 0x2, &(0x7f0000000400)=[r1, r0, r0, r1], &(0x7f0000000440)=[{0x2, 0x1, 0xb, 0xa}, {0x2, 0x3, 0xe, 0x4}], 0x10, 0x9, @void, @value}, 0x94) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e24, @multicast2}, 0x10) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000580)={0x0, 0x2, 0x2}) readv(r0, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/153, 0x99}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/239, 0xef}], 0x7) (async) rename(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0)='./file0/file0\x00') (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) sendfile(r2, r6, &(0x7f0000000c40), 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x440, 0x310, 0x180, 0x310, 0x310, 0xe8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, &(0x7f0000000c80), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@icmp={{0x28}, {0x3, "8790", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2, 0x1}}}, {{@ip={@local, @remote, 0xff000000, 0xffffffff, 'veth0_vlan\x00', 'team_slave_1\x00', {0xff}, {}, 0x6c, 0x2, 0x8ee6cb8c4fe3dcba}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e23, 0x4e20], [0x4e22, 0x4e24], 0x3}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x724}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x319b, @multicast1, 0x4e20}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffff00, 0x0, 'pimreg1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) mkdirat(r0, &(0x7f00000011c0)='./file0\x00', 0x2) (async) rename(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)='./file0/file0\x00') (async) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000001280)=0x3) (async) r7 = accept$inet(r1, &(0x7f00000012c0)={0x2, 0x0, @empty}, &(0x7f0000001300)=0x10) (async) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000002740)=[{{&(0x7f0000001340)=@alg, 0x80, &(0x7f0000002600)=[{&(0x7f00000013c0)=""/229, 0xe5}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/195, 0xc3}, {&(0x7f00000025c0)=""/8, 0x8}], 0x4, &(0x7f0000002640)=""/214, 0xd6}, 0x4}], 0x1, 0x40000002, &(0x7f00000027c0)={r8, r9+60000000}) (async) r10 = openat$incfs(r2, &(0x7f0000002800)='.pending_reads\x00', 0x134002, 0x20) read$usbmon(r10, &(0x7f0000002840)=""/221, 0xdd) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x4c, r11, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040059}, 0x800) write$P9_RATTACH(r2, &(0x7f0000002ac0)={0x14, 0x69, 0x1, {0x2, 0x2}}, 0x14) 1.975988198s ago: executing program 7 (id=668): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2, 0xfffffffd}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x241, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x7fe2, 0x1, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) ioprio_set$pid(0x1, r7, 0x4000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000041c0)="7aff8ff2374100f75d839098600cfa64ac7a0b80a7a110c98e5ef4605718a2be67b8fb0f5b6fa8543423e4ab3ddf46e2bf4c1d17fc111e50883e899f6d9cb904c0b5d7b1b9cf5d9c615d98537f6675b71bc1f05831370a93837d0af97d1e173e52d77a11c836dda91aa66b7ee6342ae7efc83f61a6f1305041ca1a87e2d8029fd1fa1f8ac2f2e468d13933d8006e92f125fc9887c591ca7a7c7bf271206067b80433e7e1df44738eb55a35a86e80de08e07643fb4a74b37143b5f5f052bfd49414d89544744801b5bfe2c0e43f322e1106f1df71a9f9508c1b1c52fead2f2c3738e39aad3997476c4cc88be225480b110b0573944aff0605b79d94a5d63a7e4a24389ccbc4b8f3e7c17cc1c73d9880f6877c5458ba85470d248a5b4819cd30d8342b39027bcd6a6cfbc635f0e6e19b1a69a91836d6be6ba7267018b59ec6880282916dec9848c27ff110e3c83e45faba70d8d201bbcf5cc3aa258343e7468c7d36dcb38da2ef6bb23ad6c88ec2fba289dcadcd90d1401b4ff9cf4fd4e5ce6c8512d581007d77bdbf60888659c474a71b61307a1de8d2ffdb81f04e751b4b0dea525881926e720305c44888011282187ba39173212258da23627571129f3854f212e41d5619cc2bb935888d4948cb9eb590377c9b3b707c86e3298e4da379a063f7783e989fa2fa2b88a0d390e4722b192cf7c9d1d57d18aea85aa2ce00294efc6c7ce86f733767be978da0033d9e9c52fe1e5c5138c0ebf12c9df927316b04f3cdca9b4a1a65ac3eaf9faf2d1209c5ba09d41565f7b2cb5ff074996bf538c896381b9f4b88e69c3ee064fbe328811c203800c6bbec391278743c8d2cfe672474b900ca0a42bbc6b9463bbde44fe2aa38f8415c5a2fb3b9f9112e371fa665ba0942d7bd28ff7a955072de7a8cb32cb02bd230ec7d129cc746feea28f4f57d7967d038e234ed466e60391944cedb900229ac42b0b2ca79058783ce4106202ac16a521da33b57ff01f5c9cef45847ca1f43bb5146c4484a1c6c844f0f6f224b6b6fb0afc13e8d20d84dc016018fbb366ac6608f00032a691c77a67a11f4f04b2a2f4c13d8a815480bcd08dd02114fdf322e73af7833e426a8aa748c7df2c31132b02a9363d09a3a75aad3ed81395a5f7d0ae5ac3c45436af1c85b019d5d5d3f40fd9da4824ffc3f1e17277b56beb3014ad39cacafea4a8feb54dc750ad21ea7cb4059d5cc8b73e021d3f53503cbc47e5eacf10d5885908ac9eb44a283d7b280bbdf643144d728991fb5c0461e1d00427f24b25a0d93e76b22bcc08a9319533c2e33bc3f1c84c6d41bb957e2b26639ef37ea40a33a9e0349091885bc5d2b14680d38055fd053a2362b3f5d4b5d0402c2b49e171fae757c734efbc419a2da26b35032193d52c43b060a7df40ba9d3e4c967cca02acda9108cfc5a3e0e8b1ddac920bd1ee2226f752d6ee0bf2f7b247708c6cdc0bf35fa00f06b6e437af0a249a3d145139105920010e0dd3301d6c6be61c7c3e7a72e9f4016c058d3623b25b2fac374832345dbe73e957a682f9181cf88586df4667557cd15edc672ca4a57e801feb650851c2321b14e83e17c794770baf9ca5fb627044b5fd14e71ef5d3436c9722b778d5773ea3dc9798af3cf96e1773ac5b37a973b89f3f90f2a59b21455c9d9b83f51a6967984a90220bc6ebc9b6f5d673383fb08bed84d90f5e40fb1cd5e64f1ea0aae7d59ca03505343a0ad0dbfa0067962baff065b2f3d6e946b0369bccbf675d448aeef12c4c0d93fa65607d6de226205ba6460034c08671c009e515d313805825fbaef7fed357382dd67addcf2ccffcf95ede87bb4f2ae01369b4f397219eb63fb8dfa01e5353c37d2376c69e78d9659554edc1d7c652d4270f81229d17872a8e5bcbf1964806fd5f1f65c1dc1240384276f4403b53cf47a2381cdfab7a481cd0f8b9fd8e2f6a375db99361b307166c9b8004ac95cc20f5f6f3c59a36b245ec287c13ec10aa53bf328b794b4d457d8b3d29bdedc05247a28502cd52174d86935c9947ba80a208b801766169f9d7564ef3cf02665d885782b8e8d6367b0b63cff0f6fe9dfac42c6f8b0d42f2b0a56fe43903f0823b647f2d71a522dc99e0538be3ae2992511ef838cb26c46e9e07e5183672f1911ce844b6c58f99335099b627e8a81397cbca4eb1a833a8e884871db3f206304f99873f2d1aef1d0bb15f82bd022372314ba123e0b06385e03d7893999d8770149fca94edf12f8ebbd9c00cae91d9154e69a7170d61655c179f672a34052f648bc73a28ffaf2cbbf7cdae00626f39d9db3e4756c709f9b8993c77764b6c80f7b0b4725709317253c086043026c5bb8102ba78fc4e5262e9e216653cb8c61c7d7ff19de077718dbb25728587b1d8fb9da74566e530caa20b42d8f693fde8d96a9686e7cebd5d8ff671456edfa81135da174e9b902f273ff485d310f6c63045acebb2d1e31232de79da15681e356b77b7cd19d413bc16dfbca688e517fcffac4d592353b4836a108351fa220d0f71ae1b3c214ef40ba29f469f09d3d1f5d87485a860cb288facb5098f379327c8abd7a2e0749eca6937ebcb070c18f5ae5d02993525128a7a90f6ff42afa4c5e8147c789c509d6e8f53619cfc9dffe05854e7e94a1ef028e717467b3f3b1fbf502fb417636f1e7256c62a0a8b249d9af9b13dc1851a69376a20ceed4fcacb3db5f43c2116040845d42cb848f2396f79c58ba37d58d90d4d235de38587099d9fbb14821e13c8088b3f96d75f8747b2cdca38dd3bd8fb14be9778d771a6cd210364e6a2c6f8b5e12f2c66e0f1a9786bcb7b2815d26fe37f819722fcca2b48190d1f324431bd86069115adbc19b72f92f35b5f2955782f517698cee431d3e40f7874863756cdfb3c0bc609cb7a8d294070f0ce840478c478c1acf488d5b19a6d93c2ecd712806c9d2aa38cffb7ba34978760cc9c59ee44f3bc4d1e5ac854f76f94d94c7694ea442d5b559165659d5a84bd0c6b061d9584a554241eec94fd965427d900687fb5145da1d11ab03f0fb648d3b1565ff3b0fa9e4b9d35e325cbdaa75a9d2d336f0d364e49f7dda6af1ac86e64cb4d7450b0e0a8f636f3ab6412b2360e0bae90e1e70ff01aae98aa0b14ee23c194ea891dd55df1083a6c52df1d2548252d0412a87a2051dbb8812170be2e336c6fe5de538b6b1cea609ecab177bda8929126b9288cd8dfbde3fa0cded08074d1d32bbfc4235b668e02a358e18c3ca754cc46fcc0aaef1492414ada270aca77fd614df0cddda5c9e96945f03ccfec08f88226989b53046497e8d7837ea8d29133d41899b2c5625faf6d7206c9dd2242ccf2e8746963b258bfd32cdaf1414a1f5c847589dfc84e08b0b56614b76fcf57943eaa86423ed478b106c3558baec16859f05d8600e0803ced5e96244f6692ee017f890930784fc5f7738900fa31e4c045b7afb668941fc0b8eafedcf94ebf9e467947c610a15e4f3849a890980212929e52f397eb00e738d721f503d93634ad73f15901fc7ce3d047ce6476ddf3bab041e65ac5a7c2d357cc0c876e713b895bf960ac16e46793a0e10718e7bceae7277e2e34a412019a25f30bd77f93e87e102fe66539d39c3be6a624e9f2d0294efa719da982d5cbbf9dac0b18cc70e43bcdecd40414e973ced4e6504a37a9b53bb77420a809088ec295fbcae5a70446c1dfa066284a5738dbf3655d298bbde97025ae1c1c4dfc98c538f18eb75eaee550b283d2cbdc57caf459deba70e0a1e0b0304852b2aeff16b7a625a58f9917260c653b46c760167d7dbae06a4e5dde73fe2a5ede1be2f7756bfc0305de4155e19179a9922e34a0bcb16b265a40546a43d37c9ab18f555b9556b27357364d8e2e663a7b9ecb635d0f5e9919f1e224139f7f086eda414cb2e71b2f7d8db19a32b8ab055d7f19c9d2ee112d4f99b3268949a9ee2736d50cd7d51089e7e4b28d0a7f20e5332cbf269b21f1a4d48bb5d294820c4fb51a7f731f318d34210277b91ff571742775b051fcf61d9b563d3c998aaf27a83dd2b267905490a935851afbbf576dce489ae9c095d15e8089e5d7b48794bb93b2dc25fc7db2af6a0608a60b17fa90d4e1e518ece8dbad577a3c58de69795d5e23d1c389a9fd94edb314baada08de9a8c27efb5df2037b5f9f028e9e41f9b7303943d08a3578cd2d286271182b00c6bb2d37528556b9de1bcf3fd0cf92aff0ee0e1f2bfe0cfeb572109c7ef7b4399b67ab4537d194301e07c936bcc1ec4f96b03ac924cc43dd4c3be7b016218ab67d8087f7e381b4f2bd02a2f69eabcc1788f0bcfd35725de2aeca083e66ac7548d7f0577efce5ae361448d390755a8f2d11cf4826b4aa27725ad8d6d99f9f08c93f80310e1c6bfff311d502858955bccab5b35a824b5824d04de997dd9bbdd503fb2108e9e996df240571b05e7cd7e6968eebec8d4efbd22007519c51656b9cf5a4eb8a1815f988a999458ee00b862466f502629b67eeb8a87959629308d9c295473a3237f6bd0d68d28b3e0d5c5462dc455dd96a87f3dcc4a9671a74b992e503d967a6618e37c3016c227a41fe2f019b2664d749754f1e1bf2cfaa868e8fb4f35284c0d9eb73c8f148942c917d10d86469e3ca6de436e84bd643ad48cfc3e7e8a4c1d702393b39b1882ca6360df4a578d0dc5ea3dadb0720fec0187147e49d6d912282eb31e63f1f5dd5144892d0f048b562a1e6d4588af4f8879019ddf378f5578d5e139a01a9760b74cab8fda32e87d19e5a725acf431b228f52c42fbc0e67c01322644c1e3635fd9d734b0424f77ef22257ede6c16befbded6672db7747178bb208aba3da1dc3d4dbed4233f9fda9356a05f98b253b05edba5806a91b7b95db1c7812fd64d4c633df86af2c8378fa3d850ce4af97019e12081059091bbbd0aa9df8b33b1dd53b45235ce2293127a0a78c33cc5dfbea627b723b104d161992701849e0265e2acb736cfbf364f80912418666945395716def0ba8d74f2daec21d3c62b5bbe63a539b65463be701cdaf28ee15d78c6eb3f6eea09f175e29056c33fe03a1293194d54ccdfff940da849e5baf41aee93ed4f4917e618340570a9bb060a7d9b86888990cb1ce4cdbba431fa5925682dfddeee5a1f324d0ea8869ac1869864e040fb2001dc575e16ffbd387588d1067e6aa00e4f005dbe9f7796dcf6f499154c395078038918ddbcd6a9458d6d3e8cd55cb4c789caba57ce13cc32d29766812558b284ceae04fe15c65d63159259ec37b124522bfcbad225d0187741b466ef68b7ebb071fd2668d30efb24abc971b47af0d4ddc8ce184b24dc636dc9c219459c5e6a583b80a623696617d0ea4d2b3a1cedef69414e60004dd278d404c73be5d41510e43e91d09053ba1f9e42fe696eab998bad3caa5d9ffdecc15a706df4f940f5f70202958e29d365fc42bc10b3778f0475d87a4e7448e78f5dde7132c793d22b2302d88be0fde9418bb747f7ace9c0090b45eecba0a8e10c3a2f7d1ac948fce199f7712482922d580013a78670d51291b30a0c03636bdd60d5974a9eb68424e15c96eba144e6ebae7c21332013065ad5e99f007d8bb5bdf465ffbe634e772deff4157ed6764a3200fc4a4bb83f8b2d1a8965acc3da46f9d6acda6448b99ead1b15842c02316b14744707996732455c7e76e78f4764531f477f74e0cc532bf11ccd112b86a23b8bc3b7f7c36922b2f8ef0fc833e10010b421207582b1cf5a116a3a53a63ab853c885621cac559686df452ff205bf9760220f782a4721899d2088ec4000717980330f66cbd334a9bad9fe9c1fb9254793fa35ff234440aeb6dd71b02c0f4a0eaa97682082f7d89b0dcc294101f2931955efc32ead8a0e2308a824ae44fc432e5e19fee72cbe5e77420fe72007e27b16f875bdafc35388c183692bde07d6eb02f77986a9ba513fb9a5181130a5aed2b978eb5b5738283e9eae8de25f796b1c62597062255f58e3cb7c750cde4e34b02485f2b99bbdd0e31c1fcc283a8b420422f145b70e2262354e38084d2a648489c0d0e3aa513efc337c7f7eacf77971a7252129c98d0de21e592988a6e357dce6de714f58f6898e2aea480baa73dd7738df15d712853508db9e070c35bd6550610cdd23e0fca3d11345fe3dcbf5a0f02b286a6f1e3424f3b8d5038ef566b40e19bd9e5d967d308eed7a46184456d89f5f49b1fa1105e971707bcba4cddbf27a6f4a5b7d0f3c254932be7022dd0d8093c2236d0f0f6270abf47dcea134d2eaef59e22c4adb58589ab258b73707e9239d71a4ea5e72006bd407ff5087de0459564b33ea87d6651bed19d28bd03c1308318fcfa3ba77139f2fd4285fb798284d440bc54365ab92a37a222bc75d0e035073b74351def3cc434440b92eb08033478ea67000511b4e59c119ba721965e41606c96fab7f60cc855f0f3ad754684cf7f7fc5ce3158fc84b70309687187cbc612d533011714ca24142cdb61762951020a1527fd9ec84ecea7dc17a4b2221b9e96881cc20526ae8960b0458a17db4b285e7557e47b2ef9214f147e4c7205b07913bb1544862148e4199b19f7235270d8ab99f70fed21a86889b41ca8d36de20822c32c312e0df2ce97adfb99db652d013402a23467d8839a99134919d578e74d35c68da163bb1a72c8c436d32b6d426a249e4049e1f5d9645ac82beddc2380b13a364f5ca52a7585cf388269fb5123e069b4ae4bf66e8249dae53ddd18366dd24907369df424dd75002f1643baf7e16e5cb8ab0b80e8db720cb06c3225a8f870a33919ee987fbd6a0997abed383490a92e8bf415b07d698f4c3fdbec7bab3e1b7345955cd453bef212f3cad0b93f7cbf01251d923ca0d0a73245eec83409d205224c344c590fba64f1fcbf982994c863d722852b0cba4a9e5c98883d74e742e242c0d76a81040fc74334a706c6e03b3e3771922a3a1589e1c6c83f9ab1da90484c399b54710584f8e633948d7c2f34470e33810e6f3dd83fdfcbfdef668acf2c03e68959364b1ac2c6267382093bd4282ec190637adb9e13519078a85770dacc5029295feb0254708b5274e62aa9d2a8583edbf72da8fcca28fb1f9497dc293d1c9bfb7f3cec858cf912b227f055651cc7e739fb4bb9ba571035aa89c4298a1b3566f740e2b0ff98b28cb574b005ee8dd55667b25c0ec16c3b96b068f0f97523b21b762fcd21a76c8c9ec5d765fe20126c3da9dbb78d8de69435b040a1a96473fa855a3b81697514eb4dd8d9d0373e5aff894c496e1df546868da3e13e77d628c06e2d4d110982908f5035fd83f9a6c252089f08b37d98b6da5c9d189e92a65e037a82b94ef4499e0e9229b5c402dc9a5d74373a1cbfd42cd50dd856bf87cddacf2b0596151db738e0155615bab1b31da15bdb04783f7c59d73472f587b9a4f7e334062684c3bfa7be7b879bfad849765657291681837ade34980b48440cb2057b846ffa05207784782484faf9b4dd5d3fcec06347c0772ea0423c9790d7a29ad345889db6662c732b5708d5f70683beb985b0d936bc154a50de6a91a830b728c424b31cecd1949094ce00abba14d9dee860577c9e4f6b8241ba6bde0dc3c0791992dbadf085028e05aa896b388307c12c9580eb245cdb81d557800e82d8b7e1841977e4b91b77fede227adc15df20f4b4c483ddca8a88ded05b3cb1a8c2052807e755636c626fabaa952d46580b41b773211cbf5a1f9b7bd3ed6a5dbfa617fee691b09039c724c62994a601fb77eb950d544602507fac13d16852cafcfd93f5de78b65c1877f6cf8e8e4b49d5c2e7ec79856e403c0ea5866fee0649669b1085bff1ab9a1c068c6111c92577778853c038fc92df27ed5047507603fb75b8e0d143c91806ae62834d5523d435c3750fc15c73b9037944898e03940f5046c1c2e3d7e2d59beb8b3c909cc5c4853b8ae91f67902bd0c5e99bcd9bb462a877e341f67ad3ef945923dc64a503d25c3362e09850439e1757aaec22b3b0344d84c2ae4d3823e6639c13f58e0e9acc301461668d37ebdbc3f38a77a3959e9b6bd59af2d3103ae450ff71e7057d963292afd8d47155b1b31cf0ea58f3d16ad5ceefcc8f4c4cdd6c9e28df3486b9bcc74a94fdf1178832db1eae3f1dab53cd75d489c1a0ac033aa1571be3002b640765d6b4a3bfe5fe7d8179d9a13ed11c2ba6d9dc8c10fb570c3ead44759ca42899a3ca4c33257e09e72bc859f023616efa2fd4ff356322eb4e92c7ecef16406cb68bcead38d6823d1edd90362abc6a81c8196bff687ce305529a3dc728fc37f99b3ffa288048293b00f9572f56696138981e0891fd8054a3d79a20f13d6e13f220af5c5d554081c54b373754d0000000019b6333d60db3ede8e1448d741e0789bc862b54187157c2e90d1d2fb15e466c792c7460db9a2ab1eb08b895982b0c71a64a4570bf79db4367a782a06af438cfe97430667041ee14215fb3a1f3685eae5ac60e51f78dbbe1ddc880eaf45109ee39cb4a234cdf7520f027942a263dfbddcea99ba3aac6657097087bd194b1e086a0b90ea8c9cbc7dd53e0edec495ce9663961fee52e43942c63bb88cceff1709182f7536064321c0fba77659f8eb64cf614fc1b4ceada60772150f3379902f7a8bf7188bc412eb50ae37ae6183cea4ae8cd01ff2ee744f66873a2c64c7caf6c25ffd4a6854915f81ae69b156dbbb77b2a5e0f8590f5bdc95146a6b20e5184ce8a061c25154e26844add41e599e81db7a08b175ee833a75a2796fc5a9906f211ab891cdcfd16fc593aa884e8a85c51eb1c20fe67ff59eaf1caddcbde923165b6c0d44ec238c2a5e4bf22fbf0b67ccf993c9245a7a34718a231a248b75e8e262c0ed2a850825f94ba69dfbb89da1760fcc42b2ea1d9d38a793a8f36a68dd69054e807edc8aa3f76b93368d78d4b21799070d1d8354d2e443c0851bb746a80619901e457f166ab3d58dd8c51518bca4eead92594bd3a1a1a7be985ecfd96ed9b28886cd647b4670f1e96363c6c272d229c6d4497470df6768fa6ee7b4fe2abf29710e74be910c805c9ca20d9bac71fef36aef505811d26655a230ecaf4189907e40e93a12491e17515c4c95dfbc053a3287d78004642af8fb9f706c75526bcbcc1d4b373954eebaceb83456d3540275a340fa43f01bd9a832a3990557fae9ed954febd0c004567d76030ac1779446b2fe65a50d118f9767ac805798db10af68b12e6d62b7c95afd8950dfc73425817aedcd56115e326fec8b12edaab55b48bf269b569b349be4b79d4cebb3ea081d14e37e78862d1f16a18faf9a9e9296b5f52d94412d54093eb891a4a6a5949204c5e2a19ece8b8fb54e4f8a2f0c920d6acca668f034bc2b917d8b4079d30a3530774a39459f188284b07c82d3f0008340481137a599de430643fe87e9c0cbed40f1fbe2fddc73d59b25afd2d3a851bc6d6da669c4e83cbde133b61657fe995648fca58d7462ca41c4aa0f6ae710a8ca0db471e0e85b4ea912b7c81a915ee0c4b8f205f981130230164eb7182089e833d5b0df5496d6ff68ce7e882bfda860338ffd570070d1e80dedf6df39555ea3e0d9f4871cbe438fec09a018226edbd250b328d776d8fed2d8e4128e561fb136f9b92b023b58dcd77de332fc7291e2496577f59ce48479b28f07f1fb896f77de49530f44a38ae05327b2e0c5e92ace101cbacf1ab90a2a10b6c92be21651b6a9e0ef0049f8ebecd6b08900f5ed85e8aa34837a98e91ada51596438113333e33ce89f36c6cab8212abc7aef44b20f4bc4b29ad94f1f5529edb1284a0483a3a00774f35a8119287df3de8970b38897e9c10e615c1b38c30fbbdd5e88f24f7427d70730fb842c5bd8de11b2b59373cdaed31a9d367b46295dcb2e117bb23702465c0b83e263146d3fa50fb073ea5a26bc355a31c91bcea5efe7d2cf2421b917ade9eac40e3e413b831a07253f532bce341ba91a0b7c5f9dc3a7b9e4053f888ee42d3d1c7f4623ae1152c193b2cac3acf205396e5d6cfd7f49f8b02516d59677e8dd32520c4588b4457e080d7ef4064ae70c25fc5174e9b19b70ea8e5f601d8205dfbf856bfe871cc1f36ab3537cc2de85dc2a5bddcea00a491e469d1512e2973a44f2f4aa15ee844e7535110184fce71eec59fd82b43f51e641405d099fdf51a1e27aa8c86e904ca9332b69b9eeab2838330c39d6fb20e7b30da82cd8fbe2952af62cda08c40b6d803a4c5beac96c227f5d077f7b34c9cb735b62c22e376764cd311362ae6e21df08a1d2720f029bf8ce339dfd7fc561f0e11540356045bd037779a2c7d833e0b6e1acc906853a79b7b10332e66a9cb2a406c5deb134a93b3b76fe285e8cec65baec6dba71ad20d1e76fa8e52f2278c737b141690f4bcaeb4c9526dbea4db202d37fb1c72fae42d33fd81c6c30aa0db6599d526bfeecb74a64eec7e51a836e332d4087798aa681cff8545692e85ce2d685ee99d87d42a99b74157e96565d19267de1c702789a87a3c5e19fbbe8908e9a6736de7c270d8af373c6673f6841263e1fa40df42023f3c9ad61be9d49c28178ba5d60fc574cd04061d218230d83cee60dbe6496a821c680cb3f5e79a672f1dee6beda9f846c1efc505e68fc3e4546ecebf630d55207e147b32980ccedb2cdc44bcdb9c91c7792a63cff4227f77e98eddee4bf9eb1e8e8dca6c485dafee310f6f072be0b52f9d5afa18fb8342e6b96f78b8218779344a876e90e919b5fdad216c3851a7e3523e42217447b2cc89336e607dcc0f2dcfaa5f0a881ef58a5061c57f1bb5280eb5067598029c3e07b6feb493973a477aa5117867e7f98e2f196e20cf6d5fa4b7fca2f10b4259272112e8091e8d8b02d8a4806568e7a4eedf4c25b986f7591ec184d30ff8ba313f2c82d1843e0e63fecfb1c13d4da7feb6391dd2ad7da8f8f9c53814075ce8d214309484a9d39aec8144fd30faec53efd7400db23d8302c0402acba045ebb0f325223bc61762d5bf4eba00868051a3cb7657ff28597d22c368ddff1e632e996a328955c431a6d7ef822830b22bbde700c7bfdf39f80a1ec8cec77accb7e079cf060e3c2ee7d772bbe19f51b65f72ffe9737b06235626be6e5daa5cbac0c441b22f44acefbb21e64588d8d38bfdcf04ae178ab8df527c81c1cf55222b8a8682224b630d8e6d3389e84580626ca1e0b845caa4a17218f4fff5156ac538c53fc7da8f66eddfc9cf8638f6b189f9b167f5d0bc1948af5b7422a41c079553452ebb455393ba6c52e18213dc09a5a206fd7a80f449cd6e371e032513dd8b26677c2a26505e7ff10571761091a42d55138ca251f09a0eb1fcf8cd3864657f96f83c344d553d11902a1b9f72e7c9c345eca3f5bcb1ae2b256c8ad0cd81bf82afcdccb827b1fa6a531a53ce02057b0d2bb9494a733edeb16d4fe77ce7a506f534b848ef79319ffcbdaac3e0682350d3d2d96bd651696d2d4a1d43c51ca43851317b55597fad57df64f21589bbc37e286125f35c4e710a61792467fd72e740420defcdc3371d9f7447bd30b87bbcddd3bfe5f6deefc229a41cfd645f6a9d751dbd56bae00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x78, 0xfffffffffffffff5, 0x0, {0x200004000000000, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x20000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r11, 0x0, 0x2) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) 1.920575337s ago: executing program 6 (id=670): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ef9a3e9bc16618c04d15f60b0779a30b1ccacc7fc74e94d07f309bc26e98132c210be13c33cdc5d952783e3a877066dfea4ff8e29a5c89f1dc28862681eaa4e1fddc77e76afd56226af9d17bf70cbf18979c10478a8852793d3400afb8a405e175d9e295f8a4d91a5fe5f63e428095f391bd109ecade1dfc9f367478ee97f78cc1065a6dc12e2e"], 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ef9a3e9bc16618c04d15f60b0779a30b1ccacc7fc74e94d07f309bc26e98132c210be13c33cdc5d952783e3a877066dfea4ff8e29a5c89f1dc28862681eaa4e1fddc77e76afd56226af9d17bf70cbf18979c10478a8852793d3400afb8a405e175d9e295f8a4d91a5fe5f63e428095f391bd109ecade1dfc9f367478ee97f78cc1065a6dc12e2e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7430c3aa3f0f584520783cc3b8aca6702000014000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000076000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) (async) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000380)='./file0\x00', r7, &(0x7f0000000200)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2200800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp,port=0x000E000000004e24,']) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000"], 0x110) 1.798896887s ago: executing program 4 (id=671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) unshare(0x26020480) unshare(0xe000480) 1.796076677s ago: executing program 4 (id=672): r0 = syz_open_pts(0xffffffffffffffff, 0xa102) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000200)=""/4096, 0x1, 0x1000}, 0x0) sigaltstack(&(0x7f0000001300)={0x0}, &(0x7f0000001440)={0x0}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000040)={0x0}) 1.564492526s ago: executing program 6 (id=673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800cfb2e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) chdir(&(0x7f0000000180)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r5, 0x3) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 1.433271685s ago: executing program 6 (id=674): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x6, 0x3, 0x81, 0x40200, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0xb, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='itimer_expire\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x63d, &(0x7f0000001280)="$eJzs3c1rHG8dAPDvzCb5NW00qYjYohjw0IJ0m9Ri1VNbD/ZQsGAPIh4a2qTGbl9oUmhroSl4UFAQ9SrSi/+AeJUcvIg3EbQ3z0IVqXpQycrMzjbbzU67TfZN5/OB3Xnmmdl9nu/OPnmemdnJBFBZi9lTGnEsIq4lEfMdy+aitXCxWO/V355czx5JNJtf/WsSSZHXXn+nmB7JnpLWa353MeIjtb3lbjx6fGul0Wx5GnF68/a90xuPHp9av71yc/Xm6p3lM58/e27pC8u/GUycR4rppctf+cQPvvPNz639vnEqifNxdfrbe+IYlMXWpxtZiJ35zSTiXJbo8bnAKGVfwamImI6Ij8V81PK5lvlY//5YKwcMVbPW6p+aM02gcpIYdw2A8WiPA9r79sPYD55kLy9kzw97xD9V7L0fyveNDr9KOvaMstyIhQGUvxUR/3ly/KfZI0qOQ0wNoJzS8p9FxMd7bf8kj38hjzSLP42043VZeqk4tpHV70sHqEPSke7v+/f0AKW96X3i79wOWfzni2mWf7Hk/d91iGexa74ofxBfLQAotX2h6MizgUjs9n/ZyLA9/onu8U/zl/m5oe6+az9K+r+iZx2+fPw31av/b/f3h/I+PO0ahyWx9Y8rvd9yujvjT9+79KOy8hc7xn/ZIys/m36rv+ofeGj48lnE8a74v5t/9En8ulgn6TH+zVa51mcZX/7DXy6VLSuL/0BBvYfm84gTPfd/dkelWarr/GQS7fOTZ5dPr603Vpdazz3L+NVvv/HzsvLHHX+2/Q+XxN9u/722f5Z3r+xNk503Zn9x5fntVuqDPavOvTP+9M8zydU8NZM/7zavmeRysUpr8nBlc/P+mbfH214nny634j/56d7tvyT+fOdjtv0nsw/3vnbrVdmyA27/nWafK5bJ4r+xz+3/wz7L+OfXH3yybNne+HePSczuNygAAAAAAACoqDQ/B5uk9dfpNK0XJ94+GofTxt2Nzc+s3X1w50bEyfyHidNp+0z3fGs+yeaXix8ttufPdM1/NiKORsRParP5fP363caNcQcPAAAAAAAAAAAAAAAAAAAAE+JIcf3/TnE/sL/X0rReH3etgJEZ5g3mgMmm/UN15e1/NPdbAyaM/h+qq2f790cBKkFTh+rS/qG6tH+oLu0fqkv7h+oqb/97ljwbdl0AAAAAgIE5+qntF1MRsfXF2fyRmSmWTY+1ZsCwaeNQXbVxVwAYm9cn+N/j8v8fLwypMsBI9TX+/1fxzwGHXx1gDJJemfngoPn2xr/d85UAAAAAAAAAAAAAwBCcOLb9InH9P1SSu/5Cde3v+v/a/l8KTIxe//rf7UCgGuzjQ8X1cRDgUNkC1/8DAAAAAAAAAAAAwMjM5Y8krRc/A56LNK3XIz4UEQsxnaytN1aXIuLDEfHH2vQH2fxy+8UuHgYAAAAAAAAAAAAAAAAAAICB2Hj0+NZKo7F6vzPx7z05/9+J9h1PJ6U+nYlIhl5EGl05sxExCbEPJzHVkZNEbGVbfhDvnBz8+xOT8PkUibxFuLkfAAAAAAAAAAAAAAAAAACMUMe1x70d/9mIawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo7d7///hJcYdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+m/AQAA//89Fz8m") 1.338999225s ago: executing program 9 (id=675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0xffffffffffffff57}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="66b83f018ed8c4e2a903908000c0fe8fc850a629000f0054ac3d0fc7af00800000660fc777000f01f68fc850a230e00f22a50f20e035004000000f22e0", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000000) fcntl$setlease(r4, 0x400, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.293244875s ago: executing program 9 (id=676): syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000925000/0x2000)=nil, &(0x7f00000bb000/0x4000)=nil, 0x2000}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xd6) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setrlimit(0x5, &(0x7f0000000180)={0x3ff, 0x6}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 1.249704615s ago: executing program 39 (id=676): syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000925000/0x2000)=nil, &(0x7f00000bb000/0x4000)=nil, 0x2000}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xd6) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setrlimit(0x5, &(0x7f0000000180)={0x3ff, 0x6}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 1.119550514s ago: executing program 6 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r8, @ANYBLOB="0602da3897693772e0cb8626e57922294e9d2da4881970242902f178164dc5a06dcbee065c02f61801c69010630aefde62ed7efbf922cb3dea17b1e6fe2fd7513081d1c13244167734c1b801dc9df1b7c5a65952c83ea391180d271ca3c0f195e5764b139698862774754598a6756bc73b2b6d0eb111b2f32327b83f77e8661b402e108772e638d732db8a52f11d12039c841fb0b1b938284bc5ae1d1dd352e908a329835538fab8e2e543132296f396feec60080c4231ff61487a5f00aa296e16d55b4ccbba18659f9bacec0136099c1ec7bfd7c4b9f25c597937cad677aa7baccc67aaefa665cf648ead089890bc05406a5814b77b9aad71", @ANYBLOB="fe664c2d97754f493f12fd0e02564c74e700f7a44ba3b321cdee6fe0ae3567ff69416e59b528e362852b3adc608f5700c1e94661d76965b5596d4afe506e1e243e6813e428b7dda6b737698a0730f93c88f434753dd6a34ddc80f184d9325129dc0697de33da72408ce4150f718e97021416f9ba27e362fde4a6bb1b17a6ec2b72aea3cf09af7fb71b810f5302d6a7323c45be", @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r11}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) clock_gettime(0x0, &(0x7f0000000300)) 880.717823ms ago: executing program 4 (id=679): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x40015) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) socket$netlink(0x10, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x40015) (async) 873.998003ms ago: executing program 4 (id=680): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) (async) writev(r3, &(0x7f0000001240)=[{&(0x7f0000000f40)="173baf", 0x3}], 0x1) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) fstatfs(r1, &(0x7f0000000740)=""/199) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) (async) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) (async) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x802, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r9 = dup3(r8, r7, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYRES64=r2], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800900"], 0x48}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000840)=[@acquire, @acquire_done, @register_looper], 0x0, 0x0, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0x80, &(0x7f0000000680)=""/128}]}) (async) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r6, 0x0) 825.323603ms ago: executing program 4 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0xfffffffe, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bff8ff000000000007020000f83a8b62b403000008000000b70400fd9957b047cb891300b9bb570000009500400000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0xce22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0xce22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 644.983012ms ago: executing program 5 (id=677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRESOCT, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8, 0x1, 0xc5, 0x10000, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x8, @void, @value, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0xfffffff8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES64, @ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0xa249e977940144b9, 0x64, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r7}, 0x10) setgid(0x0) r8 = eventfd(0x800a6) write$eventfd(r8, &(0x7f0000000300)=0xfffffffffffffffb, 0x8) r9 = dup(r8) read$eventfd(r9, &(0x7f0000000040), 0x8) mlockall(0x3) mlockall(0x6) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000480)='system_u:object_r:depmod_exec_t:s0\x00', 0x23, 0x7) r10 = signalfd4(r4, &(0x7f0000000280)={[0x6]}, 0x8, 0x80000) sendmsg$IPSET_CMD_GET_BYNAME(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {0x417581a62967a185, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004055}, 0x20048000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x38) prctl$PR_SET_SECUREBITS(0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = getpgrp(0x0) ptrace(0x11, r11) 611.052463ms ago: executing program 4 (id=682): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000000100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000700000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x20000000, 0x2}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x2911, 0x4b) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r5, &(0x7f0000000040)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001fc0), 0x0, 0x2080, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) setsockopt$inet6_int(r9, 0x29, 0x3a, &(0x7f00000003c0)=0xe03, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f4ff000000000000000001000000000000000b000000742d6c696e6b0000"], 0x28}}, 0x0) 78.809951ms ago: executing program 6 (id=683): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) (async) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYBLOB="01002dbd7000000000000500000004000180040006", @ANYRES8=r1, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB="ca9ca8a41e10e8cc5774dc71e3e71a19668b7624dcd565f88028c0714775b6f1bb6d68f63d7f46db6e654963ed565c0ff77c4ab3e43f30e83dead86831769d562da598da1d082d96ed3407faf9af953dded1f8c27e7dbd798eadb9863cb896ca17db92", @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYBLOB="15e789473505819ea7b3261ef171827dcfb02262578e8a285278a9c32574c1696144e89911f8fa5db011d93d62c5a27978e7f4e19e0d4c8811c1ef50673b6354204e20c1ee5435df549e04f007e60637f0e14933fdb303cd6226fdaee6d1025ebaee84687eb072030a0caddf0ed37fb4a6641b224f528d85cd07f90a10a35dab9a25ae8cbca890067843f25f33c544a18ebf640a1b71db562ac5c9fb1a0becadd308fc96689399aa208ed7d014a7659489a6850da17968d4edcb411453ae6ca70bea07366df03eaa2648ac5d5ed4374a6c0b7ab3026ebf150ab7c2", @ANYBLOB="80a19e186ae203e66f31908c998fbbc410daed579cceb2f65dbdb11b7344bd0edd29d300f54291cc767a10738545fcdec625afad11742219783ea267f86cbdaa9ceaad331a318686466df75d1a6aafb90dad2ac20c212de51b442670ed1f88f9", @ANYRES64, @ANYRES64, @ANYBLOB="77c1b745704a886f5684532134a3531e3d1f7dd32f097dee3d8e9db5a2aeb304a5fe76781f11ca299d45067716a5563c9ade07360f44ac8b42ac4af8185085ce40e2e323ae3fa8e39c09d8be8baf21b1c22a195915e504c3a23cb9ce9a2e40362a516f48b1f1c3172d6bbca75682ba565cc8a130b7e1167ce21f05e5e0d08f466af9ca4ef651f8094a820256b6b51644753718b13b1e88ad1686711e1c694dd339895d83b023844590f132"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff0000000017000000440006"], 0x58}}, 0x4000000) (async, rerun: 64) r4 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64) accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='svc_wake_up\x00'}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 76.8828ms ago: executing program 5 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000000040000090000005d3637881fa59a188c19260d1009c19f01000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1c51}, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4040000) 63.011971ms ago: executing program 5 (id=685): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@user_xattr}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fchdir(r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x4, @desc1}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) mknod$loop(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r1 = open(0x0, 0x14507e, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001780)=""/4087, 0xff7) 0s ago: executing program 6 (id=686): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x765, &(0x7f0000000600)="$eJzs3c1rHGUYAPBnNknTptVEELSeAoIGSjemxlbBQ8WDCBYKerYum22o2WRLdlOaEFARwYug4kHQS89+1Js38eOq/4UHaamaFiseJDKb2XbT3W0+mmSp+/vBtM87M5t3nvl433d3ht0AetZo+k8u4nBEfJhEDGfzk4gYqEf9ESfX1ru5slxMpyRWV1/9I6mvc2NluRhNr0kdzAqPRsSP70UcybXWW11cmimUy6X5rDxemz0/Xl1cOnputjBdmi7NHZ+YnDx24pkTx3cu179+WTp09aOXnvz65D/vPnL5g5+SOBmHsmXNeeyU0RjN9slAugvXeXGnK+uypNsbwLakl2bf2lUeh2M4+uoRAPB/9lZErAIAPSbR/wNAj2l8DnBjZbnYmLr7icTeuvZCROxfy79xf3NtSX92z25//T7o0I1k3Z2RJCJGdqD+0Yj4/NvXv0yn2KX7kADtvP1dFrS0/0nLMwtb9dQm1hm9o6z9g73zfTr+ebbd+C93a/wTbcY/g22u3e3Y+PrPXdmBajpKx3/PNz3bdrMp/8xIX1Z6oD7mG0jOniuX0rbtwYgYi4HBtDxxlzrGrv97vWXm2m5dN/778+M3v0jrT/+/vWLuSv/g+pdOFWqFe8274do7EY/1t8s/uXX8kw7j39ObrOPl597/rNOyNP8038bUmv/uWr0U8UTb43/7ibbkrs8njtdPh/HGSdHGN79+OtSp/ubjn05p/Y33AnshPf5Dd89/JGl+XrO69Tp+vjT8Q6dlG+ff/vzfl7xWj/dl8y4WarX5iYh9ySut84/dfm2j3Fg/zX/s8Xr+B7JVWtq/dud/+p7wjY0Szzai/+rvX20//92V5j+1peO/9eDyzZm+TvVv7vhP1qOxbM5m2r/NbuC97DsAAAAAAAAAAAAAAAAAAAAAAAAA2KxcRByKJJe/Fedy+fzab3g/HEO5cqVaO3K2sjA3FfXfyh6JgVzjqy6Hm74PdSL7PvxG+dgd5acj4qGI+GTwQL2cL1bKU91OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyBzv8/n/qt8Fubx0AsGv2d3sDAIA9p/8HgN6z1f7feAEA7n/6cwDoPfp/AOg9+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB22elTp9Jp9e+V5WJanrqwuDBTuXB0qlSdyc8uFPPFyvz5/HSlMl0u5YuV2Y3+XrlSOT8ZcwsXx2ulam28urh0ZrayMFc7c262MF06UxrYk6wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGuqi0szhXK5NC8QCAT1IJJut0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA94v/AgAA//+u2SHL") getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) kernel console output (not intermixed with test programs): 515661][ T1995] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.526504][ T1995] F2FS-fs (loop0): invalid crc value [ 93.534931][ T1995] F2FS-fs (loop0): invalid crc value [ 93.541261][ T1995] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 93.703719][ T2003] netlink: 28 bytes leftover after parsing attributes in process `syz.6.382'. [ 93.712872][ T2004] netlink: 28 bytes leftover after parsing attributes in process `syz.6.382'. [ 93.781766][ T2008] tipc: Started in network mode [ 93.786752][ T2008] tipc: Node identity 7f000001, cluster identity 4711 [ 93.791308][ T2004] loop6: detected capacity change from 0 to 1024 [ 93.793930][ T2008] tipc: Enabled bearer , priority 10 [ 93.809132][ T2004] EXT4-fs (loop6): Test dummy encryption mode enabled [ 93.816040][ T2004] EXT4-fs (loop6): dax option not supported [ 93.916089][ T2011] UDC core: couldn't find an available UDC or it's busy: -16 [ 93.923424][ T2011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.951821][ T351] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.961400][ T513] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 94.011545][ T26] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 94.239140][ T2019] binder: 2018:2019 ioctl 4018620d 0 returned -22 [ 94.241541][ T738] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 94.271421][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 94.331514][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.342359][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.352234][ T351] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 94.361198][ T351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.361610][ T513] usb 8-1: config index 0 descriptor too short (expected 18, got 12) [ 94.377724][ T513] usb 8-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 94.378740][ T351] usb 2-1: config 0 descriptor?? [ 94.388073][ T513] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.401705][ T26] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.412700][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.419116][ T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=0221, bcdDevice= 0.00 [ 94.428317][ T513] usb 8-1: New USB device found, idVendor=12d1, idProduct=2f51, bcdDevice=1b.b4 [ 94.437391][ T513] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.445499][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.454502][ T513] usb 8-1: config 0 descriptor?? [ 94.463123][ T26] usb 1-1: config 0 descriptor?? [ 94.611451][ T738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.622479][ T738] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.631541][ T738] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.649957][ T738] usb 9-1: config 0 descriptor?? [ 94.716352][ T735] usb 8-1: USB disconnect, device number 5 [ 94.882468][ T351] chicony 0003:04F2:1421.0005: unbalanced collection at end of report description [ 94.892750][ T351] chicony 0003:04F2:1421.0005: Chicony hid parse failed: -22 [ 94.900018][ T351] chicony: probe of 0003:04F2:1421.0005 failed with error -22 [ 94.917310][ T351] tipc: Node number set to 2130706433 [ 95.071456][ T26] usb 1-1: string descriptor 0 read error: -71 [ 95.115275][ T2001] loop1: detected capacity change from 0 to 2048 [ 95.171446][ T738] usbhid 9-1:0.0: can't add hid device: -71 [ 95.177314][ T738] usbhid: probe of 9-1:0.0 failed with error -71 [ 95.186975][ T738] usb 9-1: USB disconnect, device number 3 [ 95.201673][ T2001] EXT4-fs (loop1): Ignoring removed nobh option [ 95.221515][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 95.223399][ T2001] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nodioread_nolock,,errors=continue. Quota mode: none. [ 95.234490][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 95.256776][ T2001] UDC core: couldn't find an available UDC or it's busy: -16 [ 95.328321][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 95.358803][ T2001] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.366479][ T30] audit: type=1400 audit(1735524852.116:1384): avc: denied { rename } for pid=2000 comm="syz.1.380" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.430941][ T26] usb 1-1: USB disconnect, device number 12 [ 95.473141][ T300] usb 2-1: USB disconnect, device number 5 [ 95.780568][ T2044] loop8: detected capacity change from 0 to 512 [ 95.936707][ T2044] EXT4-fs (loop8): corrupt root inode, run e2fsck [ 95.943513][ T2044] EXT4-fs (loop8): mount failed [ 96.039425][ T2050] futex_wake_op: syz.6.392 tries to shift op by -1; fix this program [ 96.131088][ T30] audit: type=1400 audit(1735524852.946:1385): avc: denied { create } for pid=2051 comm="syz.6.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 96.166994][ T2057] tipc: Enabling of bearer rejected, already enabled [ 96.441492][ T300] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.512494][ T2063] loop7: detected capacity change from 0 to 1024 [ 96.581008][ T2066] loop0: detected capacity change from 0 to 512 [ 96.588461][ T2063] EXT4-fs (loop7): Ignoring removed orlov option [ 96.598095][ T2063] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 96.606346][ T2063] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.673476][ T2068] serio: Serial port ptm0 [ 96.679080][ T2063] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 96.687964][ T2063] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 96.710437][ T2066] EXT4-fs (loop0): Ignoring removed orlov option [ 96.716952][ T300] usb 2-1: Using ep0 maxpacket: 32 [ 96.722171][ T2066] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.837872][ T30] audit: type=1400 audit(1735524853.696:1386): avc: denied { write } for pid=2077 comm="syz.6.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.875167][ T2066] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.397: casefold flag without casefold feature [ 96.895262][ T2066] EXT4-fs (loop0): Remounting filesystem read-only [ 96.901693][ T2066] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.397: couldn't read orphan inode 15 (err -117) [ 96.926054][ T2066] EXT4-fs (loop0): Remounting filesystem read-only [ 96.942113][ T2087] loop6: detected capacity change from 0 to 512 [ 96.977409][ T2066] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,. Quota mode: writeback. [ 96.994102][ T30] audit: type=1326 audit(1735524853.826:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdbecd29 code=0x7ffc0000 [ 97.030937][ T2087] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #16: comm syz.6.403: corrupted inode contents [ 97.067450][ T2087] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #16: comm syz.6.403: mark_inode_dirty error [ 97.077461][ T300] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 97.086518][ T30] audit: type=1326 audit(1735524853.826:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdbecd29 code=0x7ffc0000 [ 97.100115][ T300] usb 2-1: config 0 has no interface number 0 [ 97.112169][ T30] audit: type=1326 audit(1735524853.826:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2bfdbecd29 code=0x7ffc0000 [ 97.116343][ T2087] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #16: comm syz.6.403: corrupted inode contents [ 97.139160][ T30] audit: type=1326 audit(1735524853.826:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdbecd29 code=0x7ffc0000 [ 97.172675][ T300] usb 2-1: config 0 interface 184 has no altsetting 0 [ 97.173936][ T30] audit: type=1326 audit(1735524853.826:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdbecd29 code=0x7ffc0000 [ 97.201610][ T2087] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.403: mark_inode_dirty error [ 97.203799][ T30] audit: type=1326 audit(1735524853.826:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bfdbecd29 code=0x7ffc0000 [ 97.237310][ T2087] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #16: comm syz.6.403: corrupted inode contents [ 97.238115][ T30] audit: type=1326 audit(1735524853.836:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdbecd29 code=0x7ffc0000 [ 97.274344][ T2087] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 97.283849][ T2087] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #16: comm syz.6.403: corrupted inode contents [ 97.295906][ T2066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'. [ 97.304760][ T2087] EXT4-fs error (device loop6): ext4_truncate:4303: inode #16: comm syz.6.403: mark_inode_dirty error [ 97.316777][ T2087] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 97.327775][ T2087] EXT4-fs (loop6): 1 truncate cleaned up [ 97.340113][ T2087] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.371555][ T2087] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.391474][ T300] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 97.405758][ T300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.424644][ T300] usb 2-1: Product: syz [ 97.428977][ T300] usb 2-1: Manufacturer: syz [ 97.433560][ T300] usb 2-1: SerialNumber: syz [ 97.438801][ T300] usb 2-1: config 0 descriptor?? [ 97.482143][ T300] smsc75xx v1.0.0 [ 97.621379][ T735] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.711411][ T513] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 97.729111][ T2095] loop8: detected capacity change from 0 to 40427 [ 97.786217][ T2095] F2FS-fs (loop8): fault_injection options not supported [ 97.800552][ T2095] F2FS-fs (loop8): invalid crc value [ 97.807314][ T2095] F2FS-fs (loop8): Found nat_bits in checkpoint [ 97.851169][ T2095] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 97.871394][ T735] usb 1-1: Using ep0 maxpacket: 8 [ 97.991529][ T735] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 97.999528][ T735] usb 1-1: config 11 has no interface number 0 [ 98.024216][ T735] usb 1-1: config 11 interface 95 has no altsetting 0 [ 98.037750][ T2103] loop7: detected capacity change from 0 to 512 [ 98.113239][ T2103] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000008,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 98.132317][ T2103] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.142610][ T513] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.151857][ T513] usb 7-1: config 1 has no interface number 0 [ 98.157876][ T513] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.168980][ T513] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 98.178189][ T513] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 83, changing to 10 [ 98.189200][ T513] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 49758, setting to 1024 [ 98.200449][ T735] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 98.209725][ T735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.217905][ T735] usb 1-1: Product: syz [ 98.222085][ T735] usb 1-1: Manufacturer: syz [ 98.226546][ T735] usb 1-1: SerialNumber: syz [ 98.238195][ T2055] UDC core: couldn't find an available UDC or it's busy: -16 [ 98.245612][ T2055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.271644][ T300] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 98.282570][ T300] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 98.427397][ T2108] netlink: 16 bytes leftover after parsing attributes in process `syz.7.406'. [ 98.436862][ T513] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.535845][ T513] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.552793][ T513] usb 7-1: Product: syz [ 98.561728][ T513] usb 7-1: Manufacturer: syz [ 98.566148][ T513] usb 7-1: SerialNumber: syz [ 98.663810][ T2111] loop7: detected capacity change from 0 to 512 [ 98.674797][ T2113] tipc: Enabling of bearer rejected, already enabled [ 98.675867][ T735] usb 1-1: USB disconnect, device number 13 [ 98.752437][ T2111] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 98.758698][ T2111] EXT4-fs (loop7): mount failed [ 99.211463][ T300] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 99.222217][ T300] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 99.232112][ T300] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 99.241629][ T300] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 99.256226][ T300] usb 2-1: USB disconnect, device number 6 [ 99.338474][ T2120] loop0: detected capacity change from 0 to 40427 [ 99.382642][ T2120] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 99.388904][ T2120] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 99.397841][ T2120] F2FS-fs (loop0): invalid crc value [ 99.404548][ T2120] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 12 [ 99.411301][ T2120] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 99.552639][ T513] cdc_ncm 7-1:1.1: bind() failure [ 99.586692][ T2128] loop0: detected capacity change from 0 to 1024 [ 99.634959][ T2128] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 99.650690][ T2128] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 99.813627][ T513] usb 7-1: USB disconnect, device number 8 [ 100.014910][ T2138] loop1: detected capacity change from 0 to 2048 [ 100.118454][ T2138] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 100.137557][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.8.416'. [ 100.174527][ T2138] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.203830][ T2138] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 100.217329][ T2138] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.217329][ T2138] [ 100.242211][ T2138] EXT4-fs (loop1): Total free blocks count 0 [ 100.248028][ T2138] EXT4-fs (loop1): Free/Dirty block details [ 100.274703][ T2138] EXT4-fs (loop1): free_blocks=2415919104 [ 100.292011][ T2138] EXT4-fs (loop1): dirty_blocks=48 [ 100.296951][ T2138] EXT4-fs (loop1): Block reservation details [ 100.311380][ T2138] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 100.333079][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 100.333103][ T30] audit: type=1326 audit(1735524857.196:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2137 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 100.388017][ T2147] loop8: detected capacity change from 0 to 40427 [ 100.415103][ T2147] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 100.437305][ T2147] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 100.456651][ T2147] F2FS-fs (loop8): invalid crc value [ 100.502408][ T2147] F2FS-fs (loop8): Found nat_bits in checkpoint [ 100.508429][ T2156] loop7: detected capacity change from 0 to 512 [ 100.517433][ T2164] loop1: detected capacity change from 0 to 512 [ 100.591783][ T2147] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 100.601690][ T2147] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 100.617601][ T2156] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 100.624053][ T2156] EXT4-fs (loop7): mount failed [ 100.723043][ T2164] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.741473][ T2164] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.171446][ T2175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.417'. [ 101.672997][ T2177] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 101.689119][ T30] audit: type=1400 audit(1735524858.546:1443): avc: denied { rename } for pid=2146 comm="syz.8.417" name="#f" dev="loop8" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.947842][ T30] audit: type=1400 audit(1735524858.566:1444): avc: denied { unlink } for pid=2146 comm="syz.8.417" name="#f" dev="loop8" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.002791][ T2184] loop7: detected capacity change from 0 to 512 [ 102.010990][ T2176] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 102.062385][ T2184] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 102.073325][ T317] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 102.074369][ T2140] loop0: detected capacity change from 0 to 131072 [ 102.086727][ T317] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 102.146482][ T2140] F2FS-fs (loop0): invalid crc value [ 102.161106][ T2140] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 102.231390][ T2184] EXT4-fs (loop7): 1 truncate cleaned up [ 102.237046][ T2184] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback. [ 102.260219][ T2190] loop1: detected capacity change from 0 to 512 [ 102.271608][ T2140] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 102.332060][ T2140] incfs: ino conflict with backing FS 4 [ 102.343584][ T30] audit: type=1400 audit(1735524859.206:1445): avc: denied { write } for pid=2183 comm="syz.7.423" name=E91F7189591E9233614B dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 102.377696][ T2190] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 102.386429][ T2190] EXT4-fs (loop1): mount failed [ 102.402278][ T30] audit: type=1400 audit(1735524859.266:1446): avc: denied { append } for pid=2139 comm="syz.0.415" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.440737][ T2195] incfs: ino conflict with backing FS 7 [ 102.448310][ T2195] incfs: ino conflict with backing FS 5 [ 102.451727][ T30] audit: type=1400 audit(1735524859.266:1447): avc: denied { ioctl } for pid=2139 comm="syz.0.415" path="/82/mnt/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.471602][ T2195] incfs: ino conflict with backing FS 6 [ 102.541384][ T30] audit: type=1400 audit(1735524859.296:1448): avc: denied { link } for pid=2139 comm="syz.0.415" name="00000000000000000000000000000041" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.577477][ T30] audit: type=1400 audit(1735524859.396:1449): avc: denied { ioctl } for pid=2202 comm="syz.7.427" path="socket:[23601]" dev="sockfs" ino=23601 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.901514][ T351] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 103.151433][ T351] usb 8-1: Using ep0 maxpacket: 16 [ 103.271450][ T351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.289430][ T351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.306458][ T351] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 103.322620][ T351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.361967][ T351] usb 8-1: config 0 descriptor?? [ 103.481666][ T30] audit: type=1400 audit(1735524860.306:1450): avc: denied { getopt } for pid=2214 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.625771][ T30] audit: type=1400 audit(1735524860.316:1451): avc: denied { setopt } for pid=2218 comm="syz.8.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.147951][ T2228] loop6: detected capacity change from 0 to 2048 [ 104.233188][ T2228] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.282651][ T2228] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 104.285237][ T2234] loop8: detected capacity change from 0 to 512 [ 104.305304][ T351] hid-generic 0003:04F3:0755.0006: failed to start in urb: -90 [ 104.308269][ T2233] loop0: detected capacity change from 0 to 512 [ 104.315110][ T351] hid-generic 0003:04F3:0755.0006: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 104.382479][ T2233] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.396845][ T2233] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.434: inline data xattr refers to an external xattr inode [ 104.417016][ T2233] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.434: couldn't read orphan inode 12 (err -117) [ 104.429858][ T2233] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 104.450822][ T2234] EXT4-fs (loop8): corrupt root inode, run e2fsck [ 104.471520][ T2234] EXT4-fs (loop8): mount failed [ 104.508153][ T738] usb 8-1: USB disconnect, device number 6 [ 104.529530][ T2253] incfs: Options parsing error. -22 [ 104.535110][ T2253] incfs: mount failed -22 [ 104.915773][ T351] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 104.923121][ T369] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.171751][ T369] usb 2-1: Using ep0 maxpacket: 32 [ 105.292812][ T351] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.302791][ T369] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.313440][ T351] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.322091][ T369] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.331684][ T369] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 105.340462][ T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.382044][ T369] hub 2-1:4.0: USB hub found [ 105.411471][ T351] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.420394][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.428211][ T351] usb 7-1: SerialNumber: syz [ 105.475229][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 105.475245][ T30] audit: type=1326 audit(1735524862.336:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.504537][ T30] audit: type=1326 audit(1735524862.336:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.528361][ T30] audit: type=1326 audit(1735524862.336:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.552176][ T30] audit: type=1326 audit(1735524862.336:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.577045][ T30] audit: type=1326 audit(1735524862.336:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.600307][ T30] audit: type=1326 audit(1735524862.336:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.601439][ T369] hub 2-1:4.0: 24 ports detected [ 105.623557][ T30] audit: type=1326 audit(1735524862.336:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.623593][ T30] audit: type=1326 audit(1735524862.336:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.623622][ T30] audit: type=1326 audit(1735524862.336:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.623649][ T30] audit: type=1326 audit(1735524862.336:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6891ed29 code=0x7ffc0000 [ 105.726660][ T369] usb 2-1: selecting invalid altsetting 1 [ 105.732293][ T369] hub 2-1:4.0: Using single TT (err -22) [ 105.751437][ T369] hub 2-1:4.0: insufficient power available to use all downstream ports [ 105.843267][ T2247] loop6: detected capacity change from 0 to 40427 [ 105.851593][ T369] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 105.860624][ T369] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 105.925342][ T2247] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 105.932152][ T2247] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 105.990566][ T2247] F2FS-fs (loop6): Found nat_bits in checkpoint [ 106.083563][ T369] usb 2-1: USB disconnect, device number 7 [ 106.098652][ T2293] loop0: detected capacity change from 0 to 512 [ 106.112579][ T2247] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 106.119534][ T2247] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 106.135736][ T2293] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.155887][ T2293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 106.164556][ T2293] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.171112][ T2293] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.448: attempt to clear invalid blocks 1024 len 1 [ 106.184917][ T2293] EXT4-fs (loop0): Remounting filesystem read-only [ 106.191391][ T2293] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.448: bg 0: block 361: padding at end of block bitmap is not set [ 106.205651][ T2293] EXT4-fs (loop0): Remounting filesystem read-only [ 106.212034][ T2293] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 106.221060][ T2293] EXT4-fs (loop0): Remounting filesystem read-only [ 106.227538][ T2293] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.448: invalid indirect mapped block 1811939328 (level 0) [ 106.241544][ T2293] EXT4-fs (loop0): Remounting filesystem read-only [ 106.248099][ T2293] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.448: invalid indirect mapped block 2185560079 (level 1) [ 106.262696][ T2293] EXT4-fs (loop0): Remounting filesystem read-only [ 106.269166][ T2293] EXT4-fs (loop0): 1 truncate cleaned up [ 106.274832][ T2293] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,nojournal_checksum. Quota mode: none. [ 106.292255][ T2293] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.448: dx entry: limit 0 != root limit 125 [ 106.302280][ T351] usb 7-1: 0:2 : does not exist [ 106.304103][ T2293] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.448: Corrupt directory, running e2fsck is recommended [ 106.308563][ T351] usb 7-1: unit 5 not found! [ 106.333761][ T351] usb 7-1: USB disconnect, device number 9 [ 106.379610][ T513] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 106.651575][ T513] usb 8-1: Using ep0 maxpacket: 8 [ 106.706523][ T2304] loop1: detected capacity change from 0 to 2048 [ 106.790727][ T2304] EXT4-fs (loop1): Ignoring removed orlov option [ 106.812153][ T513] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 106.825000][ T513] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.843020][ T2304] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 106.907925][ T513] usb 8-1: config 0 descriptor?? [ 107.033165][ T2304] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.092917][ T824] attempt to access beyond end of device [ 107.092917][ T824] loop6: rw=2049, want=45104, limit=40427 [ 107.311555][ T513] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 107.406832][ T2319] loop1: detected capacity change from 0 to 128 [ 107.434590][ T2320] loop0: detected capacity change from 0 to 512 [ 107.451859][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.511742][ T2291] UDC core: couldn't find an available UDC or it's busy: -16 [ 107.522716][ T2319] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.531654][ T2291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 107.540742][ T2319] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.552343][ T513] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 107.562138][ T513] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 107.572386][ T513] asix: probe of 8-1:0.0 failed with error -71 [ 107.582079][ T513] usb 8-1: USB disconnect, device number 7 [ 107.603944][ T2320] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 107.623946][ T2320] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.645784][ T2325] overlayfs: failed to resolve '/);=9fm': -2 [ 107.773070][ T2327] loop1: detected capacity change from 0 to 4096 [ 107.792839][ T2320] overlayfs: missing 'lowerdir' [ 107.845048][ T2327] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.230102][ T2337] loop7: detected capacity change from 0 to 128 [ 108.314262][ T2339] loop0: detected capacity change from 0 to 256 [ 108.320840][ T2337] attempt to access beyond end of device [ 108.320840][ T2337] loop7: rw=2049, want=1041, limit=128 [ 108.358888][ T2339] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 108.431701][ T2346] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2346 comm=syz.7.459 [ 108.469514][ T2350] loop8: detected capacity change from 0 to 1024 [ 108.524980][ T2350] EXT4-fs (loop8): Ignoring removed bh option [ 108.584255][ T2350] EXT4-fs (loop8): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,errors=remount-ro,norecovery,debug_want_extra_isize=0x0000000000000080,bh,nodelalloc,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 108.586553][ T2355] loop6: detected capacity change from 0 to 512 [ 108.639304][ T2350] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.460: Invalid block bitmap block 1768304430 in block_group 0 [ 108.653657][ T2350] EXT4-fs (loop8): Remounting filesystem read-only [ 108.667712][ T2355] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.685407][ T2350] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.460: Invalid inode bitmap blk 3237228 in block_group 0 [ 108.698901][ T2350] EXT4-fs (loop8): Remounting filesystem read-only [ 108.727909][ T1911] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 24929 (inode size 256) [ 108.741279][ T2355] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e018, mo2=0000] [ 108.749630][ T2355] EXT4-fs (loop6): failed to initialize system zone (-117) [ 108.756769][ T2355] EXT4-fs (loop6): mount failed [ 108.762107][ T1911] EXT4-fs (loop8): Remounting filesystem read-only [ 108.769121][ T1911] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 24929 (inode size 256) [ 108.782147][ T1911] EXT4-fs (loop8): Remounting filesystem read-only [ 108.791106][ T2357] loop1: detected capacity change from 0 to 40427 [ 108.836360][ T2355] loop6: detected capacity change from 0 to 512 [ 108.840314][ T2357] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 108.850999][ T10] tipc: Disabling bearer [ 108.851886][ T2357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.857477][ T10] tipc: Left network mode [ 108.867620][ T2357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.876962][ T2355] EXT4-fs error (device loop6): ext4_quota_enable:6379: comm syz.6.462: inode #4278190080: comm syz.6.462: iget: illegal inode # [ 108.902355][ T2355] EXT4-fs error (device loop6): ext4_quota_enable:6382: comm syz.6.462: Bad quota inode: 4278190080, type: 2 [ 108.920199][ T2355] EXT4-fs warning (device loop6): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-117, ino=4278190080). Please run e2fsck to fix. [ 108.946811][ T2355] EXT4-fs (loop6): mount failed [ 108.953158][ T2357] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.960527][ T2357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.984717][ T2357] overlayfs: invalid origin (0000) [ 108.999877][ T295] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 108.999898][ T295] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 109.007970][ T295] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 109.015398][ T295] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 109.030140][ T295] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 109.037596][ T295] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 109.054671][ T295] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 109.084766][ T2371] netlink: 'syz.6.467': attribute type 2 has an invalid length. [ 109.105774][ T2371] loop6: detected capacity change from 0 to 1024 [ 109.154402][ T2369] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.161310][ T2369] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.176732][ T2369] device bridge_slave_0 entered promiscuous mode [ 109.187307][ T291] syz-executor (291) used greatest stack depth: 18592 bytes left [ 109.195711][ T2369] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.202925][ T2369] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.210517][ T2369] device bridge_slave_1 entered promiscuous mode [ 109.210967][ T2371] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 109.291502][ T2371] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.362548][ T2382] tipc: Enabling of bearer rejected, already enabled [ 109.511822][ T2379] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.544763][ T2379] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.565891][ T2379] device bridge_slave_0 entered promiscuous mode [ 109.593077][ T10] device bridge_slave_1 left promiscuous mode [ 109.599041][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.617131][ T10] device bridge_slave_0 left promiscuous mode [ 109.636923][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.658283][ T10] device veth1_macvtap left promiscuous mode [ 109.677245][ T10] device veth0_vlan left promiscuous mode [ 109.787060][ T2383] loop7: detected capacity change from 0 to 40427 [ 109.822346][ T2383] F2FS-fs (loop7): quotafile must be on filesystem root [ 109.901458][ T2379] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.907814][ T2394] loop1: detected capacity change from 0 to 40427 [ 109.908557][ T2379] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.922917][ T2379] device bridge_slave_1 entered promiscuous mode [ 109.942438][ T2394] F2FS-fs (loop1): fault_type options not supported [ 109.951767][ T2394] F2FS-fs (loop1): invalid crc value [ 109.958722][ T2394] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.961800][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.986718][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.002139][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.011568][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.018983][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.034738][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.045117][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.051995][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.059230][ T2394] F2FS-fs (loop1): Start checkpoint disabled! [ 110.064311][ T2398] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 110.065840][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.081848][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.090101][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.096982][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.104390][ T2394] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 110.145521][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.170589][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.179804][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.188492][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.196499][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.204837][ T2369] device veth0_vlan entered promiscuous mode [ 110.231515][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.247227][ T2369] device veth1_macvtap entered promiscuous mode [ 110.298161][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.316657][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.326434][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.334956][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.406185][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.414318][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.433384][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.441681][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.449972][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.456832][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.465182][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.474053][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.482926][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.489775][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.503852][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 110.503867][ T30] audit: type=1400 audit(1735524867.356:1711): avc: denied { append } for pid=2393 comm="syz.1.473" path="/99/file0/cgroup.controllers" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.533714][ T513] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 110.542268][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.550880][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.558806][ T30] audit: type=1400 audit(1735524867.366:1712): avc: denied { execute } for pid=2393 comm="syz.1.473" name="file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.581559][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.589203][ T30] audit: type=1400 audit(1735524867.366:1713): avc: denied { execute_no_trans } for pid=2393 comm="syz.1.473" path="/99/file0/file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.643014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.650918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.666234][ T30] audit: type=1400 audit(1735524867.526:1714): avc: denied { read } for pid=2412 comm="syz.9.477" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.690116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.700662][ T30] audit: type=1400 audit(1735524867.526:1715): avc: denied { open } for pid=2412 comm="syz.9.477" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.724055][ T369] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 110.725169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.740785][ T10] tipc: Disabling bearer [ 110.746969][ T2414] loop9: detected capacity change from 0 to 16 [ 110.753792][ T10] tipc: Left network mode [ 110.755541][ T2379] device veth0_vlan entered promiscuous mode [ 110.758382][ T8] attempt to access beyond end of device [ 110.758382][ T8] loop1: rw=2049, want=40984, limit=40427 [ 110.773951][ T2379] device veth1_macvtap entered promiscuous mode [ 110.782577][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.793062][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.803220][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.812496][ T2414] erofs: (device loop9): mounted with root inode @ nid 36. [ 110.816051][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.827989][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.841519][ T513] usb 8-1: Using ep0 maxpacket: 16 [ 110.849306][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.867068][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.891113][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.900944][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.909598][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.918537][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.962628][ T513] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 110.982907][ T513] usb 8-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 110.993503][ T513] usb 8-1: config 0 has no interface number 0 [ 111.003664][ T30] audit: type=1400 audit(1735524867.866:1716): avc: denied { read write } for pid=2416 comm="syz.2.470" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 111.034181][ T2417] loop2: detected capacity change from 0 to 1024 [ 111.051997][ T30] audit: type=1400 audit(1735524867.866:1717): avc: denied { open } for pid=2416 comm="syz.2.470" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 111.067147][ T513] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.076435][ T30] audit: type=1400 audit(1735524867.866:1718): avc: denied { create } for pid=2416 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.085124][ T513] usb 8-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.112392][ T30] audit: type=1400 audit(1735524867.886:1719): avc: denied { write } for pid=2416 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.117685][ T513] usb 8-1: config 0 interface 41 has no altsetting 0 [ 111.137940][ T369] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 111.173606][ T2417] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 111.195441][ T2420] loop1: detected capacity change from 0 to 256 [ 111.205418][ T2417] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 111.220467][ T2417] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 111.232887][ T2417] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.232887][ T2417] [ 111.242595][ T2417] EXT4-fs (loop2): Total free blocks count 0 [ 111.248447][ T2417] EXT4-fs (loop2): Free/Dirty block details [ 111.254406][ T2417] EXT4-fs (loop2): free_blocks=68451041280 [ 111.256204][ T2420] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 111.267978][ T2417] EXT4-fs (loop2): dirty_blocks=16 [ 111.273030][ T2417] EXT4-fs (loop2): Block reservation details [ 111.278879][ T2417] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 111.296201][ T2424] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 36 with error 28 [ 111.308541][ T2424] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.308541][ T2424] [ 111.311493][ T369] usb 7-1: New USB device found, idVendor=19d2, idProduct=7858, bcdDevice=8d.d2 [ 111.327271][ T369] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.338330][ T30] audit: type=1400 audit(1735524868.196:1720): avc: denied { read } for pid=2418 comm="syz.1.478" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.341494][ T513] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 111.365665][ T369] usb 7-1: Product: syz [ 111.370351][ T513] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.382426][ T513] usb 8-1: Product: syz [ 111.387889][ T513] usb 8-1: Manufacturer: syz [ 111.393585][ T513] usb 8-1: SerialNumber: syz [ 111.396509][ T369] usb 7-1: Manufacturer: syz [ 111.400430][ T513] usb 8-1: config 0 descriptor?? [ 111.403628][ T369] usb 7-1: SerialNumber: syz [ 111.415343][ T369] usb 7-1: config 0 descriptor?? [ 111.432522][ T2406] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.452416][ T513] dm9601: probe of 8-1:0.41 failed with error -22 [ 111.454498][ T369] usb 7-1: bad CDC descriptors [ 111.460560][ T513] sr9700: probe of 8-1:0.41 failed with error -22 [ 111.515512][ T10] device veth1_macvtap left promiscuous mode [ 111.521810][ T10] device veth0_vlan left promiscuous mode [ 111.631486][ T2435] tipc: Started in network mode [ 111.636209][ T2435] tipc: Node identity 7f000001, cluster identity 4711 [ 111.643786][ T2435] tipc: Enabled bearer , priority 10 [ 111.652248][ T2406] UDC core: couldn't find an available UDC or it's busy: -16 [ 111.662026][ T2406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.672163][ T513] usb 8-1: USB disconnect, device number 8 [ 111.678492][ T369] usb 7-1: USB disconnect, device number 10 [ 111.962962][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 111.983220][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 111.992892][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 112.001665][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 112.010497][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 112.110901][ T2449] loop1: detected capacity change from 0 to 128 [ 112.145397][ T2449] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.761375][ T369] tipc: Node number set to 2130706433 [ 113.160953][ T2474] loop7: detected capacity change from 0 to 40427 [ 113.168250][ T2491] loop6: detected capacity change from 0 to 256 [ 113.168563][ T2490] tipc: Enabling of bearer rejected, already enabled [ 113.211861][ T2491] exfat: Deprecated parameter 'namecase' [ 113.220044][ T2491] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 113.245401][ T2474] F2FS-fs (loop7): fault_injection options not supported [ 113.257708][ T2474] F2FS-fs (loop7): invalid crc value [ 113.281464][ T2474] F2FS-fs (loop7): Found nat_bits in checkpoint [ 113.397358][ T2474] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 113.417863][ T2508] loop6: detected capacity change from 0 to 512 [ 113.432109][ T2474] attempt to access beyond end of device [ 113.432109][ T2474] loop7: rw=2049, want=45208, limit=40427 [ 113.452687][ T2508] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 113.511761][ T1083] attempt to access beyond end of device [ 113.511761][ T1083] loop7: rw=2049, want=45216, limit=40427 [ 113.547649][ T2508] EXT4-fs (loop6): 1 orphan inode deleted [ 113.553339][ T2508] EXT4-fs (loop6): 1 truncate cleaned up [ 113.571491][ T2508] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 113.890424][ T2529] loop6: detected capacity change from 0 to 2048 [ 113.951594][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.233995][ T2529] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.339010][ T2548] tipc: Enabling of bearer rejected, already enabled [ 114.431391][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 114.456872][ T2553] loop1: detected capacity change from 0 to 512 [ 114.569701][ T2557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.510'. [ 114.681479][ T39] usb 3-1: config 6 has an invalid interface number: 95 but max is 3 [ 114.689713][ T39] usb 3-1: config 6 has an invalid interface number: 152 but max is 3 [ 114.698008][ T39] usb 3-1: config 6 has an invalid interface number: 240 but max is 3 [ 114.725410][ T39] usb 3-1: config 6 has an invalid interface number: 106 but max is 3 [ 114.734254][ T2561] loop1: detected capacity change from 0 to 16 [ 114.751512][ T39] usb 3-1: config 6 has an invalid interface number: 218 but max is 3 [ 114.769884][ T39] usb 3-1: config 6 has an invalid interface number: 133 but max is 3 [ 114.791628][ T39] usb 3-1: config 6 has an invalid descriptor of length 117, skipping remainder of the config [ 114.804227][ T2561] erofs: (device loop1): mounted with root inode @ nid 36. [ 114.825106][ T39] usb 3-1: config 6 has 6 interfaces, different from the descriptor's value: 4 [ 114.834317][ T39] usb 3-1: config 6 has no interface number 0 [ 114.840294][ T39] usb 3-1: config 6 has no interface number 1 [ 114.846281][ T39] usb 3-1: config 6 has no interface number 2 [ 114.852362][ T39] usb 3-1: config 6 has no interface number 3 [ 114.858289][ T39] usb 3-1: config 6 has no interface number 4 [ 114.864205][ T39] usb 3-1: config 6 has no interface number 5 [ 114.875248][ T39] usb 3-1: config 6 interface 95 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 114.885949][ T39] usb 3-1: config 6 interface 95 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 114.898996][ T39] usb 3-1: too many endpoints for config 6 interface 152 altsetting 216: 106, using maximum allowed: 30 [ 114.910037][ T39] usb 3-1: config 6 interface 152 altsetting 216 has a duplicate endpoint with address 0xC, skipping [ 114.920933][ T39] usb 3-1: config 6 interface 152 altsetting 216 has a duplicate endpoint with address 0xF, skipping [ 114.931693][ T39] usb 3-1: config 6 interface 152 altsetting 216 has 4 endpoint descriptors, different from the interface descriptor's value: 106 [ 114.945464][ T39] usb 3-1: config 6 interface 240 altsetting 11 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 114.956509][ T39] usb 3-1: config 6 interface 240 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 114.967169][ T39] usb 3-1: config 6 interface 240 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 114.977811][ T39] usb 3-1: config 6 interface 240 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 114.988629][ T39] usb 3-1: config 6 interface 240 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 114.999299][ T39] usb 3-1: config 6 interface 240 altsetting 11 has an invalid endpoint with address 0x80, skipping [ 115.009959][ T39] usb 3-1: config 6 interface 240 altsetting 11 endpoint 0xE has invalid maxpacket 3071, setting to 64 [ 115.020855][ T39] usb 3-1: config 6 interface 106 altsetting 233 has a duplicate endpoint with address 0x3, skipping [ 115.031631][ T39] usb 3-1: config 6 interface 106 altsetting 233 has a duplicate endpoint with address 0xE, skipping [ 115.042331][ T39] usb 3-1: config 6 interface 106 altsetting 233 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 115.053294][ T39] usb 3-1: config 6 interface 106 altsetting 233 has a duplicate endpoint with address 0xD, skipping [ 115.063275][ T2571] loop9: detected capacity change from 0 to 40427 [ 115.064012][ T39] usb 3-1: config 6 interface 106 altsetting 233 has a duplicate endpoint with address 0x3, skipping [ 115.080961][ T39] usb 3-1: config 6 interface 106 altsetting 233 endpoint 0x8 has an invalid bInterval 128, changing to 11 [ 115.092398][ T39] usb 3-1: config 6 interface 106 altsetting 233 endpoint 0x8 has invalid maxpacket 2047, setting to 1024 [ 115.103635][ T39] usb 3-1: config 6 interface 106 altsetting 233 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 115.116767][ T39] usb 3-1: too many endpoints for config 6 interface 218 altsetting 138: 94, using maximum allowed: 30 [ 115.127824][ T39] usb 3-1: config 6 interface 218 altsetting 138 has a duplicate endpoint with address 0x9, skipping [ 115.138666][ T39] usb 3-1: config 6 interface 218 altsetting 138 has a duplicate endpoint with address 0xF, skipping [ 115.146233][ T2571] F2FS-fs (loop9): invalid crc value [ 115.150800][ T39] usb 3-1: config 6 interface 218 altsetting 138 has a duplicate endpoint with address 0x8, skipping [ 115.163826][ T2571] F2FS-fs (loop9): Found nat_bits in checkpoint [ 115.165206][ T39] usb 3-1: config 6 interface 218 altsetting 138 has an invalid endpoint with address 0x80, skipping [ 115.182037][ T39] usb 3-1: config 6 interface 218 altsetting 138 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 115.193039][ T39] usb 3-1: config 6 interface 218 altsetting 138 has a duplicate endpoint with address 0xB, skipping [ 115.203765][ T39] usb 3-1: config 6 interface 218 altsetting 138 has an invalid endpoint with address 0x0, skipping [ 115.212573][ T2571] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 115.214605][ T39] usb 3-1: config 6 interface 218 altsetting 138 has 7 endpoint descriptors, different from the interface descriptor's value: 94 [ 115.234761][ T39] usb 3-1: config 6 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 115.248081][ T39] usb 3-1: config 6 interface 95 has no altsetting 0 [ 115.254652][ T39] usb 3-1: config 6 interface 152 has no altsetting 0 [ 115.261198][ T39] usb 3-1: config 6 interface 240 has no altsetting 0 [ 115.267874][ T39] usb 3-1: config 6 interface 106 has no altsetting 0 [ 115.274550][ T39] usb 3-1: config 6 interface 218 has no altsetting 0 [ 115.303018][ T2569] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 115.319857][ T2569] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 115.347406][ T2569] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 115.357817][ T2369] attempt to access beyond end of device [ 115.357817][ T2369] loop9: rw=2049, want=45104, limit=40427 [ 115.381604][ T2569] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.081561][ T2569] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 116.095866][ T2569] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 116.111046][ T2561] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.124057][ T2561] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 116.137155][ T2561] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 116.194254][ T2583] loop7: detected capacity change from 0 to 8192 [ 116.219678][ T2583] loop7: p2 p3 p4[EZD] [ 116.224256][ T2583] loop7: p2 size 2130706438 extends beyond EOD, truncated [ 116.232543][ T2583] loop7: p4 start 268437891 is beyond EOD, truncated [ 116.261637][ T39] usb 3-1: language id specifier not provided by device, defaulting to English [ 116.335620][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 116.335635][ T30] audit: type=1400 audit(1735524873.196:1815): avc: denied { read write } for pid=2588 comm="syz.9.517" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.370398][ T30] audit: type=1400 audit(1735524873.226:1816): avc: denied { open } for pid=2588 comm="syz.9.517" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.416737][ T2587] loop6: detected capacity change from 0 to 40427 [ 116.437041][ T2587] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 116.444841][ T2587] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 116.454302][ T2587] F2FS-fs (loop6): invalid crc value [ 116.462285][ T2587] F2FS-fs (loop6): Found nat_bits in checkpoint [ 116.481401][ T735] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.500881][ T2587] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 116.507816][ T2587] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 116.521442][ T39] usb 3-1: New USB device found, idVendor=413c, idProduct=4002, bcdDevice=47.7f [ 116.538107][ T2597] loop7: detected capacity change from 0 to 2048 [ 116.546216][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.554338][ T39] usb 3-1: Product: syz [ 116.564147][ T2578] overlayfs: failed to resolve './file0': -2 [ 116.570412][ T39] usb 3-1: Manufacturer: syz [ 116.575397][ T39] usb 3-1: SerialNumber: syz [ 116.582861][ T30] audit: type=1400 audit(1735524873.446:1817): avc: denied { write } for pid=2600 comm="syz.2.522" name="vlan1" dev="proc" ino=4026532932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.605680][ T2597] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 116.614877][ T39] usb 3-1: can't set config #6, error -71 [ 116.637132][ T39] usb 3-1: USB disconnect, device number 2 [ 116.641526][ T30] audit: type=1400 audit(1735524873.446:1818): avc: denied { write } for pid=2600 comm="syz.2.522" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.673842][ T2597] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 116.699440][ T30] audit: type=1326 audit(1735524873.556:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f2dfd29 code=0x7ffc0000 [ 116.724496][ T30] audit: type=1326 audit(1735524873.556:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f2dfd29 code=0x7ffc0000 [ 116.748030][ T30] audit: type=1326 audit(1735524873.556:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc9f2dfd29 code=0x7ffc0000 [ 116.771716][ T30] audit: type=1326 audit(1735524873.556:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f2dfd29 code=0x7ffc0000 [ 116.795734][ T2607] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 116.810362][ T30] audit: type=1326 audit(1735524873.556:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f2dfd29 code=0x7ffc0000 [ 116.815804][ T2607] EXT4-fs (loop7): Remounting filesystem read-only [ 116.834710][ T30] audit: type=1326 audit(1735524873.586:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fcc9f2dfd29 code=0x7ffc0000 [ 116.864952][ T639] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 116.869888][ T369] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 116.881471][ T735] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 116.890319][ T735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.898844][ T639] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 116.931878][ T735] usb 2-1: config 0 descriptor?? [ 117.112993][ T369] usb 10-1: Using ep0 maxpacket: 16 [ 117.186007][ T2613] loop6: detected capacity change from 0 to 128 [ 117.263656][ T2613] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.274373][ T2613] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.391479][ T369] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 117.410794][ T369] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.420606][ T735] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 117.429411][ T735] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 117.440828][ T369] usb 10-1: Product: syz [ 117.445718][ T735] playstation 0003:054C:0DF2.0007: item fetching failed at offset 2/5 [ 117.454405][ T369] usb 10-1: Manufacturer: syz [ 117.458906][ T369] usb 10-1: SerialNumber: syz [ 117.464367][ T735] playstation 0003:054C:0DF2.0007: Parse failed [ 117.475573][ T369] usb 10-1: config 0 descriptor?? [ 117.480531][ T735] playstation: probe of 0003:054C:0DF2.0007 failed with error -22 [ 117.507343][ T2620] loop7: detected capacity change from 0 to 512 [ 117.513868][ T369] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 117.523949][ T369] usb 10-1: Detected FT232H [ 117.533707][ T2613] input: syz0 as /devices/virtual/input/input14 [ 117.757110][ T2633] loop7: detected capacity change from 0 to 256 [ 117.811411][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.824274][ T2633] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 117.922705][ T2638] loop7: detected capacity change from 0 to 128 [ 117.931675][ T735] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 117.941450][ T369] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 117.962739][ T369] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 117.981785][ T369] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.996332][ T369] usb 10-1: USB disconnect, device number 2 [ 118.011808][ T369] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 118.021693][ T369] ftdi_sio 10-1:0.0: device disconnected [ 118.071460][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 118.221440][ T39] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 118.230313][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.242709][ T39] usb 3-1: config 0 descriptor?? [ 118.301501][ T735] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.321375][ T735] usb 7-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 118.330287][ T735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.349347][ T2642] loop7: detected capacity change from 0 to 131072 [ 118.356316][ T735] usb 7-1: config 0 descriptor?? [ 118.442619][ T2642] F2FS-fs (loop7): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 118.451032][ T2642] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 118.460336][ T2642] F2FS-fs (loop7): invalid crc value [ 118.468119][ T2642] F2FS-fs (loop7): Found nat_bits in checkpoint [ 118.512791][ T2642] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 118.519770][ T2642] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 118.665924][ T2664] loop9: detected capacity change from 0 to 8192 [ 118.764301][ T2676] netlink: 16 bytes leftover after parsing attributes in process `syz.7.537'. [ 118.832597][ T735] wacom 0003:056A:00EF.0008: unknown main item tag 0x0 [ 118.839301][ T735] wacom 0003:056A:00EF.0008: unknown main item tag 0x0 [ 118.846000][ T735] wacom 0003:056A:00EF.0008: unknown main item tag 0x0 [ 118.852695][ T735] wacom 0003:056A:00EF.0008: unknown main item tag 0x0 [ 118.859419][ T735] wacom 0003:056A:00EF.0008: unknown main item tag 0x0 [ 118.866902][ T735] wacom 0003:056A:00EF.0008: hidraw0: USB HID v0.00 Device [HID 056a:00ef] on usb-dummy_hcd.6-1/input0 [ 118.880548][ T316] udevd[316]: failed to send result of seq 8401 to main daemon: Connection refused [ 118.933793][ T2604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 118.943284][ T2604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 118.952643][ T2604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 118.991419][ T39] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 119.001242][ T39] asix: probe of 3-1:0.0 failed with error -71 [ 119.007200][ T26] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 119.015584][ T39] usb 3-1: USB disconnect, device number 3 [ 119.220651][ T735] usb 2-1: USB disconnect, device number 8 [ 119.239925][ T2679] loop1: detected capacity change from 0 to 2048 [ 119.273335][ T2679] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.421485][ T26] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 119.433243][ T26] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 119.445863][ T26] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 119.455005][ T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.481445][ T2675] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.522056][ T2698] loop2: detected capacity change from 0 to 512 [ 119.539431][ T351] usb 7-1: USB disconnect, device number 11 [ 119.542512][ T2698] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 119.559942][ T2698] EXT4-fs (loop2): Invalid want_extra_isize 230 [ 119.597487][ T2690] loop1: detected capacity change from 0 to 128 [ 119.701896][ T2674] UDC core: couldn't find an available UDC or it's busy: -16 [ 119.709165][ T2674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.911357][ T369] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.961379][ T351] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 120.108124][ T2673] loop9: detected capacity change from 0 to 40427 [ 120.151383][ T369] usb 2-1: Using ep0 maxpacket: 8 [ 120.152047][ T2673] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 120.164036][ T2673] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 120.173202][ T2673] F2FS-fs (loop9): invalid crc value [ 120.180415][ T2673] F2FS-fs (loop9): Found nat_bits in checkpoint [ 120.212970][ T2673] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 120.219934][ T2673] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 120.441466][ T26] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 120.452068][ T369] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 120.452991][ T26] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input18 [ 120.460451][ T369] usb 2-1: can't read configurations, error -61 [ 120.491852][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.496566][ T26] usb 10-1: USB disconnect, device number 3 [ 120.508630][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.526276][ T351] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.539449][ T351] usb 7-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 120.557953][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.591605][ T351] usb 7-1: config 0 descriptor?? [ 120.609838][ T2720] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 120.621446][ T369] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.641870][ T2730] loop9: detected capacity change from 0 to 512 [ 120.732697][ T2730] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 120.739969][ T2730] EXT4-fs (loop9): mount failed [ 120.755380][ T2739] loop7: detected capacity change from 0 to 512 [ 120.793850][ T2723] loop2: detected capacity change from 0 to 40427 [ 120.832019][ T2723] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 120.838797][ T2723] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.861444][ T369] usb 2-1: Using ep0 maxpacket: 8 [ 120.918550][ T2723] F2FS-fs (loop2): invalid crc value [ 120.956801][ T2723] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.981795][ T2739] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 120.998336][ T2739] EXT4-fs (loop7): mount failed [ 120.998538][ T2723] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 121.011543][ T2723] F2FS-fs (loop2): Start checkpoint disabled! [ 121.212695][ T2723] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.223343][ T2723] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.418981][ T369] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 121.427376][ T351] elecom 0003:056E:00FC.0009: item fetching failed at offset 4/5 [ 121.434987][ T369] usb 2-1: can't read configurations, error -61 [ 121.441292][ T351] elecom: probe of 0003:056E:00FC.0009 failed with error -22 [ 121.448597][ T369] usb usb2-port1: attempt power cycle [ 121.456000][ T2700] loop6: detected capacity change from 0 to 1024 [ 121.512545][ T2700] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 121.523773][ T639] attempt to access beyond end of device [ 121.523773][ T639] loop2: rw=2049, want=40984, limit=40427 [ 121.551429][ T2700] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 121.602648][ T2700] EXT4-fs (loop6): invalid journal inode [ 121.608144][ T2700] EXT4-fs (loop6): can't get journal size [ 121.641569][ T2700] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.544: blocks 2-2 from inode overlap system zone [ 121.665397][ T2700] EXT4-fs (loop6): failed to initialize system zone (-117) [ 121.675487][ T2700] EXT4-fs (loop6): mount failed [ 121.803053][ T26] usb 7-1: USB disconnect, device number 12 [ 122.027953][ T2760] loop2: detected capacity change from 0 to 512 [ 122.043324][ T2760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.068351][ T2760] EXT4-fs (loop2): 1 truncate cleaned up [ 122.071410][ T369] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 122.081291][ T2760] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.094176][ T2760] overlayfs: missing 'lowerdir' [ 122.098971][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 122.098991][ T30] audit: type=1400 audit(1735524878.956:2060): avc: denied { mounton } for pid=2758 comm="syz.2.556" path="/16/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.140797][ T30] audit: type=1400 audit(1735524878.986:2061): avc: denied { name_bind } for pid=2758 comm="syz.2.556" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.162911][ T30] audit: type=1400 audit(1735524878.996:2062): avc: denied { link } for pid=2758 comm="syz.2.556" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 122.181500][ T369] usb 2-1: Using ep0 maxpacket: 8 [ 122.186537][ T30] audit: type=1400 audit(1735524878.996:2063): avc: denied { read } for pid=2758 comm="syz.2.556" name="file3" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 122.241426][ T30] audit: type=1400 audit(1735524879.096:2064): avc: denied { getopt } for pid=2765 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.331385][ T39] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 122.340204][ T2768] loop2: detected capacity change from 0 to 1024 [ 122.346519][ T369] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 122.354134][ T369] usb 2-1: can't read configurations, error -61 [ 122.413494][ T2768] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: none. [ 122.416158][ T2755] loop9: detected capacity change from 0 to 131072 [ 122.462220][ T2755] F2FS-fs (loop9): Test dummy encryption mode enabled [ 122.477615][ T2755] F2FS-fs (loop9): invalid crc value [ 122.501418][ T369] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.509936][ T2755] F2FS-fs (loop9): Found nat_bits in checkpoint [ 122.517613][ T2379] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /19/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 122.552469][ T2779] loop1: detected capacity change from 0 to 512 [ 122.557178][ T2379] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 122.558724][ T30] audit: type=1400 audit(1735524879.416:2065): avc: denied { rmdir } for pid=2379 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.579171][ T2379] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /19/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 122.622827][ T2755] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 122.631455][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 122.638216][ T2755] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 122.646934][ T30] audit: type=1400 audit(1735524879.506:2066): avc: denied { watch } for pid=2753 comm="syz.9.557" path="/13/file1/control" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 122.647671][ T2379] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 122.689949][ T30] audit: type=1400 audit(1735524879.556:2067): avc: denied { create } for pid=2773 comm="syz.6.562" dev="anon_inodefs" ino=26100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.698339][ T2379] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /19/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 122.733756][ T2379] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 122.754315][ T2379] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /19/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 122.778296][ T2779] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,usrquota,,errors=continue. Quota mode: writeback. [ 122.791755][ T2779] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.802582][ T2379] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 122.823248][ T2379] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /19/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 122.846166][ T30] audit: type=1400 audit(1735524879.706:2068): avc: denied { setattr } for pid=2778 comm="syz.1.564" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.851599][ T2379] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 122.894328][ T2779] 9pnet: Insufficient options for proto=fd [ 122.991585][ T369] usb 2-1: device not accepting address 12, error -71 [ 123.001606][ T369] usb usb2-port1: unable to enumerate USB device [ 123.084695][ T30] audit: type=1400 audit(1735524879.896:2069): avc: denied { relabelfrom } for pid=2786 comm="syz.6.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.131501][ T39] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 123.145074][ T639] tipc: Disabling bearer [ 123.241452][ T639] tipc: Left network mode [ 123.265542][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.273713][ T39] usb 8-1: Product: syz [ 123.278797][ T39] usb 8-1: Manufacturer: syz [ 123.279319][ T2792] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.283255][ T39] usb 8-1: SerialNumber: syz [ 123.299183][ T39] usb 8-1: config 0 descriptor?? [ 123.304288][ T2792] FAT-fs (loop13): unable to read boot sector [ 123.382700][ T2794] loop1: detected capacity change from 0 to 16 [ 123.424143][ T2794] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.443040][ T2794] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 123.451970][ T2794] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 123.460774][ T2794] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 123.470359][ T2794] attempt to access beyond end of device [ 123.470359][ T2794] loop1: rw=524288, want=392, limit=16 [ 123.481474][ T2794] attempt to access beyond end of device [ 123.481474][ T2794] loop1: rw=524288, want=400, limit=16 [ 123.493067][ T2794] attempt to access beyond end of device [ 123.493067][ T2794] loop1: rw=524288, want=24, limit=16 [ 123.504084][ T2794] attempt to access beyond end of device [ 123.504084][ T2794] loop1: rw=524288, want=32, limit=16 [ 123.515136][ T2794] attempt to access beyond end of device [ 123.515136][ T2794] loop1: rw=524288, want=736, limit=16 [ 123.526122][ T2794] attempt to access beyond end of device [ 123.526122][ T2794] loop1: rw=524288, want=744, limit=16 [ 123.679171][ T2811] loop9: detected capacity change from 0 to 1024 [ 123.697164][ T2800] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.704291][ T2800] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.712056][ T2800] device bridge_slave_0 entered promiscuous mode [ 123.712093][ T2811] EXT4-fs (loop9): Test dummy encryption mode enabled [ 123.719199][ T2800] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.731733][ T2800] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.731818][ T2811] EXT4-fs (loop9): Ignoring removed orlov option [ 123.739060][ T2800] device bridge_slave_1 entered promiscuous mode [ 123.748418][ T2811] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 123.781269][ T2759] UDC core: couldn't find an available UDC or it's busy: -16 [ 123.788612][ T2759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.793088][ T2811] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 123.796382][ T2759] UDC core: couldn't find an available UDC or it's busy: -16 [ 123.810286][ T2759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.885529][ T2800] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.892444][ T2800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.899546][ T2800] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.906421][ T2800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.962991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.970636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.979282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.013404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.022824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.040351][ T2800] device veth0_vlan entered promiscuous mode [ 124.056466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.064383][ T735] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 124.072303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.080332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.083191][ T2821] loop1: detected capacity change from 0 to 512 [ 124.094397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.103904][ T639] device bridge_slave_1 left promiscuous mode [ 124.109888][ T639] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.117291][ T639] device bridge_slave_0 left promiscuous mode [ 124.121917][ T2823] loop9: detected capacity change from 0 to 512 [ 124.127867][ T639] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.138050][ T639] device veth1_macvtap left promiscuous mode [ 124.140780][ T2821] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.574: inode #1: comm syz.1.574: iget: illegal inode # [ 124.144767][ T639] device veth0_vlan left promiscuous mode [ 124.157024][ T2821] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.574: error while reading EA inode 1 err=-117 [ 124.175129][ T2821] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.574: inode #1: comm syz.1.574: iget: illegal inode # [ 124.188188][ T2821] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.574: error while reading EA inode 1 err=-117 [ 124.200580][ T2821] EXT4-fs (loop1): 1 orphan inode deleted [ 124.206360][ T2821] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 124.225365][ T2823] EXT4-fs (loop9): too many log groups per flexible block group [ 124.239267][ T2823] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 124.246668][ T2823] EXT4-fs (loop9): mount failed [ 124.325364][ T735] usb 7-1: Using ep0 maxpacket: 16 [ 124.335889][ T300] usb 8-1: USB disconnect, device number 9 [ 124.359708][ T2819] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 124.367618][ T2819] device syzkaller0 entered promiscuous mode [ 124.445942][ T2829] loop1: detected capacity change from 0 to 40427 [ 124.453574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.463177][ T2800] device veth1_macvtap entered promiscuous mode [ 124.474828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.483483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.492315][ T2829] F2FS-fs (loop1): invalid crc value [ 124.498996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.503189][ T2829] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.507410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.546218][ T735] usb 7-1: config index 0 descriptor too short (expected 36, got 28) [ 124.556458][ T735] usb 7-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 124.567416][ T735] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.576262][ T735] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 124.585436][ T735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.593352][ T2829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.672932][ T2852] loop4: detected capacity change from 0 to 512 [ 124.701939][ T735] usb 7-1: config 0 descriptor?? [ 124.722565][ T2852] EXT4-fs (loop4): Ignoring removed orlov option [ 124.728749][ T2852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.740899][ T2852] EXT4-fs (loop4): 1 truncate cleaned up [ 124.746930][ T2852] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,grpjquota=,orlov,noblock_validity,,errors=continue. Quota mode: none. [ 124.764367][ T2852] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 124.818254][ T2856] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 124.864671][ T2860] loop7: detected capacity change from 0 to 256 [ 124.921366][ T300] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 125.874968][ T2865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 126.140122][ T2866] loop6: detected capacity change from 0 to 512 [ 126.160764][ T2860] loop7: detected capacity change from 0 to 256 [ 126.174521][ T2860] FAT-fs (loop7): Unrecognized mount option "uni_xl\te=0" or missing value [ 126.184036][ T2866] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.194132][ T300] usb 10-1: Using ep0 maxpacket: 16 [ 126.220103][ T2866] EXT4-fs (loop6): 1 truncate cleaned up [ 126.225874][ T2866] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 126.231697][ T2874] loop4: detected capacity change from 0 to 4096 [ 126.302235][ T2874] EXT4-fs (loop4): Ignoring removed nobh option [ 126.363098][ T2880] netlink: 80 bytes leftover after parsing attributes in process `syz.7.588'. [ 126.371541][ T300] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 126.372171][ T2880] netlink: 80 bytes leftover after parsing attributes in process `syz.7.588'. [ 126.380137][ T300] usb 10-1: config 0 has no interface number 0 [ 126.410853][ T300] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 126.473595][ T300] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 126.483446][ T300] usb 10-1: config 0 interface 41 has no altsetting 0 [ 126.490807][ T2880] netlink: 80 bytes leftover after parsing attributes in process `syz.7.588'. [ 126.547998][ T2885] loop7: detected capacity change from 0 to 512 [ 126.562688][ T2874] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,nobh,acl,,errors=continue. Quota mode: writeback. [ 126.582925][ T2873] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.587: Failed to acquire dquot type 1 [ 126.591208][ T2876] loop1: detected capacity change from 0 to 40427 [ 126.620343][ T735] usb 7-1: USB disconnect, device number 13 [ 126.632989][ T2876] F2FS-fs (loop1): fault_injection options not supported [ 126.646270][ T2885] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 126.650440][ T2876] F2FS-fs (loop1): invalid crc value [ 126.657768][ T2885] EXT4-fs (loop7): mount failed [ 126.661619][ T300] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 126.665695][ T2893] loop4: detected capacity change from 0 to 2048 [ 126.671981][ T300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.686452][ T2876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.697134][ T300] usb 10-1: Product: syz [ 126.705857][ T300] usb 10-1: Manufacturer: syz [ 126.710388][ T300] usb 10-1: SerialNumber: syz [ 126.716141][ T300] usb 10-1: config 0 descriptor?? [ 126.722468][ T2893] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 126.731563][ T2845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.741683][ T2845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.742598][ T2876] F2FS-fs (loop1): Start checkpoint disabled! [ 126.755960][ T2893] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 126.777287][ T2876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 126.905569][ T2896] loop6: detected capacity change from 0 to 40427 [ 127.657314][ T2904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37781 sclass=netlink_route_socket pid=2904 comm=syz.4.590 [ 127.690581][ T2845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.754029][ T2896] F2FS-fs (loop6): fault_injection options not supported [ 127.890200][ T2885] loop7: detected capacity change from 0 to 128 [ 127.896507][ T300] dm9601: probe of 10-1:0.41 failed with error -71 [ 127.909415][ T2896] F2FS-fs (loop6): invalid crc value [ 127.919769][ T639] attempt to access beyond end of device [ 127.919769][ T639] loop1: rw=2049, want=40976, limit=40427 [ 127.926447][ T2911] tipc: Started in network mode [ 127.936005][ T2911] tipc: Node identity 7f000001, cluster identity 4711 [ 127.937192][ T300] sr9700: probe of 10-1:0.41 failed with error -71 [ 127.944009][ T2896] F2FS-fs (loop6): Found nat_bits in checkpoint [ 127.952318][ T300] usb 10-1: USB disconnect, device number 4 [ 127.981539][ T2911] tipc: Enabled bearer , priority 10 [ 128.036641][ T2896] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 128.055298][ T824] attempt to access beyond end of device [ 128.055298][ T824] loop6: rw=2049, want=45112, limit=40427 [ 128.101747][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 128.101765][ T30] audit: type=1400 audit(1735524884.966:2080): avc: denied { mount } for pid=2923 comm="syz.7.596" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.136970][ T30] audit: type=1326 audit(1735524884.986:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2923 comm="syz.7.596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c4edf8d29 code=0x0 [ 128.168768][ T2928] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 128.182571][ T30] audit: type=1400 audit(1735524885.046:2082): avc: denied { write } for pid=2927 comm="syz.4.599" path="socket:[27094]" dev="sockfs" ino=27094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.193421][ T2929] netlink: 76 bytes leftover after parsing attributes in process `syz.7.596'. [ 128.289683][ T2922] loop1: detected capacity change from 0 to 40427 [ 128.301204][ T30] audit: type=1400 audit(1735524885.156:2083): avc: denied { write } for pid=2923 comm="syz.7.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.341988][ T2922] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 128.371412][ T2922] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.405953][ T2922] F2FS-fs (loop1): invalid crc value [ 128.442604][ T2922] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.516107][ T2922] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.523142][ T2922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.539649][ T2922] attempt to access beyond end of device [ 128.539649][ T2922] loop1: rw=2049, want=45104, limit=40427 [ 128.556899][ T30] audit: type=1400 audit(1735524885.416:2084): avc: denied { ioctl } for pid=2921 comm="syz.1.593" path="socket:[26275]" dev="sockfs" ino=26275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.689325][ T2949] loop6: detected capacity change from 0 to 512 [ 128.840244][ T2949] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.602: inode #1: comm syz.6.602: iget: illegal inode # [ 128.853644][ T2949] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.602: error while reading EA inode 1 err=-117 [ 128.868099][ T2949] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.602: inode #1: comm syz.6.602: iget: illegal inode # [ 128.881927][ T2949] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.602: error while reading EA inode 1 err=-117 [ 128.896216][ T2949] EXT4-fs (loop6): 1 orphan inode deleted [ 128.901878][ T2949] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 129.757379][ T300] tipc: Node number set to 2130706433 [ 129.829472][ T30] audit: type=1326 audit(1735524886.686:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 129.842061][ T2959] loop7: detected capacity change from 0 to 40427 [ 129.876803][ T30] audit: type=1326 audit(1735524886.726:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 129.919521][ T30] audit: type=1326 audit(1735524886.726:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 129.944516][ T2959] F2FS-fs (loop7): Unrecognized mount option "usrquotainlinecrypt" or missing value [ 130.013095][ T30] audit: type=1326 audit(1735524886.726:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 130.081386][ T30] audit: type=1326 audit(1735524886.726:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 130.144525][ T2977] tipc: Started in network mode [ 130.159441][ T2977] tipc: Node identity 7f000001, cluster identity 4711 [ 130.176797][ T2977] tipc: Enabled bearer , priority 10 [ 130.220280][ T2938] loop9: detected capacity change from 0 to 131072 [ 130.263258][ T2938] F2FS-fs (loop9): Unrecognized mount option "tes4_du" or missing value [ 130.310753][ T2972] loop6: detected capacity change from 0 to 40427 [ 130.336842][ T2984] loop4: detected capacity change from 0 to 512 [ 130.344728][ T2972] F2FS-fs (loop6): fault_injection options not supported [ 130.352913][ T2972] F2FS-fs (loop6): invalid crc value [ 130.586607][ T2972] F2FS-fs (loop6): Found nat_bits in checkpoint [ 130.605829][ T2984] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.611: corrupted inode contents [ 130.671630][ T2984] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.611: mark_inode_dirty error [ 130.694190][ T2984] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.611: corrupted inode contents [ 130.722646][ T2984] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.611: mark_inode_dirty error [ 130.762458][ T2984] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.611: Failed to acquire dquot type 0 [ 130.781132][ T2984] EXT4-fs (loop4): 1 orphan inode deleted [ 130.793992][ T2984] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.805115][ T2972] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 130.824035][ T2984] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.877635][ T2984] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #12: comm syz.4.611: pblk 0 bad header/extent: invalid magic - magic 2, entries 0, max 0(0), depth 0(0) [ 131.898287][ T738] tipc: Node number set to 2130706433 [ 131.920203][ T2984] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #12: comm syz.4.611: pblk 0 bad header/extent: invalid magic - magic 2, entries 0, max 0(0), depth 0(0) [ 132.249333][ T3004] loop9: detected capacity change from 0 to 512 [ 132.331611][ T3004] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.343924][ T3004] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 132.379482][ T3004] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 132.397939][ T3004] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.615: iget: bad extended attribute block 19 [ 132.423593][ T3004] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.615: couldn't read orphan inode 15 (err -117) [ 132.435526][ T738] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 132.455575][ T3004] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.540007][ T824] attempt to access beyond end of device [ 132.540007][ T824] loop6: rw=2049, want=45104, limit=40427 [ 132.666336][ T3020] loop6: detected capacity change from 0 to 512 [ 132.701491][ T738] usb 2-1: Using ep0 maxpacket: 16 [ 132.723509][ T3020] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,nodelalloc,,errors=continue. Quota mode: writeback. [ 132.736362][ T3020] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.808666][ T3027] tipc: Enabling of bearer rejected, already enabled [ 132.841877][ T738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.851990][ T738] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.881379][ T26] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 132.921372][ T735] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 133.181430][ T26] usb 10-1: Using ep0 maxpacket: 8 [ 133.216256][ T3035] loop7: detected capacity change from 0 to 128 [ 133.239384][ T738] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.248369][ T738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.256194][ T738] usb 2-1: Product: syz [ 133.260156][ T738] usb 2-1: Manufacturer: syz [ 133.264642][ T738] usb 2-1: SerialNumber: syz [ 133.271977][ T3035] EXT4-fs (loop7): Test dummy encryption mode enabled [ 133.280163][ T3035] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 133.292649][ T3035] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.471457][ T26] usb 10-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 133.481443][ T735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.482920][ T26] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.492709][ T735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.508711][ T26] usb 10-1: Product: syz [ 133.510159][ T735] usb 5-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 133.519249][ T26] usb 10-1: Manufacturer: syz [ 133.524159][ T735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.535468][ T26] usb 10-1: SerialNumber: syz [ 133.540389][ T735] usb 5-1: config 0 descriptor?? [ 133.540964][ T26] usb 10-1: config 0 descriptor?? [ 133.756447][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 133.756468][ T30] audit: type=1400 audit(1735524890.616:2122): avc: denied { setopt } for pid=3011 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.802575][ T3040] netlink: 'syz.6.624': attribute type 12 has an invalid length. [ 133.881505][ T738] usb 2-1: 0:2 : does not exist [ 133.922665][ T738] usb 2-1: USB disconnect, device number 13 [ 134.175534][ T735] hid (null): bogus close delimiter [ 134.186398][ T735] wacom 0003:056A:7A26.000A: bogus close delimiter [ 134.188201][ T26] usb 10-1: USB disconnect, device number 5 [ 134.192873][ T735] wacom 0003:056A:7A26.000A: item 0 0 2 10 parsing failed [ 134.221599][ T735] wacom 0003:056A:7A26.000A: parse failed [ 134.227171][ T735] wacom: probe of 0003:056A:7A26.000A failed with error -22 [ 134.335122][ T30] audit: type=1400 audit(1735524891.196:2123): avc: denied { mount } for pid=3045 comm="syz.7.625" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 134.337926][ T300] usb 5-1: USB disconnect, device number 5 [ 134.359157][ T30] audit: type=1400 audit(1735524891.196:2124): avc: denied { getopt } for pid=3017 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.391644][ T30] audit: type=1400 audit(1735524891.216:2125): avc: denied { search } for pid=3045 comm="syz.7.625" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.423085][ T30] audit: type=1400 audit(1735524891.216:2126): avc: denied { read } for pid=3045 comm="syz.7.625" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.444256][ T3051] loop7: detected capacity change from 0 to 128 [ 134.451188][ T30] audit: type=1400 audit(1735524891.216:2127): avc: denied { open } for pid=3045 comm="syz.7.625" path="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.475604][ T30] audit: type=1326 audit(1735524891.336:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3056 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 134.490072][ T3057] loop1: detected capacity change from 0 to 1024 [ 134.502491][ T30] audit: type=1326 audit(1735524891.336:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3056 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6608507d29 code=0x7ffc0000 [ 134.529429][ T30] audit: type=1326 audit(1735524891.336:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3056 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6608507d63 code=0x7ffc0000 [ 134.544580][ T3051] attempt to access beyond end of device [ 134.544580][ T3051] loop7: rw=2049, want=1041, limit=128 [ 134.552629][ T30] audit: type=1326 audit(1735524891.336:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3056 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f66085067df code=0x7ffc0000 [ 134.600120][ T3051] attempt to access beyond end of device [ 134.600120][ T3051] loop7: rw=0, want=178, limit=128 [ 134.611528][ T3049] attempt to access beyond end of device [ 134.611528][ T3049] loop7: rw=524288, want=177, limit=128 [ 134.631259][ T3049] attempt to access beyond end of device [ 134.631259][ T3049] loop7: rw=524288, want=369, limit=128 [ 134.673257][ T3057] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.684061][ T3057] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.732841][ T3071] loop1: detected capacity change from 0 to 256 [ 134.752674][ T3071] exfat: Bad value for 'time_offset' [ 135.067799][ T3076] loop7: detected capacity change from 0 to 16 [ 135.132287][ T3076] erofs: (device loop7): erofs_superblock_csum_verify: invalid checksum 0xcab1044c, 0x02d6543f expected [ 135.170754][ T3096] loop4: detected capacity change from 0 to 256 [ 135.178733][ T3097] overlayfs: './file0' not a directory [ 135.191310][ T3101] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 135.204647][ T3101] loop6: detected capacity change from 0 to 512 [ 135.227703][ T3102] loop1: detected capacity change from 0 to 2048 [ 135.242425][ T3101] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 135.253235][ T3101] EXT4-fs (loop6): group descriptors corrupted! [ 135.262295][ T3102] EXT4-fs (loop1): Ignoring removed bh option [ 135.289758][ T3102] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 135.401102][ T3125] device syzkaller0 entered promiscuous mode [ 135.519402][ T3128] loop7: detected capacity change from 0 to 512 [ 135.581896][ T3128] EXT4-fs (loop7): 1 orphan inode deleted [ 135.587491][ T3128] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 135.608579][ T3128] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.875819][ T3135] loop6: detected capacity change from 0 to 256 [ 135.995538][ T3135] FAT-fs (loop6): error, clusters badly computed (0 != 128) [ 136.059642][ T3135] FAT-fs (loop6): Filesystem has been set read-only [ 136.104098][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.112928][ T3141] loop4: detected capacity change from 0 to 128 [ 136.119418][ T3135] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.130038][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.140318][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.154900][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.171378][ T351] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 136.653646][ T3141] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 136.672323][ T3141] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.683230][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.693362][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.701971][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.710325][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.718730][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.727093][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.743481][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.752088][ T3139] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.793631][ T3151] loop7: detected capacity change from 0 to 256 [ 136.842156][ T3154] loop1: detected capacity change from 0 to 1024 [ 136.868353][ T3151] FAT-fs (loop7): Directory bread(block 64) failed [ 136.874830][ T3151] FAT-fs (loop7): Directory bread(block 65) failed [ 136.881292][ T3151] FAT-fs (loop7): Directory bread(block 66) failed [ 136.888592][ T3151] FAT-fs (loop7): Directory bread(block 67) failed [ 136.895377][ T3151] FAT-fs (loop7): Directory bread(block 68) failed [ 136.903182][ T3151] FAT-fs (loop7): Directory bread(block 69) failed [ 136.909682][ T3151] FAT-fs (loop7): Directory bread(block 70) failed [ 136.916090][ T351] usb 10-1: Using ep0 maxpacket: 8 [ 136.921426][ T3151] FAT-fs (loop7): Directory bread(block 71) failed [ 136.927784][ T3151] FAT-fs (loop7): Directory bread(block 72) failed [ 136.934531][ T3151] FAT-fs (loop7): Directory bread(block 73) failed [ 137.015975][ T3159] overlayfs: upper fs needs to support d_type. [ 137.248253][ T3154] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.258814][ T3154] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.279521][ T3154] sch_tbf: burst 3 is lower than device lo mtu (11337746) ! [ 137.321566][ T351] usb 10-1: config 0 has an invalid interface number: 32 but max is 0 [ 137.329700][ T351] usb 10-1: config 0 has no interface number 0 [ 137.352827][ T351] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.364104][ T351] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.380413][ T351] usb 10-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 137.389577][ T351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.407486][ T351] usb 10-1: config 0 descriptor?? [ 137.470451][ T3157] loop6: detected capacity change from 0 to 2048 [ 137.555646][ T3157] Alternate GPT is invalid, using primary GPT. [ 137.561790][ T3157] loop6: p1 p2 p3 [ 137.632972][ T3182] loop4: detected capacity change from 0 to 512 [ 137.806917][ T3137] loop9: detected capacity change from 0 to 512 [ 137.816140][ T3182] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 137.831925][ T3182] EXT4-fs (loop4): dax option not supported [ 137.855138][ T3186] loop1: detected capacity change from 0 to 512 [ 137.884284][ T3137] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.648: corrupted in-inode xattr [ 137.896327][ T3137] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.648: couldn't read orphan inode 15 (err -117) [ 137.908444][ T3137] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.925548][ T3182] loop4: detected capacity change from 0 to 256 [ 137.937241][ T3137] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.648: corrupted in-inode xattr [ 137.953560][ T3137] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.648: deleted inode referenced: 15 [ 137.968333][ T3186] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.979324][ T3186] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.979643][ T3182] FAT-fs (loop4): Unrecognized mount option "errors=remounTԙ:gt-ro" or missing value [ 137.993652][ T3186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 138.030959][ T39] kernel write not supported for file bpf-prog (pid: 39 comm: kworker/1:1) [ 138.272767][ T3198] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 138.280565][ T3198] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 138.281450][ T6] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 138.378158][ T3207] netlink: 8 bytes leftover after parsing attributes in process `syz.7.666'. [ 138.562657][ T3227] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 138.572271][ T3227] SELinux: failed to load policy [ 138.681475][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.838241][ T3236] netlink: 20 bytes leftover after parsing attributes in process `syz.6.673'. [ 138.847290][ T3236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.673'. [ 138.856401][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.869815][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.879780][ T6] usb 2-1: Product: syz [ 138.884093][ T6] usb 2-1: Manufacturer: syz [ 138.894283][ T6] usb 2-1: SerialNumber: syz [ 138.987187][ T3239] loop6: detected capacity change from 0 to 2048 [ 139.009474][ T2369] EXT4-fs warning (device loop9): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 139.042804][ T3239] Alternate GPT is invalid, using primary GPT. [ 139.048900][ T3239] loop6: p1 p2 p3 [ 139.091541][ T351] usbhid 10-1:0.32: can't add hid device: -71 [ 139.099350][ T639] tipc: Disabling bearer [ 139.104610][ T639] tipc: Left network mode [ 139.105807][ T351] usbhid: probe of 10-1:0.32 failed with error -71 [ 139.116073][ T351] usb 10-1: USB disconnect, device number 6 [ 139.176901][ T3239] loop6: detected capacity change from 0 to 1024 [ 139.221220][ T3241] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.228159][ T3241] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.235612][ T3241] device bridge_slave_0 entered promiscuous mode [ 139.244324][ T3241] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.251467][ T3241] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.258656][ T3241] device bridge_slave_1 entered promiscuous mode [ 139.334218][ T3241] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.341094][ T3241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.348240][ T3241] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.355107][ T3241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.383907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.391526][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.398634][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.408815][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.417133][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.424036][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.468083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.479227][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.486134][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.495626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.503867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.525968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.547103][ T3241] device veth0_vlan entered promiscuous mode [ 139.557452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.567374][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.582451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.606245][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.615190][ T3241] device veth1_macvtap entered promiscuous mode [ 139.626923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.644444][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 139.644461][ T30] audit: type=1326 audit(1735524896.506:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.650778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.703075][ T3261] TCP: request_sock_TCPv6: Possible SYN flooding on port 52770. Sending cookies. Check SNMP counters. [ 139.719895][ T30] audit: type=1326 audit(1735524896.506:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.751879][ T30] audit: type=1326 audit(1735524896.506:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.779247][ T30] audit: type=1326 audit(1735524896.506:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.803236][ T30] audit: type=1326 audit(1735524896.506:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.827253][ T30] audit: type=1326 audit(1735524896.506:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.852037][ T30] audit: type=1326 audit(1735524896.586:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.875789][ T30] audit: type=1326 audit(1735524896.586:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a3c3d29 code=0x7ffc0000 [ 139.876032][ T639] device bridge_slave_1 left promiscuous mode [ 139.905365][ T639] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.913380][ T639] device bridge_slave_0 left promiscuous mode [ 139.919410][ T639] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.927756][ T639] device veth1_macvtap left promiscuous mode [ 139.934047][ T639] device veth0_vlan left promiscuous mode [ 140.031436][ T6] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 140.037724][ T6] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 140.045093][ T6] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 140.121435][ T351] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.139740][ T30] audit: type=1326 audit(1735524896.996:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5afe4d29 code=0x7ffc0000 [ 140.163622][ T30] audit: type=1326 audit(1735524896.996:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5afe4d29 code=0x7ffc0000 [ 140.337783][ T3277] loop5: detected capacity change from 0 to 512 [ 140.382166][ T3277] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.406272][ T3282] loop6: detected capacity change from 0 to 2048 [ 140.422269][ T3277] EXT4-fs (loop5): 1 truncate cleaned up [ 140.427882][ T3277] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,min_batch_time=0x0000000000000fff,journal_dev=0x0000000000000005,user_xattr,abort,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 140.449696][ T6] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 140.458933][ T6] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 140.469750][ T3277] syz.5.685 (pid 3277) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 140.481918][ T6] usb 2-1: USB disconnect, device number 14 [ 140.487995][ T6] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 140.497505][ T3277] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 140.497826][ T3282] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.506484][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 140.531783][ T3277] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 140.553094][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 140.571629][ T351] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.586191][ T351] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.595755][ T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.606581][ T351] usb 5-1: config 0 descriptor?? [ 140.611699][ T766] ================================================================== [ 140.619575][ T766] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0 [ 140.626605][ T766] Read of size 8 at addr ffff88813032ec60 by task kworker/0:35/766 [ 140.634328][ T766] [ 140.636511][ T766] CPU: 0 PID: 766 Comm: kworker/0:35 Not tainted 5.15.173-syzkaller-00161-gb4bd207b0380 #0 [ 140.646305][ T766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.656215][ T766] Workqueue: 0x0 (ipv6_addrconf) [ 140.661067][ T766] Call Trace: [ 140.664188][ T766] [ 140.666969][ T766] dump_stack_lvl+0x151/0x1c0 [ 140.671477][ T766] ? io_uring_drop_tctx_refs+0x190/0x190 [ 140.676944][ T766] ? panic+0x760/0x760 [ 140.680850][ T766] ? __schedule+0xcd4/0x1590 [ 140.685279][ T766] print_address_description+0x87/0x3b0 [ 140.690657][ T766] kasan_report+0x179/0x1c0 [ 140.694998][ T766] ? _raw_spin_lock_irqsave+0x210/0x210 [ 140.700380][ T766] ? worker_thread+0xaaa/0x12a0 [ 140.705066][ T766] ? worker_thread+0xaaa/0x12a0 [ 140.709752][ T766] __asan_report_load8_noabort+0x14/0x20 [ 140.715221][ T766] worker_thread+0xaaa/0x12a0 [ 140.719733][ T766] ? _raw_spin_lock+0x1b0/0x1b0 [ 140.724426][ T766] kthread+0x421/0x510 [ 140.728324][ T766] ? worker_clr_flags+0x180/0x180 [ 140.733192][ T766] ? kthread_blkcg+0xd0/0xd0 [ 140.737610][ T766] ret_from_fork+0x1f/0x30 [ 140.741866][ T766] [ 140.744724][ T766] [ 140.747043][ T766] Allocated by task 6: [ 140.750891][ T766] ____kasan_kmalloc+0xdb/0x110 [ 140.755575][ T766] __kasan_kmalloc+0x9/0x10 [ 140.759915][ T766] __kmalloc+0x13f/0x2c0 [ 140.763995][ T766] kvmalloc_node+0x1f0/0x4d0 [ 140.768421][ T766] alloc_netdev_mqs+0x8c/0xc90 [ 140.773022][ T766] alloc_etherdev_mqs+0x33/0x40 [ 140.777705][ T766] usbnet_probe+0x1fa/0x2860 [ 140.782130][ T766] usb_probe_interface+0x5b6/0xa90 [ 140.787078][ T766] really_probe+0x28d/0x970 [ 140.791436][ T766] __driver_probe_device+0x1a0/0x310 [ 140.796540][ T766] driver_probe_device+0x54/0x3d0 [ 140.801404][ T766] __device_attach_driver+0x2c5/0x470 [ 140.806606][ T766] bus_for_each_drv+0x183/0x200 [ 140.811307][ T766] __device_attach+0x312/0x510 [ 140.815898][ T766] device_initial_probe+0x1a/0x20 [ 140.820754][ T766] bus_probe_device+0xbe/0x1e0 [ 140.825353][ T766] device_add+0xb60/0xf10 [ 140.829517][ T766] usb_set_configuration+0x190f/0x1e80 [ 140.834814][ T766] usb_generic_driver_probe+0x8b/0x150 [ 140.840106][ T766] usb_probe_device+0x144/0x260 [ 140.844796][ T766] really_probe+0x28d/0x970 [ 140.849133][ T766] __driver_probe_device+0x1a0/0x310 [ 140.854253][ T766] driver_probe_device+0x54/0x3d0 [ 140.859116][ T766] __device_attach_driver+0x2c5/0x470 [ 140.864408][ T766] bus_for_each_drv+0x183/0x200 [ 140.869094][ T766] __device_attach+0x312/0x510 [ 140.873695][ T766] device_initial_probe+0x1a/0x20 [ 140.878557][ T766] bus_probe_device+0xbe/0x1e0 [ 140.883157][ T766] device_add+0xb60/0xf10 [ 140.887319][ T766] usb_new_device+0x1038/0x1c00 [ 140.892006][ T766] hub_event+0x2def/0x4770 [ 140.896261][ T766] process_one_work+0x6bb/0xc10 [ 140.900946][ T766] worker_thread+0xad5/0x12a0 [ 140.905460][ T766] kthread+0x421/0x510 [ 140.909367][ T766] ret_from_fork+0x1f/0x30 [ 140.913625][ T766] [ 140.915791][ T766] Freed by task 6: [ 140.919350][ T766] kasan_set_track+0x4b/0x70 [ 140.923776][ T766] kasan_set_free_info+0x23/0x40 [ 140.928547][ T766] ____kasan_slab_free+0x126/0x160 [ 140.933493][ T766] __kasan_slab_free+0x11/0x20 [ 140.938096][ T766] slab_free_freelist_hook+0xbd/0x190 [ 140.943300][ T766] kfree+0xcc/0x270 [ 140.946946][ T766] kvfree+0x35/0x40 [ 140.950594][ T766] netdev_freemem+0x3f/0x60 [ 140.954936][ T766] netdev_release+0x7f/0xb0 [ 140.959272][ T766] device_release+0x95/0x1c0 [ 140.963697][ T766] kobject_put+0x178/0x260 [ 140.967950][ T766] put_device+0x1f/0x30 [ 140.971942][ T766] free_netdev+0x34f/0x440 [ 140.976302][ T766] usbnet_disconnect+0x25f/0x3b0 [ 140.981076][ T766] usb_unbind_interface+0x1fa/0x8c0 [ 140.986110][ T766] device_release_driver_internal+0x50b/0x7d0 [ 140.992010][ T766] device_release_driver+0x19/0x20 [ 140.996958][ T766] bus_remove_device+0x2f8/0x360 [ 141.001733][ T766] device_del+0x663/0xe90 [ 141.005897][ T766] usb_disable_device+0x380/0x720 [ 141.010754][ T766] usb_disconnect+0x32a/0x890 [ 141.015269][ T766] hub_event+0x1d42/0x4770 [ 141.019522][ T766] process_one_work+0x6bb/0xc10 [ 141.024209][ T766] worker_thread+0xe02/0x12a0 [ 141.028720][ T766] kthread+0x421/0x510 [ 141.032629][ T766] ret_from_fork+0x1f/0x30 [ 141.036882][ T766] [ 141.039048][ T766] Last potentially related work creation: [ 141.044723][ T766] kasan_save_stack+0x3b/0x60 [ 141.049231][ T766] __kasan_record_aux_stack+0xd3/0xf0 [ 141.054439][ T766] kasan_record_aux_stack_noalloc+0xb/0x10 [ 141.060081][ T766] insert_work+0x56/0x320 [ 141.064245][ T766] __queue_work+0x92a/0xcd0 [ 141.068585][ T766] queue_work_on+0x105/0x170 [ 141.073008][ T766] usbnet_link_change+0x182/0x1a0 [ 141.077867][ T766] usbnet_probe+0x1dad/0x2860 [ 141.082380][ T766] usb_probe_interface+0x5b6/0xa90 [ 141.087327][ T766] really_probe+0x28d/0x970 [ 141.091666][ T766] __driver_probe_device+0x1a0/0x310 [ 141.096787][ T766] driver_probe_device+0x54/0x3d0 [ 141.101650][ T766] __device_attach_driver+0x2c5/0x470 [ 141.106854][ T766] bus_for_each_drv+0x183/0x200 [ 141.111545][ T766] __device_attach+0x312/0x510 [ 141.116143][ T766] device_initial_probe+0x1a/0x20 [ 141.121013][ T766] bus_probe_device+0xbe/0x1e0 [ 141.125613][ T766] device_add+0xb60/0xf10 [ 141.129772][ T766] usb_set_configuration+0x190f/0x1e80 [ 141.135065][ T766] usb_generic_driver_probe+0x8b/0x150 [ 141.140356][ T766] usb_probe_device+0x144/0x260 [ 141.145046][ T766] really_probe+0x28d/0x970 [ 141.149644][ T766] __driver_probe_device+0x1a0/0x310 [ 141.154770][ T766] driver_probe_device+0x54/0x3d0 [ 141.159627][ T766] __device_attach_driver+0x2c5/0x470 [ 141.164840][ T766] bus_for_each_drv+0x183/0x200 [ 141.169525][ T766] __device_attach+0x312/0x510 [ 141.174153][ T766] device_initial_probe+0x1a/0x20 [ 141.178980][ T766] bus_probe_device+0xbe/0x1e0 [ 141.183580][ T766] device_add+0xb60/0xf10 [ 141.187750][ T766] usb_new_device+0x1038/0x1c00 [ 141.192433][ T766] hub_event+0x2def/0x4770 [ 141.196687][ T766] process_one_work+0x6bb/0xc10 [ 141.201378][ T766] worker_thread+0xad5/0x12a0 [ 141.205886][ T766] kthread+0x421/0x510 [ 141.209815][ T766] ret_from_fork+0x1f/0x30 [ 141.214050][ T766] [ 141.216212][ T766] The buggy address belongs to the object at ffff88813032e000 [ 141.216212][ T766] which belongs to the cache kmalloc-4k of size 4096 [ 141.230101][ T766] The buggy address is located 3168 bytes inside of [ 141.230101][ T766] 4096-byte region [ffff88813032e000, ffff88813032f000) [ 141.243385][ T766] The buggy address belongs to the page: [ 141.248858][ T766] page:ffffea0004c0ca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130328 [ 141.258915][ T766] head:ffffea0004c0ca00 order:3 compound_mapcount:0 compound_pincount:0 [ 141.267075][ T766] flags: 0x4000000000010200(slab|head|zone=1) [ 141.272989][ T766] raw: 4000000000010200 0000000000000000 0000000200000001 ffff888100043380 [ 141.281451][ T766] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 141.289929][ T766] page dumped because: kasan: bad access detected [ 141.296187][ T766] page_owner tracks the page as allocated [ 141.301730][ T766] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 524, ts 38398534080, free_ts 0 [ 141.321090][ T766] post_alloc_hook+0x1a3/0x1b0 [ 141.325715][ T766] prep_new_page+0x1b/0x110 [ 141.330026][ T766] get_page_from_freelist+0x3550/0x35d0 [ 141.335405][ T766] __alloc_pages+0x27e/0x8f0 [ 141.339859][ T766] new_slab+0x9a/0x4e0 [ 141.343742][ T766] ___slab_alloc+0x39e/0x830 [ 141.348164][ T766] __slab_alloc+0x4a/0x90 [ 141.352330][ T766] kmem_cache_alloc_trace+0x147/0x270 [ 141.357546][ T766] kobject_uevent_env+0x269/0x700 [ 141.362396][ T766] kobject_uevent+0x1f/0x30 [ 141.366744][ T766] __kobject_del+0xee/0x300 [ 141.371099][ T766] kobject_put+0x1cc/0x260 [ 141.375332][ T766] netdev_queue_update_kobjects+0x390/0x400 [ 141.381056][ T766] netif_set_real_num_tx_queues+0x16b/0x7c0 [ 141.386873][ T766] veth_init_queues+0x89/0x190 [ 141.391472][ T766] veth_newlink+0xb2f/0xe20 [ 141.395809][ T766] page_owner free stack trace missing [ 141.401018][ T766] [ 141.403186][ T766] Memory state around the buggy address: [ 141.408660][ T766] ffff88813032eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.416647][ T766] ffff88813032eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.424552][ T766] >ffff88813032ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 141.432435][ T766] ^ [ 141.439470][ T766] ffff88813032ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.447378][ T766] ffff88813032ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.455269][ T766] ================================================================== [ 141.463163][ T766] Disabling lock debugging due to kernel taint [ 141.470372][ T3266] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.632935][ T317] tipc: Disabling bearer [ 141.641705][ T317] tipc: Left network mode [ 141.651521][ T351] usb 5-1: can't set config #0, error -71 [ 141.677819][ T351] usb 5-1: USB disconnect, device number 6 [ 141.761388][ T300] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 142.652642][ T317] device bridge_slave_1 left promiscuous mode [ 142.658586][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.666011][ T317] device bridge_slave_0 left promiscuous mode [ 142.671954][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.679726][ T317] device veth1_macvtap left promiscuous mode [ 142.685624][ T317] device veth0_vlan left promiscuous mode [ 143.412877][ T317] tipc: Disabling bearer [ 143.418023][ T317] tipc: Left network mode [ 143.422562][ T317] tipc: Disabling bearer [ 143.427673][ T317] tipc: Left network mode [ 144.332622][ T317] device bridge_slave_1 left promiscuous mode [ 144.338555][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.345999][ T317] device bridge_slave_0 left promiscuous mode [ 144.351997][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.359629][ T317] device bridge_slave_1 left promiscuous mode [ 144.365802][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.373131][ T317] device bridge_slave_0 left promiscuous mode [ 144.379070][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.386961][ T317] device bridge_slave_1 left promiscuous mode [ 144.393008][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.400265][ T317] device bridge_slave_0 left promiscuous mode [ 144.406245][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.414582][ T317] device veth1_macvtap left promiscuous mode [ 144.420435][ T317] device veth0_vlan left promiscuous mode [ 144.426265][ T317] device veth1_macvtap left promiscuous mode [ 144.432218][ T317] device veth0_vlan left promiscuous mode