last executing test programs: 3m59.629970139s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a000000180000000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)="32c82489e8a3ba608c", &(0x7f0000000200), 0x3, r4}, 0x38) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) (async, rerun: 32) close(r7) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000001c0)={'dvmrp0\x00', 0x800}) (async) r9 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='tranS=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k']) 3m59.537976906s ago: executing program 1 (id=116): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x20, &(0x7f0000000280)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8a78ff00000000bfa200000000000007fcfffff7ffffffb7030000f8000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008569e1ff01000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x41, &(0x7f00000001c0)=""/65, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x10, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[r2, r2, r2, r1, r2], &(0x7f00000004c0)=[{0x1, 0x3, 0x9, 0xc}, {0x0, 0x2, 0x1, 0x6}, {0x1, 0x5, 0x5, 0x3}, {0x4, 0x3, 0x0, 0xc}, {0x4, 0x9, 0xd, 0x5}, {0x2, 0x4, 0xd, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='fscache_access_cache\x00', r3}, 0x18) (async) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m58.556678254s ago: executing program 1 (id=118): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffe, 0x2}]}, @ptr]}}, &(0x7f0000000100)=""/4096, 0x3a, 0x1000, 0x1, 0x100000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94) 3m57.500430148s ago: executing program 1 (id=121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) timer_gettime(0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close(0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, 0x0) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@init_itable_val}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_nolock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x32}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setuid(0xee01) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000100)={0x1, 0x2, 0x8, 0x8000000000000000, 0x3, 0x2}) unlink(&(0x7f0000000180)='./file1\x00') 3m56.039971295s ago: executing program 1 (id=128): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5f}, 0x40002041) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="020000000000000000004a71a4e258105f41721b7d405f4506000000c22c28876dadba9b09e7ba1ab8955171923ca3dd08bfafad872f03f98129b8ad2d105b10e03a6a17535f17b809b8d1d8cd9252b6f88d6f7e8bcb581de37f0d6ca75728859f4512707a5bfdbc2e49146cb4fa494e11691b5600"/129], 0x48) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = dup(r2) read$FUSE(r3, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000001580)=&(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='rxrpc_retransmit\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrlimit(0x8, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xe, &(0x7f0000000400)={0x95d9, 0xfd96}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000440)={0x1000, 0x0, &(0x7f00000001c0), &(0x7f0000000300), {0x38}, &(0x7f0000000340)=""/62, 0x3e, &(0x7f0000000380)=""/123, 0x0}, 0x58) 3m53.823317531s ago: executing program 1 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "15bba1"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 3m51.733978818s ago: executing program 32 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "15bba1"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 3m29.325194374s ago: executing program 3 (id=185): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f000001d000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000001080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "140674", 0x30, 0x3a, 0x1, @remote, @empty, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x0, 0x6, "f96b1b", 0x3, 0xc, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1}}}}}}}, 0x0) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0xb0, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x9c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4a, 0xa15, 0x30000000, 0x5, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000100)={0x6, r0, 'id1\x00'}) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x16, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0xa079adfa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x1, 0x2, 0x0, 0x0, 0xa, 0x8, 0x1}, @jmp={0x5, 0x0, 0x8, 0x0, 0x7, 0x10, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0xc40, 0xf0, &(0x7f00000001c0)=""/240, 0x41100, 0x10, '\x00', r5, 0x25, r6, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r7, r1, r1, r1, r1], &(0x7f00000003c0)=[{0x4, 0x1, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x3}, {0x1, 0x3, 0x5}, {0x1, 0x5, 0x10, 0x6}, {0x4, 0x5, 0x2, 0x1}], 0x10, 0x8}, 0x94) 3m29.052099505s ago: executing program 3 (id=188): r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x1, 0x7fe2, 0x8}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x373a635a847df2dd}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x4000011) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) creat(&(0x7f0000000200)='./file0\x00', 0x90) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4020014}, 0x20040004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001840)={0x1f, 0xffff}, 0x6) 3m27.979573831s ago: executing program 3 (id=192): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@noquota}]}, 0x2, 0x4fd, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x5004, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x35]}}, {@inode32}, {@huge_within_size}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000000240)={0x7, 'vlan0\x00', {0x80}}) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x248, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x8010, 0x0, 0x800, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x24, 0xdc, 0x0, 0x2, [0x8, 0x5, 0x4, 0x5, 0x4, 0x4, 0x5da, 0xa]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x20, 0x7800, 0x4, 0xd9, {{0x31, 0x4, 0x2, 0x0, 0xc4, 0x68, 0x0, 0x26, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x82, 0xf, "8e73683281f314ed03ed41ed6c"}, @end, @ssrr={0x89, 0xb, 0xcf, [@empty, @remote]}, @timestamp_addr={0x44, 0x24, 0xc6, 0x1, 0xd, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xf9}, {@empty, 0xfffff254}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}]}, @timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x2}]}, @lsrr={0x83, 0xb, 0xc4, [@rand_addr=0x64010102, @multicast2]}, @rr={0x7, 0x23, 0xc4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @loopback, @local, @multicast1, @broadcast, @remote, @empty]}, @rr={0x7, 0x2b, 0x7, [@rand_addr=0x64010100, @local, @local, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x10}, @empty, @multicast1, @rand_addr=0x64010100, @multicast2, @multicast2]}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=@mpls_delroute={0x88, 0x19, 0x400, 0x70bd2c, 0x25dfdbff, {0x1c, 0x20, 0x20, 0x0, 0xfe, 0x1, 0xff, 0x6}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x0, 0x2b}}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x20, 0x4, r11}}, @RTA_VIA={0x14, 0x12, {0xa, "911f73e5968f7c4f0a8c466b18b2"}}, @RTA_VIA={0x14, 0x12, {0x2c, "4d631f12d48b62951c2c396e05c9"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xde}, @RTA_VIA={0x14, 0x12, {0x23, "dd73022d04addbfb1487512ce630"}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040010}, 0x20) 3m25.618933139s ago: executing program 3 (id=197): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@bloom_filter={0x1e, 0xaff, 0x6, 0xbd, 0x900, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800f8e20000007b8af8ff00000000bfa2000008000000b704000000000000851100"/68, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xd, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32=r5, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") symlinkat(&(0x7f00000000c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r7 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) writev(r3, &(0x7f0000000000)=[{&(0x7f0000001100)="f36b4e96df5d87b82f69b7868c9a534d6de2d3f1fc8ff2c693dd49c23034922db044da732480cd3f", 0x28}], 0x1031) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4) r8 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r8, &(0x7f0000000240), 0xfdef) read$FUSE(r8, &(0x7f0000002540)={0x2020}, 0xfdef) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r9, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000280)={0x3, 0x3ff}) syz_open_dev$ptys(0xc, 0x3, 0x0) 3m22.959887901s ago: executing program 3 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000540)={0xa, 0x0, [{0x80000019, 0x7, 0x2, 0xfffffff9, 0x7fff, 0xffff, 0x15}, {0x4, 0x7, 0x2, 0x0, 0x26, 0x1000, 0xc}, {0x1, 0x2, 0xa, 0x6, 0x7, 0x2, 0x10000}, {0x0, 0x7, 0x2, 0xe, 0x3, 0x70, 0x4}, {0x7, 0x8, 0x4, 0x7, 0x0, 0x3, 0x2735}, {0x0, 0x3, 0x4, 0x1, 0x5, 0x81, 0x5}, {0xc0000000, 0x3, 0x6, 0x2, 0x6, 0x3, 0x7ff}, {0x7, 0x6, 0x5, 0x4, 0x5, 0x6, 0x8}, {0x80000001, 0x3, 0x3, 0x800, 0x3, 0x8, 0x4}, {0x7, 0x3, 0x7, 0x69, 0x8, 0x8, 0xf}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000800000000800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 3m20.602752759s ago: executing program 3 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 3m20.370528037s ago: executing program 33 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 15.235252526s ago: executing program 5 (id=855): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchmodat(r7, &(0x7f0000000000)='.\x00', 0xe0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x3c, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x8800) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 10.865570674s ago: executing program 5 (id=867): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x7, 0xf) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/237, 0xed) 7.853510614s ago: executing program 2 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "3856d7bf25dbefc62c38c43818aa814abffa26ebf0b36e48473f2a4d05ddf5e6a5b4eb9902a27a4a5af7dd7c3f5e8f2e9d734d9234b2f2ec992593d78508a39b", 0x3a}, 0x48, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "9d06ddfe2d0e37a49acf2100242cc6c0a8b3fa0961881af7c76487235f27ab93be564cf4a524e8427cf48f76eb8df5187152320f28baeaa2fdb8717eef31d4f0", 0x37}, 0x48, r1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x64, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcff7ffa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67e6ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4510555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cace339f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d000000009682e24b92533ac2a997d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f18215523167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3037ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cb8846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966f08294cd6f496e5dee734fe7da3770845cf442d488afd80e170000000000000000000000000000000000000000000000000000052007563885a1105000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb9aaa57a8abef8b64237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c09000000bfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07000000ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbcbf2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00a40e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2add58ffb25f339297729a7a51810134d3dfbf71f651600eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47547f164391c673b6079e65d7295eed164ca63e4ea26d65f6b3ce0f6591d80dfb8f386bb74b5589829b6b067903000000000000003d9950d48c774eaa35b24fce696af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c80c57ed04dbc574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff559973c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511732f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a8340000000000000008029be3788dd8422b1ab7b4c9d5b7d8682fd750947109c713108e1386f5843a9ee29af30ecbeb26ff81f0921be501ade32a81aa175f4f8f117fc23b2adb38200f0f360e213534e14fae98502f92017d32f29777b6890ad5a103352dd80f036db18220932a2d26e0f9f807c4eb9ae9ba0b77c54bcf501873ce30286cdd633346bc11ed2259ab31f0bc2630a23738a646833b4d03f0028835f71cee1a5bafec9de0cfe4b5f0197fa9c7f5bcac99dbd85fb924db68d7384d4c5ab1087e4464592f278036d2b81e02a3be90a6b8757ece967569d66c8399796825e80f4dc6b3920ed9813a259de560000000000000000000000000000aeecc3447c907474d2129496fc6f6bc804965f8caaac7e2ef733f77708d618dbeae5352a5bc32d826a1b62cd698b4cfdc74ba5e8f18e808783fd5f32ef793a3069ac0906609aa9ca7dca982d6e903aea749f60beb35e2bee8eb43b8c65f4526c61281d6517f1f6e9741365acdaf8ae916575459f7d14087f826f97c94b09cd1275e576d17f76b39a6ac9e33030d67262209a52012dd9c9c60e45c51dd06ee7ba3d0c53a16070536d583ab8639d4fafe62997819033338a5ea4a5d2b61d05de4d5ad4c8dd0de3b98a1f4d6142851571b8d61715c7cb557373854f7eaf2f4e4bfd3dcb6c1d2e7b0bcb4d896092e90f95a61df4ffeeb64dee29de77fba312943bc53efb61138a5a82f7a828c04faf679edf2fa31cdfc57a2cb7ce03f3cdc40a1a20e82e54d10ce35579d7e065a8840abf4ce792ced89bd4288c8d427000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe803500121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto$inet(r7, &(0x7f0000000380)='\x00', 0x1, 0x41, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000200)="11", 0x1, 0x8804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 7.505338312s ago: executing program 0 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r5, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00') 7.504943762s ago: executing program 5 (id=872): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, &(0x7f0000000080), 0x0}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r10, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(r9, 0x4b52, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 6.581522296s ago: executing program 0 (id=874): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) 6.521550291s ago: executing program 6 (id=875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x44f0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='oom_adj\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000b40)=""/4096, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x1320}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x7f]}, 0x8) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) 6.217678134s ago: executing program 5 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000e00), &(0x7f00000003c0), &(0x7f0000000380)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x200000000000005, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@getchain={0x24, 0x66, 0xb04, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0x0, 0xfff3}, {0x7}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 6.131595361s ago: executing program 5 (id=877): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r6}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000000), &(0x7f00000003c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000015c0)=""/4086, 0x26, 0xff6, 0x1}, 0x20) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c00"], 0x0) 5.442980056s ago: executing program 4 (id=878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) clock_adjtime(0x2, &(0x7f0000000480)={0x2, 0x2, 0x9, 0x2, 0x0, 0xfffffffffffffffb, 0x4, 0x4, 0xe5, 0xffffffff, 0x2, 0x81, 0x0, 0x4, 0xfffffffffffffff7, 0xffffffff00000001, 0x1b1, 0x4, 0x7, 0x7, 0x26eb, 0xd136, 0x3, 0x10000, 0x9, 0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$eJzs28FrHFUcB/BfkqapW5ONWqstiA+9VJChycGLvQRJQbqgtI3QCsLUbHTJuBsyS2BFjJ68+neIIKI3QbzpJRf/A8FbLh4riCPJatvIrrJm7Zby+VzyI+99Z3+Pt7swy5v9S5++t7lRZht5N6anpmJ6KyLdTpFiOv7yUbzw8vc/PHPtxs0rK43G6tWULq9cX3oppbTw7LdvfvD5c991T7/x9cI3c7G3+Nb+L8s/753dO7f/+/V3W2Vqland6aY83ep0uvmtopnWW+VmltLrRTMvm6nVLpvbR8Y3is7WVi/l7fX52tZ2syxT3u6lzWYvdTupu91L+Tt5q52yLEvztWB0J+5Ua5/drqoqoqpm42RUVVU9ErU4HY/GfCxEPRbjsXg8nogz8WScjafi6fjypy96BwkAAAAAAAAAAAAAAAAAAABgfEZ9/v/c4axJdw0AAAAAAAAAAAAAAAAAAAAPl2s3bl5ZaTRWr6Z0KqL4ZGdtZ63/tz++shGtKKIZF6Mev8Xh0/99/fryq43Vi+nQYnxc7P6Z391ZmzmaX4p6vDg4v9TPp6P5uajdm1+OepwZlJ+N5YH5U3Hh+XvyWdTjx7ejE0Wsx0H27ut/uJTSK681/pY/fzhvuJn7sT0AAAAwFlm6Y+D9e5YNG+/nR/h94Mj99UH2/ImJLp2IKHvvb+ZF0dx+SIvZY17nwvHbuBQRY1nOyWFD1W5/M0e54GxEjNbGr1VVPRB7euyiNnpq+CdlLiL+cz9T43pvjL+Y9DcT98PdTR86Zf2rwf+f/v+6AgAAAAAAAAAA4N8MPQY4908nBGdGOk446TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA///SHczP") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'veth1_virt_wifi\x00', @random="8de44a7622e1"}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r8, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 5.323072406s ago: executing program 0 (id=879): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$join(0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x402c542c, &(0x7f0000000000)=0xff) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000001e00)={{0x0, 0x8, 0x5, 0x5, 0x7fffffffffffffff, 0x6, 0x101, 0x80000001, 0xb635, 0x8, 0x400, 0x2, 0x20000000000000, 0x8, 0x1000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002e00)={{r8, 0x0, 0x9, 0x6ec2, 0x0, 0x2, 0x341, 0x401, 0xffffffff, 0x8, 0x1, 0x2, 0x7f, 0x2, 0x4}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r9}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs$userns(r10, &(0x7f0000000400)) io_setup(0x3, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002dbd70000000000000000003", @ANYRES32=0x0, @ANYBLOB="040000001400010000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x8800) ioctl$KVM_GET_EMULATED_CPUID(r11, 0xc008ae09, &(0x7f0000000280)={0x3, 0x0, [{0x6, 0x7, 0x4, 0x3, 0x0, 0xf52c, 0x4}, {0x6, 0xfff, 0x7, 0x59800000, 0x9, 0x3, 0x1}, {0xa49cd14f893d5b6a, 0x4, 0x3, 0xb, 0x100, 0xd8f, 0x9}]}) 5.080040725s ago: executing program 0 (id=880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000040)={0x1, 0x0, [{0x40000000, 0x8, 0x1, 0x7, 0xffffffff, 0x2, 0x10f1}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000035a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="ea76fad730d6f7884e931f9ade1c3133e8ef8d6d51a1b790b2fefbc22d0c3febf474512159578b45b8020ffe3401f57e0ecd9ab2074c05374486", @ANYRESOCT=r5], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766743d00001b4ad7b928e1b0deb68ca438b3fcd0d959fdc8f33dc7d19d9eb0ad0a4ff1b6c228d7432e0fb65e38f7d611863f26fb960e3639fd33af4c8e563bdabc245e43209179888e0ec4dc2ea49d7ee9b400a73a16e3d51369bfd047c62a1a22d403c233387e77895cca14da1e3b68ef84b03070e2138a5e063e15ed4250b6c38a891a6d57b2d7d7808935a772a884e182f1aaf3199336ae2f3db42f00"/173, @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,\x00']) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x67, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0xc, 0x0, 0x2, 0x0, 0x2, 0x0, 0x6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.050053548s ago: executing program 0 (id=881): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4010, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@acl}, {@stripe={'stripe', 0x3d, 0x9}}, {@norecovery}, {@test_dummy_encryption}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5fd, &(0x7f00000009c0)="$eJzs3c1rHOUfAPDvbF6aNP39khZR68EGRFrQJk3aShEP7VVKqC948WJs0lq7bUMT0VShKdSLIF5EBE+CVvCP0GKvPSkIHrx4kkJR6VFwZTYzaTb7kmSbZGPn84FtZp5nZp5nuvnmmXn2eWYDKKzh9J9SxN6ImEkiBpOFpbzuyDKHF7e799cHp9NXEpXKK38kkWRp+fZJ9nMg27kvIn78IYk9XfXlzs5fOT9ZLk9fztZH5y7MjM7OXzl47sLk2emz0xfHnxs/dvTI0WNjh9o6r6sN0k5ef/vdwY8mXv/6i7+TsW9+nUjieLyYbbj8PCLi51JbpdYajuHq/0lSnzVwbAOOvx10Zb8ny9/ipLuDFWJd8vevJyIei8Hoivtv3mB8+FJHKwdsqkoSUQEKKhH/UFD5dUB+b7/iPjg24j4Y2J7unljsAKiP/+7FvsHoq/YN7LyXxPJunSQi2uuZq7UrIm7fmrh+5tbE9ajvhwM20cK1iHi8Ufwn1fgfir4YqsZ/qSb+0+uCU9nPNP3lNstf2VVcH/+H2zwysJrF+O9rGf/RJP7fWBb/b7ZZ/vD9xbf6a+K/v91TAgAAAAAAgMK6eSIinm30+X9pafxPNBj/MxARxzeg/OEV6/Wf/5fubEAxQAN3T0S80HD8bykf/TvUlS39rzoeoCc5c648fSgi/h8RB6JnR7o+1qKMgx/v+bxZ3nA2/i9/peXfzsYCZvW4072jdp+pybnJBz1vIOLutYgnGo7/TZba/6RB+5/+PZhZYxl7nr5xqlne6vEPbJbKlxH7G7b/959akbR+Psdo9XpgNL8qqPfk+59816z8duPfIybgwaXt/87W8T+ULH9ez+z6yzg8311pltfu9X9v8mr1kTO9Wdp7k3Nzl8ciepOTXWlqTfr4+usMD6M8HvJ4SeP/wFOt+/8aXf/3R8TCimMnf9bOKc49+s/Ab83q4/ofOieN/6l1tf/rXxi/MfR9s/LX1v4fqbb1B7IU/X+w6LM8THtr0+ujcCmga7K2ur4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DAoRcSuSEojS8ul0shIxEBEPBI7S+VLs3PPnLn0zsWpNK/6/f+l/Jt+BxfXk/z7/4eWrY+vWD8cEbsj4tOu/ur6yOlL5alOnzwAAAAAAAAAAAAAAAAAAABsEwNN5v+nfu/qdO2ATdfd6QoAHdMg/n/qRD2Araf9h+IS/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8AAAAAADxUdu+7+UsSEQvP91dfqd4sr6ejNQM2W6nTFQA6xiN+oLgM/YHico8PJKvk9zXdabU9W5k5/QA7AwAAAAAAAAAAAEDh7N9r/j8Ulfn/UFzm/0Nx5fP/93W4HsDWc48PxCoz+RvO/191LwAAAAAAAAAAAABgI83OXzk/WS5PX177wlcR0XqbHbHGA367/tI3b+G17VGNrVyoVCpX09+C7VKf//hCPhR+i0vvjrVtnM/1W9uRO/c3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPVvAAAA//90ViLR") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001c2f9b5dbc073d2f9c3957f9811397dd5242c6334ec21c982e76a96a579c437c0c79f4380c842d435f57ff3536a7ffdabd3a91944062fc358a040e7f69063ade8983a5defb124faf1c1b963d0e4a091966f7f89878f931c601af9f4fabcbcea8c093621f5", @ANYRESOCT=r0, @ANYRES8, @ANYRES8], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES64], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d0000000000000000ff00e83f3e9c4c220c120500000000"], 0x60}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='rxrpc_rx_data\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002f80)=""/217, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x230, 0x240, 0x240, 0x230, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/150, 0x96) ftruncate(0xffffffffffffffff, 0x5) 4.290712358s ago: executing program 4 (id=882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffdb, 0x0, 0x0, 0x10, 0x1}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r9 = dup(r0) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448e6, 0x0) 3.992846762s ago: executing program 2 (id=883): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = eventfd(0xfffffff2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r3, 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan1\x00', 0x200}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x1, 0x1, &(0x7f0000000140)=""/215, &(0x7f0000000240)=""/177, &(0x7f0000000300)=""/140, 0x10000}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000400)={0x8}) ioctl$FITHAW(r3, 0xc0045878) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x1c, 0x800) r6 = timerfd_create(0x0, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000900)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000fc0), 0x88000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003640)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000003740)=0xe8) fstat(r3, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000003a40)=0x0) r15 = getegid() r16 = socket$inet_udplite(0x2, 0x2, 0x88) statx(r0, &(0x7f0000004100)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004240)={0x0, 0x0, 0x0}, &(0x7f0000004280)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000042c0)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000043c0)=0xe8) r21 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000044c0)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)="82", 0x1}, {&(0x7f0000000500)="4628d580bdb26df5637ab9b581059832174802f5ccbfab540fbe7aaa279365e28669565628a977778f844a97ec4fb47924c449279fabf7f19cde04352a8541ce8fa86c6f6d1e9863fb818f837bfcebae8fce2beaeb759405eb130baf09fe5a537184215fd983e66dc85e43a6e72ca9633882c7d082", 0x75}, {&(0x7f0000000580)="1864ff50c11bffe74a9d6ff9da078680eb4204a6278dca16574f5a9920bfa80d66702f393cd792419a67954895b30027f540f4a64af4bb8aef7a96d4fc01cdc78cf71c116753f5d0e8f4ab088f4bac27120ffd2a7b101742beb6b12502dc6eb411226f38baa1ebdc78bb3173d6a28f586963b12c9de25cf4213bb4ea0ccce8144ab518a1e7a710a67232d2dfb550056c31bae584108cbcf96c6d624af448accc2e30b5a3ad29844db005a0ae746e670dd609f5953ea60b525390288135d6896e46825deaabffbc041161848941cc70", 0xcf}, {&(0x7f0000000680)="2e2a8952f8cfc1d46443d91e1251015c01459776695f988dbc005f800d0071c99e3db6fa59b615257533804f09298a5083d294f5351e83", 0x37}, {&(0x7f00000006c0)="839e425382657f26b8814785c65e902af23b2c32e032f0aa99b3a4e0592475b7acf3741b2f27333e0f251ddde9c4bdc3e6514e7fbe43f536d167d86032b95553aa320e6e9f371c88d1fd97e4daaef2c3ce20a4ae0580a985feb5ee70b5ab643b601e03edcf3d3ed5e49c5d2d6df6f8fa0db67d6f7ba81f3951", 0x79}], 0x5, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r3]}}, @rights={{0x30, 0x1, 0x1, [r5, r3, r3, r3, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r2, r8, r9}}}], 0xc0, 0x4801}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000bc0)="637bcb11e3f98ad8773d0127d29e88dda4d0e5e18149a8cdcb55a18ff10927d012c9cb46c00f4485fb092c695dfe777bac77ddf894023f8dad0ddd72af6f4f6a2e0c9b1d6f63e29867a113e6b28976c6ceb35ba7b44246562c8772125b3e89fe215aa357913fa9a48d43c96a842e4677c33734cf240af57d5403b3045e25a95b8f41c332d070cdaa2595d76fb265afbb708ce63e8665347298d6792f154c61493dd52834ac5be14969a21243a5825dbfacce7c58864848f8f72719ab25b481b26cdc6d307049edb17366660c1b0bbf9370de4d7fbb6755b472959cae", 0xdc}, {&(0x7f0000000cc0)="24fca5ca11ab9277a71c5bdca085b5b44de210e4f9c06b856fe13b406a29ce788d3796208eb5d73ea4e650f6496761d47fd2989a4e5be9720d76b990838c52c5415feb56ab4012749a08f78881c2e1b4c184b7aa246a36c7f07970255b91903c86a1ca54c7bc52c626defc8c9cb5a4a621d1076dcdd7c5b68dca7610b21dce1247c365973656a7051576d036779205c387b40fcb5802f57b0ac3903098a7c3032b142164a1c61d040233d1722ead7d5e", 0xb0}, {&(0x7f0000000d80)="368f406cd6a1f67e5044d411e06d462f4c7d7c4d450fbd9822ba8d985da4aad5b0b6b84f0cb65ec205d15163a4a918043855db2cfabd5293228c28e46166817d7129130ea29a749864b31befd43bd33c32e1d578af27c170f0038a4e11ca53c4e4c3a800b46ded30d1a95a9738ff7c8a918c9444f5457ab657ff569d9449a8147641fa32741b9cace9a41e4fd1f6c840f37d1bcd9098870698c20927fb713bafc385df0e0fbd25a8203cf1774d5b46e5ea59a97998f43172d0559568ce", 0xbd}, {&(0x7f0000000e40)="59b6d1dfe90cf39d136a9d9f81099c9d1850c7619e2ecacc9de3", 0x1a}, {&(0x7f0000000e80)="b617a8471980fe75d06b17602780bad6d65180568c68467b7713effa8e971e3fafa2f219f9a405aab2101144219efce88d0808daa6f323053e42096503cd4ad8ae21a1d700bfc3a372972faa7ef816977fff4e2d41f562f399fa272c89ff97da68e14cd35c5fd0a94ec0069781b2d240f0a745af4199e0b8c72f4b081718cbab44c8b97bb8460aeb47fe3a9f0550eb974ea07bf8901e8a4a1d100073772bb857e5cef9e317d4dd3ced6d9361", 0xac}], 0x5, &(0x7f0000001000)=[@rights={{0x20, 0x1, 0x1, [r10, r0, r3, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r3, r0, r3]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r3, r0, r0, r0, r0, r0, r3, 0xffffffffffffffff, r0]}}], 0x98, 0x20000001}}, {{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000001140)="8b1fd4a4e079f7b9d54c6b2c89af9dadfac6441dba9475d6b26ca9b1cfb453bc83d2e0919b14b8d82ea7c5d91a42cda73d83bb9e4c8ecba62f37716cb72a2bbfd44d02c3ef8946ee997964", 0x4b}, {&(0x7f00000011c0)="333445ff10cdadadded5f0ae7082af468090dc29f839f1741437f8068c1aa9e0", 0x20}, {&(0x7f0000001200)}, {&(0x7f0000001240)="42245031b1df2b41a8e015d2c4dad0626fe9064fbe43ce9a8f8090208a61153dd27e973f58f62c815881e7b6d4f4851ab57e06f69527939842731d283ffb33849fbdfbc9696fccc3a45ce9aba33d2ba541bafdb774efba74633087723398b7579e198751a341022b207c468e05ca9c67e69495b40741cad2f61b801c5951318823bb65f333963bb1be26e8308a9a5590", 0x90}, {&(0x7f0000001300)="544e3a5a246867b88ee0f3ed4e94fbd3ae8bb535781f27c3074a9a484eba57acc59e130bd87b9b52360d297e97a9445bd1582d1c954432a2f427f85992efcce5570f75b3e880a724b956f28cb266e1a23f939f2417e3ee6555d341e79dd5b68885c814b3afc5b9ab845e2601a75a934c15f7bca9ffb1d98b9fed43362d909051912713d3c53bcf0d9ed15cb43943bcbd63af8fed1d5b951811d25ca106e5182ed9d939aff4b0a489fece9f9fc9e26ff9bf3da013db977c1323782a9382241ab58be8f4b9ead3a4cf60d75b9411743b9d148b512ba7e2f79204260be9b97db35e6edc8a25eaad23354b3fe4acde3cfc55439978c2cdff1bd02e3f149d299f297cd40b894d67cac06e8d23305f85fcee1f23197d23d453db44b2b1eee9f35ea5a4e23b9b3905d5090e3ed2bcb99cf0f14320ffd88221c0d6eb7c6b24118a391798e3fc4cc59a5d38cbc5fd5c74b31feb72a61a3eada8d0b9f2b0d92a976d2b5d9b778bfeccaec7809c5f1b175fa1324b8d3af272c5836418752e563eb89dbb126b7abcbc95c3417e80c922a8e282bc5b3780c999808bef668ee1ecd420a3c289ab57dc1362cb3d8ec95d10e32a4fb3c4ee1e874abb5e3b31346528c7d8903ef7a7f2c5cababcbcb87140c127bbd5a6754c676b133561cae876943aa8bd04fb7a8b5c585aecba2772171c653c49bb3714f3b764090c7d6b95d9093fc4ff625c42f3eb6b2d1104401d430f2972983de69bf2e643d74df1c3b36c11ca4ed6a03ff9a69313d3f28705db4d784b6946870de5f748233dc65a811b9813086f24a03085a64b61caaa793d40f345ce9dad34469f0acc7a37fe84c14668555f52ed37f39740c0e17562160f8847d3a3c6792c68fe0c262dc176ebd68a88e7f963661af8df112b4efe4a401fb64e8358d5d562e117e3c3a7d951daf6e472a8c17c3ad24fa1b346f67c810132131fe5d47886868564c93ef6012b46baa2e39c9ff88100053c4ab6323bf98017e7b5928c2a6f32248a0c9eae6fc96b9648575e84f7544b66f807737b3fd87030d88748f0efe101c0b8dd3aeb4577474f3f84ea7907422ed465eeccf013fdbd21f593a8a8de8de1d15501318b7e09a9815441bc3abdf4bd579c26dbdafdc120969314446d5f5f4adcdd0e32e43e7ad47e97df74833422c43b6b54d3d34828747db666d7f8b54d609c86c940c42497aa950d6e32596cc64d5ec2731656c89ec8452fd38b86bed8ea2612ba593e044ab6f1543bf9c28db9d7d10de147c266c74bf5e4c95ba3b2ff560b3cff1103d11f0a170b33baa869600f797afbe0106d74af12c1aa6f05362f5abdc147ce84a42451bb25c3f9106ce5b2e420dc553dc2b0f3c65602ffb4ff99b34b93763c28f7bf5d988c160cd145c72a448f05c95a43320bea16117907667a11a79d78d00cfbcac8d6bfba731d1093a38a6b0fba4e4d11b5d5199d95cda357f6f3c2847616ab7239ee565abc70806fccd97847c7fb453bc561f39402e3f5939b32a30392ee0f5f8c080d274eec2a635bc56739668cd1f9a24796b445b0ccf05ad92e23b9dddfc6940957c0a69bf717aaa29071356dd529d7c8d81d98a5f2a9ade851a8b7eda3ba627bb1419eda5c5f18e3cca6cd2d308c4f913fcd86620914c7bdc955048589c148678df8d1cac75230dcb28761dbae4b5c4b0a500157569ea6ae844676180ef235f57b1709c2f26e23f1fe822943e7ba33da02f867bf89984eb0f0470917b3ae867d4f3dfc621a1992925cbec53b7338df13e7106ee1a6a7a9422853ada3ac1e29ef5dbfd3f54239c9b25ae46f4c8efdfcdcf6a58eeba497180854aa06bc7993cb57b8b63d8d4ea35d323d79b6b1102c8920a4e9e7e6dfb29357e517f636c5b1d10db85219fa3741f99339177ed1c77f90649056183dce2b2413a3a124ac041849e2cc802d4df3fbc4bfc7fb13ccda9ce8899d00688529d9e8ffa4c1fdb4767faa2b099457559aaf004a0f2c82b5aec350f58ff5aefd3aa63cf5f2fe8b0ca8050be671b451bb84cd5033129d284daefe3fffce65f0861828efb7a6f24b857259e069b93daa6d1ea4fc68219a9d3eb6d73765c9079dc89bdc9436ac58c12e8d9dac8815fcbbf579616a5b92370970deffa46a46aae1ae627125ce926dc2975a7d4fea47a1b8d841b521233e09631b175c31ea99ccc40a259df68bfa28681370e0b822a0efb5fbd1567b39e5aae7c96d6c5a215ab76a3c2702eff0a97aa2ae716dc51636b0ba2cae0af7235cae713a69d09be81f325a807448e8960c09247a9b90564f1e037329d172b68f235ef072bdb9ed6380614ed1a4eaee87443d12bf3f138a3ee45a71e9f4f5b261476cbd43ef3ce09ec00c784de835e2a44da21b92143acc5d1ddee2d960956ca42e588b5c064a4ca19ab6641eabdfa67f56cb7a0713420897bf7401e89dc2ca8028db6021ae4921b98752e29c16cc8c4e11d98740f81953e8a668e2fa28b3c061dc7a85f1badc2eeb559b5ec40a401f33b096bd9331276632621874a901934ed756f44871e2b6c95a3a48f90e76e764a56ab421720d4d52ad02a38fb678488ef50e236c4fcea4babb1a08af3f931f076b80efc19b78f3eaaa5f561a8555b9954caf6fb515e65081ac27a49161d4574c20760a521e5892c0f8a7f2289cb93efb437a7c56b378986c4df5adef18c0e97b0b3a2a1a69068811a619bdef9d75011d2c00faef22ebc9342e27cb40509b884d98783da283f4c14a99f0d906af8fe2c91cbccc73e311a49f5cb4351cb10585a90f4653058f744f2d1822c8045819709f6e7a699855a4fccba59728f92ac186c26f412690d6a059752b4edea87c4c17169c7a938e3604490fe3de55651ca164a8b25f67872ef6c5c39f9fa656e3915a7331d1d9e46b9171263597539f8cd1f14af4c9a279bbcac3208297e4b517b27350853f08f3d84944b21bb4a06c2b930d7e3b4dcf51faed7a2ccfb7d5fd29a1fd7b99a38a5f9f9a1c5e315440057df77a8828ba72060f93363ac84edf7dd317f57b8b29da256a7a897d5ac56bfc4e39b0caf66ce390c69330ba0c3daba8c06e3b2260b522f387d661aa6b5e84fa169f64f2c6a6a2a86090b0df6adee2f8ef5a93aba947ea770c5390aa69cc4a597bf87778d526e1470f7368f4bd60285fed23bc14cd6d36c5c24862b2ad7a7099a94208f7e3ac8d28d7692e3ab0000811ee2074e809dbff69801381f73638c62c90b22ebb643e9626a271d1a72cc1c12ec6b20d08d70bebc48d7943675e5604c502c238dac9fc4ce0f8ae9908e6a9983b3c4f9b7173d029c42804ec7ca7d57981cbe43fc2615fc748ecf19d2d5983969a94de536e5bb6d2c00cd71c66826b1699076ac0312c30601d91c7014ec14ac8e906114552df1c03e3e9c65c90751048eef4ba7b9ae63f4a4d32b7cc367ffd55227597c8a5d81ad8335e6b4decd514eceb3ce076a6a34f76bd6c7bc10b09c1790a4fd035b1a1365cb78fb0125d070f7043cc47a7b322b39908d09e1389525cf4e712baf4bbf3527c94bfa8dfb6e96b4f401fd79ec74ff787a0cb4b5908cc6a690e0eab5f35f8dd9bb014a09d5d627b4059ad766d0d61477e825e415d1ae80f3f75bb727c4b7831b2793847102e5b62de72334b5b1c4f2a107a38dda65c89265b5ddf7261a7553394a184f47a3f9f0fa3c3fcc3110bb39a600065817a17ca867df6cde2fadc3df5edfe4d3500800caee9b33cf98706cec33e01b7d19abc0629c2fa2b62def2030514ccae02ed36e614e955baf85b391c8195beadace7df285ac660a1680b01daee332297776ae8eb1f6a80b5821604f2a86cd220d9971ca4ab12168c3a5c0f492daf165788daf35f49c6f601ca585d6b133c6c4ac6ebdaabe68c435ac2c332ddfdd903825a1b6e4ebe594321c284ea27d7e24328f063ecf3951310af5afaff7c71eb0f772df5c566506480ad739d26dc9a86fc40c580073c457430b3412217544bbf8ad6efecc7e63369ba6e33eb51715978c2eda03bce8e83c1cb96ef60288a85f0d3c29b8f53d6fabf04a0e76a4453e25c6b0ab32e2a3fa82092e471ac1ae7b203e014e679b05090b30ea9fc9e5f1bd31b90701edc2d41cddcaf6549025e11b987cb7afa39f9120beec4bd643da7ee4fe60c7a470ad4e07e4f26a45669cf0a4545bdc39a298eb4a2db9244e12a6c60a2371f1334a5c46c82bafe5f09f171bbc56978aa3c3f1a88bb451a804d6c8840aa4b41dd59d79b3d2833cd07461d37796ff72632a75760ebf3d580fed55ca972274a0cbb4f919a6ba4e0cedaea675c05000b40af75dd3900e0804ff125019d4ff32e578b3838fe86e05ab451e2243f5c385216ad52228716ad8841775bf445cbee549028ea783e23db1a7c7462eedfa4eeed386bcc56253adec3e1a335b7af201125bc1e1ca35bbe4008ceafff1d6322ee92700ca71191a68001cd08517e0d6265356222710161c08f066e8125471690ce4c53d7814d38901f4010fbc16651892234c0a92056c21f6e69cd371e0b92db83f06b00f486aae384424ce9b5621d696b46ab3f3eb2f3153199a8753fbe67624da1845414b4b1725535f6f8e70fc035f9c6204a44f946434ab5707d5e3f6f8d5476fa43cb8fbdaf277eeec6638039b90f2da4d319867fbab25377e809d63798a649e18325377cbad5259551f1ee5a0471d32c1a469281e413f60c8a4d354bcbfe0a86e0652c97484dd65b7fa93f905399a59ddc982dce6ea3f0e3033a8ed242a4f1d7ea4458c7fc7d1f3c3ff84d16b786321528cfb949bb4eef723c9d3434210c219ce914e10aac23c1b6414d26f9fda9ebd3358caf4ed61ab0b50e2b69d25922ef0b510f39e8952a4974a16d77b96f09913af41350dcbb52ebd6005ceaf0d67af6f65b38742dbddf7309b5a2635e7537effb1f2f1fc553041626bd96d049cf6d4b5a91b8ef0284c84042a5139ed93a7dde11a33142f67f4f059b40fa46207abcc4401b833e0c52310f72d4ba062dbe7361f0414ea0703cff4d23452f338a7fffccf13ffca83a2295449859137636dacfc55d1529eaa3fe75d4859f4362a91f6dea7d695a611a3d292d7759f6d575f51640e8dfb70069c07c1bdea19ce1b9ff4ac0d74434f919c14324efb960e400f98cb0ad267bdfc36bdd4bfa26a7555316c2c7e18b0608ba2a3b9ee0983d3a84275063add5211367ea07d81299658c833250bf98265813c6fb5f5c2810037034c1adb218f5ca4d5cc4b0a6bed7904c1ba85d41fc074a398aba7f338e0cb70c0a02fc361412ff94336dc5ad2209d205864d07a8fba330c1c54654d21f773ca333ae05d06ecc931ab0918a37c168ec2a2ea787d1b593f069d315bf60005ca74bcf43ae7d6e6172455d7abbfe4691e04ce1b1afde62e5c8f984f47e4b37d9a74c9df5c5aa0b2ff1efbe6cbb3ebad7177ad8847b541a72cada5cf9346ccc6cae0398a2e58e34c262a0a465f29aaad5996563ca6b1084b36f75b0903e6ae14222d69ac82def93f1cab3b4cc15bb0cf88f977ca7436e34d35ef79a9991739deb14015ac4e9eee1281e88edcd2048282ecd89068232d6441201b95bb5c16257bcd9f5df1dd7ee9c3154268169ec425f629fd5b3d8b2849c5d4d914adae3ece5b725a603a1db736accc094f4d8a9f2702b40ec2d1624981f29f30a41562f7cee702fcb032f38dbde87527e97e0f60ae14ae00ffc559e11227d057cafdadbffd82edfa6993738c1c5c8e3cc25250195605c4698224939a5d9a6d69f033dedc4b4e9f53ec119a0abfd92048e4c880aa409cda9f01c0a4120", 0x1000}, {&(0x7f0000002300)="f37386acfee3cd75f0b556628df74bb5c059acfecfacc7b2cf7e556726a9b7006ef3d674656f64dbc624d72b5c52d254dfb1afdd61af1175ac5599941e2e8f9a05d64910ad14206fc6724c6ca1845dbd01f60f6e1612e04ebe20c8af67573b8938c517fa97a21e03437e1dc21ab6fb136a79d8d19f04f49d92f529ddaf32d02a6de8c58ddbfbc0479fcf408960aa173c11fd2825dd128c0c78bdc669bcff70d57abf2f768a8aae66c4147d7ad16d413c5bf5482e411554fcb3fd53eed102369b197af63c1e1ae4bb15d0a907b706eccb62405f8199d6697bfa4ff77935c810026e87a4598fa21869509a1e804eb7d93b090dc8ea10cd86ee7b8cc9c29b4e2e53cad4a05a291c4570dd9f22dbb0eccfdece84febd6e66d0f7a4983c271820e8b588d5180dff2b541282122cd2d5881bfd5ee8aed5baf64fb0bd77d4b58e421bcbd8d330fa153a575e12a21a44a04e1f7f58719188ca842b9a474beda086144e371afb2b7b3a82c0e4e6610656e329b9dc2e9eb8b1a56d3b83670dea2e46ce2571c4fbb842b2e226ca385a221870a1fd84de3afd809ad48b58c44613aebd33090fd6ab8e9bc3c8278e673da6b44ae51df8c247df789eb858376c474654bee46efa9811b7ab86fdee4adcd0d4418b02565c1c8266399c81baba6eee832ea414547e163c234c6750fc0f7f9c2a6be30189a5f6463197c9bbe2049667bfb7a077abe47d603c44d980fd52f1abc5a5a023a1adeaaacbab3b74fd546d323d33fd2ef14b8ea95ffd969d457791dcd1feede104b5daadd7ae6e5c71ec35cc4cd2ac7c5fbb019bd57289a4ec8e72d7187fb32047aa1860ded404e2e4487b1de43a80656c12f3df1e8f6c98fa1b4f9dae7b98d2c90e91c6f9fb2802348f633bc92d009b2a27cf04121d21094902a73e3946801922042373d91af2c457d31fd2ef4147003b025a284aab94ba4352ca10b3b4321af00b06e619a4ada417e6ae2fec0e0c866e55beda42771abcbb9bb5890a610abaf8d97470e257af7a9b804006ae84745b2dc444e11042345cc8598aae77e3d9bc51657b3e62015ef45c75cc4505e66a53d6036426bcbb217721a71814e29024e1b407d9c58f7d592e7db050459a96a7d6beba27e1e7eac620301225173af539eafa548cee2af9d4ff1840c6895506c7fde3723c7f06675086c5c287534c9a8a85b869c8c986e6401092671a3b99b3cee273117fb9ba08f04952c2e79df9942750443b97f19c8df63c909eb48cc5c69c818851e4aad4f9267c15b6a2900e9fb51c9988107ed9cd1470ba077a7cf4c7899ce5fad8536eee554a226a753a16908f667f9474ebb11530bf558a9db8b13ac981520a06316154276e89fd47b585d038c5629df3768be8e5564023a89fb7512f302bbcd52db29539d645d3db621f1f2571df0bfe4262ab16c0b48da09d5d3416e2cb28110ada25ca8682c3b273fa50cb874c994b449e5b737aae8eef5f69a07593dc4c199070157b48785a8125872598fd33db3d8e1b836b80da9f00a845df098e681090b03b9149d00f98ddf0f4380850a3d9b86d16d022338b5c2a460aec12356935c9050e60663e628413dfe039d7708f5ebb4b64f67ded9ec0f525d0f6c2199cd2e5f7ee322a3bb3227a858ab2a7a03663ffbb59425598684a82ee62ba1c15d79a24e6f0627100fe2dde92fca7e7d047fd5bb72772d139929e87597597f5fc797273927b1dae2adba4284b344a0d928fe4d1ff2c89565bfeec3811e2866c62ed32a10694acf22e58e761e2e6386b52344f2fae47a55a90aa65a6caa4661f6074393449eef66659127f9d54528f4f06edd10e2aae88cae16c30f39f8206d63add0a738ebcb9182f156318fac0745b6e6d50bcfce7209016c8b9602fa9fc80c6c278bd4dd04fe034da654e778b1e9b5bf4e44ff3b19985a645dcdde3d75f8cdf5307007528384744dba4700cd72fcdc63d43fb5883688ee4eeb3caad758710962bb73fa3352a16ad00c3d72f1a0ae1bc6d28c10ff0c232437c7aacd08c51b08b1373e30622aac91b5bf09ecf89ec40d57ea064aacc3173036818687846ca8a5be1c7b616bf18bb23fc793b80ee9ce7393811640f1f71593ec98f31ee12d0cb95e4748ea5f953066b12a17c47b098a206ebfeb07bd3a81dac35d26455a96fd5504d0da29d9d9cef7cfb1fa0bc5a34cd9ff5e825e55f1eb6bbe4af374f8e1b11a111f303707fd5f653dfb4e57870bacc39d7d181ff76a10f5852be03d04cf0a4872a427e6f9120f7d6eaa31c804ece6d5fd1c0bb1ff9e60f95c17b02abaca201668305ee29197c20076af850d833a3e6d8799f4c9ed19cb2f6d2cb04d9ac4dc3aa1257d36c6efeb0073e6fd851d20e85447168455a26a0aaf14c006b1d0f24984acdfed8fca13a9342db5a6aa00894a25364cce1fad645de55778536a9bb9b22aa0b48a5730b336fd5887bf849b21d3b19b99d121a0c3c065ae4f19e0c77b1b6830c1d0952424aad0d614315bba1ba7102f9e32fe8e84eec6fb6958fde01cdad79a10fe4a1dd44a91bda146460fd913f1c4ea8c4c90f6ed6821b8279165350304712687aa0020d4892600dfb6b999caea086e3f330f9d531f43f17c6c8ffdd1dba6b79d715ac68cf673fb3a0e908b742d8d65af1c515ebb1a13b906ec0e76d2fe2990609a9165f3f22145fcf553bfba9ee38912f9db1e35e8d385d98d2df0adec3e3ed2d0857e9cbc85aeac5c44d08bb30fbce53bb8dfe1579c09e9f814e52d447bd2eb615aa07d584569a78f73caa7f8d2e1cf18a9626e0d81eb93d42ff9574f55b644209331e89b9f9e7920dd9896160ed06a128db99175e8852296ed1c2b366d1f940474422ea061dbc20b917596d23acce2df915758d2a870d13a10d51458475dcea5292b169475f546418cb42a22c1905bab0d251481234428cab2b87ec20e304bf83e2cb92d2fb570368b33b8a695876789a125c4c112291fb0e3c653292141589ec8400414496bc5f7660a1e308b81cf4abbdc915053aa4084958de0890e678f88e610568acc1dc4dc9f4b40d24cabeeb69c7cd1b24d24cae5e704c9dbae23c01ae73a8363d411ed6098cac43b59564eca3a967411d865dba11b5f28fe672793ee5dc84d4ff1ddc1fed50bcb2a608784eaffbba9c97ff594624993d1102921c460a06b72e4ad16f9171e5e66dee95a70313a6e6145c85fdc13f5a9c3373b7c1730f268ca155ce61a4fb7d570725cf165467e8ef14360789d930ddb0a33b2284cbce34a8b76984f2ae1c36afa5aa5056d6c1977006e0cd95fe1fb3edecad74bf78c5e34226d18e2d8c3ec866a1a5bef61fcbc0e82577c39a637b1969bf978761c8bae5bf69ad55374d9cc8ad672b7644fd713b706ff7d9259b60440d1b84189cbdd2f067e5ef199f0405db97fb5639aa4208fd3887842f3bf2a11925fb1f8c455fed7610607b31cdb848fa1eed239ed56dfb84a49d765507e6d5e6aa66af2f6d79980c79cf81d12746c3c9f8cb6540633e53d18e2610908b9d065b7f9e4bac1221650f3bddb0f6cfae8120422c4a94c1b9f7ed644467a76941717bc4aa51dbc2af5bfd71ae6f474ac20f4716cc2e420a7d000e3c0661f46de3f24e529ec453852cff6ebd736bd1808015da5d3dd157130f62f51481d622c234aeb1aaa5010f936009df212a00c85fa3d7a9144ddab415e7545ffaa0af23b79b5e017ccd729eff3d64eeaaee4333e4547ad4868c6b65b45bde3073eaf0bb69d85bee0e32dd0860978f23a5b8cf4c3e3e66a3e639358ad24d902339791a32a64a2f8cc7b8df5bf82d24d4900a83db33a3a5dca38f549505e0714ac222820d2cdcf5ae2cb1013827c2f1fcc5e93332b47e4676c9b21fcb23183762217e0925da709fa2d188b1de39f2a058393be8ecdd5491bb68a4680a987be9322a5faffda52d1fcdbdfd0e8696702d9f24a285857d72ce1dbf793fb6c76659c23e8f35cc025c7701d6fc3ea780f05984e33c233e135a33ae00f8a63da23527b90a5473c517a51a53eb5fcfee9e1e1519235e5245b4341a941f983aa913a607eff47daffe8a9efe73dc88059b27250ee100506e10c7b218b509a19c89f366255302e1f6cc0c14312b78c2aef031828f87e7dc6fe369860e0b93b88334de212f00298586654a5ef2548f94adf4039831d24a0a0747bee413962e6d77d57bc3ee0cfa07ce1d3eafbc0e9b3b16b55ec0c531b37078ba5ac8a5a2165827463599fd616bbdc258cd14c253924ecabc89f5089f481198a92adf4b369d28c15b2042f0d8dfbe6a23df7e6db7b68731ad6986f1fa92a6917db6ed283ebbe19be3f391f5d23c9af78d6b535878846fa9ac306072d291c0615c13c6266fcc3c3da2e6d3c1e7abf4ccaedb1ab6b34c4ca5b95f07446397bb4b427499c55c7f36f491a8950c7a5d8b06bc8626b0de3e7174fd596ea3789e63c4fac19ae5143f0bca101827344ae76244dcf3b9006a54cdf522b5f2d5e3c76eb3764d22ef8e68491ac2ff9378a408bdff31171738b9b095c81695e801502a2a4ee508210707a26948c3db57f82b73f92dbfe31de68f63a00c7612dfb299fb3d3ab271b984439b07a0ca113cf0381ba42be192b6b6b3d5f36087dec5bca2193b09009734b8a98dc7d99d091918421862433ef3596c13ef7c84b989441680e363999ec7845b11460a1d368ddad0b41c15b3bd59ab9b55efbd1ac2a5e58dbabb6fccab0cb2c9222ba33accc568c394519be53bcdb268f8f87d1a7695862cfb2293e0aa036dd51f57b5563d34483a6fc346b9f06f936783598dbd8a02d535301de310842e55436f587e273b63b231e208d330c756389bbc107eb24a0072ac17870aa0583627680163fb0b9757dcace0373b33cb1b6776dbee3737b8e015ac9c035b03b46632ac5752eb3edbbd9cd8f5ceda28d9840695e38fa7056fe9ea39f87ce20af571fbd2ef300029ffdd3733b57af20947c7a3e4fc054af7d24da1c3d7158a879568a1c14a6c59283fa90dc6e5289fa0535e8988473d3bbcdc363aec634c20aa022206f09a806651ff7d77511088b180d74e8393f74c5cc07bf6530b832594cf0e86fe4eb1ad16034f5ba346f9787dc89ac0cf065c71f65fc4c1ce070ba5e9440f1a19e90520bad93ab9855f0bb98db7c02871248ca78862bfc32642cd1554c36fde98d22264f571b11bf7a772ca14707cd787cec7de012b579cd685c3a2692f438d7ca868f84e21981ec15a570c53b97b72eddab44d08b46a9f9c40439b837da764e1c4f511e2c9df4eec90092709178adb1611ebc9c6e997496115765993d4e9736a1bd5ee5ab71d961e35205ac0befeaf726626bd2622def1b21bfb232e685769b6324d451f0cf765c545cc9515bc9fada05b72df346fbd27aa5ef0107785a97566902ab185ff97342e66605c79df8d1f0896543b8cdd64df2f104c4dc263f291d2c72efeed27d2b7e68c2727507662c43db123a50e9ee21517456034817e5fce787893234a9468deda10206de9273869872cd881a573627fcf06426e522c7e4484826b97c4bff09a93da5fe2c8111c1a79edc1df7eb71796a9b262e296bf7d2ea1aaf96b19cef0c05f6bd65e88a4fdf6f574a1e613c5b61f4abc7debecfdbce9480c3269a446e8b2d90b03895573ed3acb641e83ce6ccbb5831dadec378d46df1e866a6af0024c497b431d4a895a2b220f272c53a1a5b7904336bc2bfb18f5261773ca21c8bd7abb9e92523656f984bedf9120857dd8ed0c1161482799ca22d15af7ad5d1d0f2d5a00a02dcb38500ab00a4a20d2b6f5e982", 0x1000}, {&(0x7f0000003300)="42676f5189f2f8c754658bba9c13e48b3f57092b9676cecc79f6bf74737bbea2b2aee6de0486871d7cce4d47efdbfd6e00d5d5dde957bfb6cee026caa3ca3d5c4017eb4a3f5a22ac3fd3a4f1dad0df8ef3ef2a7a02d87bcfc8573fb544a617fff4b2d6981a682b9bd8e3ce13badda32ae0aa31804c35fd1cefcadd8fbfc76a11bfa397bf16dffa955bbf4d7e3c7e56750ba2ad262d0ed4b3bbcc640a0ef5a620584cc451850ceec813f57f88c35cf6e7c15db465ceade6646c95489e23ce3ee6877acde7a8cb771f7a743ac379ea9a420fe4768be200ccc1d3d5325c16fce12ed6b3", 0xe2}, {&(0x7f0000003400)="82d5a3034e5d26da9d1b88523f23a539e345c07446b4598e6f76f9c09f22c374cbe0397a89d48c07b78d81a300661ec3ef18b5ed77447d6cb70e08b9a7ae73e1c8c314ec86ed253ab84854b76e4d947e5ff86752ec8b75f24ecc0de5867e4b437982703bce", 0x65}, {&(0x7f0000003480)="0a2a9ad620a50b53d5ae5e391c378421eb1d2d5157e2bb4cc9067abdef2af79cd0cd3e506a149bd5cc8cd1a976c5e32b003dd7ac5e0afff8c5c821668333bb6acfe7d8fae6db014743b87c3acf22cc4d43c0c5c83720f1abb0796b787abdfe9ee95589e96969decb73cecd46cb0c163175bed87e81dae30679a7517e3a8608fd8ea59d6e2c77c3dd1d6c5e323f2b590e3668852f0da15fd3ef33366519bee53622ff6b8349a13829c9a15971701a12aaf74a07c0e08603c4bf4db0b17693fed4d28dc1831bca45d29bf733da1f4164cf3d73b87cbcf58c3537ba3a7dabf1001bfe0a445eb32c6d5273e94892c573fa369b016fed82911fee76", 0xf9}], 0x9, &(0x7f0000003800)=[@cred={{0x1c, 0x1, 0x2, {r2, r12, r13}}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r0, r3, r0, r3, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x68, 0x20000000}}, {{&(0x7f0000003880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003900)="01a4b5e8493bc0028447f70ea6b015dfc7f3d4a09f83af0126180395961c5cca45d0679f644006eb8ea2d7b2c71e80bd", 0x30}, {&(0x7f0000003940)="ac7328dc34cf6da7a3ee02c924ccdbdd4357b8479b26451792b44ef1f8dd6ea0df0c65744555b0aa23b945fa14b7cd13b9143b500373104abb71a815e3ba4f697f839df347d78d02f88d0faf0808fcfd2ce0f85c1092f02816ed96efeb4e97512353af10", 0x64}, {&(0x7f00000039c0)='47', 0x2}], 0x3, &(0x7f0000003a80)=[@cred={{0x1c, 0x1, 0x2, {r2, r14, r15}}}], 0x20, 0x10}}, {{&(0x7f0000003ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003b40)="baaf2aee3bcbc77819c43cf52b6bb0038c3653c42bcd806cd929b76579e847e1b142014895f184f009c829138764e2e7ba5b230b98aefeecd1a13e32edaecdd272f439b3505bd750d3c8b71d76f90ac730ac4cfe8d", 0x55}, {&(0x7f0000003bc0)="e125fc1a4f183414b73f9a4b1b0733d15a54ed96404d0baa982a74aa49cee080e7131b69c0c8c2b630662cc12126669913e5d87f5b072a522d795d8d3f574bce58fca2f4cc02114672b02741b213e0907da8eeb1d36ef1f1b8efae913e531bc7c0385ea7ce953e2bfc68af2999953a5b9181885db0019646e259e4333613eb8950e4e8f730388f7be3ac0f5702adcaa1f169a1331f608cfc250f1f4c62f5996dd84f7e366c085e4195ea6de330a121d72c3dc2487a59d93a562a9dad805aba3d8570489e0f11e0437e237d88555a230e062d50e81d73b168cd1e4547bac3eecf8d0c8ceeea5bfbe85e17e07e", 0xec}, {&(0x7f0000003cc0)="1a825113bb968a212845f2e170fc697d343bdc68aedb2bb833366f5ace3a8006b26778268a69269edc40df307f7c36639dc152a4cd573cea387d4ddf665c6b98070029d7d299c16d779e79a1ecc4a56d5da8ba96ee5f22fafff2ccfc0d8e66704f64ef18febe12d279e5d6f02e2c41b6b84245c66f6e3b47569d2b188bc50dc1c36aaf3b27cb9b701b6e5420f7c4c0da52ed45d079558e703725eebf58788bc496ad0a2ae20be805a235f7e85f5a75be145d6312b616daaff67ba8ac12943a839b65665f2d3e75055b6e75e3c9f4c29149ed19d3b234c8f12b5da9daaed44b", 0xdf}, {&(0x7f0000003dc0)="070d8259b867cccfba5ae5815b5359d51a0b4ba5db25080a5e8baeabf0e204cf188794302de5a1f78e1b134df254d44b0557725e35e0dcd870e11d3bc3e197f877d294198c2e446a8933859bbbeddfdb1edea073b107501f4228c57100266c65ea652b313924a593a05878155b5869a83e5bc48166", 0x75}, {&(0x7f0000003e40)="d72df2489bf641265fd70ce769ea2bac3fca8abc88525175610a6816f3278ab97f220c356012110c30db06bc7ae6df8011d66159a58da9d78518fbf08d51a0829a15421d2b5aee37c6c52b8180e09eb0837cffb0c45a1d9250fef6e51d2e77535c399b733b053bbd4c14e625", 0x6c}, {&(0x7f0000003ec0)="e52a39eb66af0144d4c40d2dc27da001c41d9f7d5f2e1e22cb757684b4ca0fd48542dd10c2c0d5aed35dfe3dbae9344a79de125d934cfc45c3774e2aac31d84a1729aaeda3455eba544e4ef49d8e6e7a8c64714cb46eca80110e4ed1cc376f3707751d6277f601", 0x67}, {&(0x7f0000003f40)="16e1a6fad0ad68e71289dfbfc9f40c2b07fc132519d56e6589e3895fd0b479f1d94f862d2282bc741fe689f476dababbfaf24fa38fd9d34e482a5bc6d0311d8e0d", 0x41}, {&(0x7f0000003fc0)="9d209a060d050bc33abaca9bec738fb5cf676ae9ff9f4399fdd363b0fd3343a7b3632d607833ccf1ad8ed2ae58b2bd5d05ef1a2487d9e78b8902a8ceb4244d7b7fd36aad910a662014bf0cab4ebc08b897144e448b65dc29f4488083bb83216c5e6893feb5fff927736bf30febd9c833990e56e515633e39800c689befcc12240135c2449a559c865682b8fd400a25c08c6942613d6dd2526159a8d62e6504", 0x9f}], 0x8, &(0x7f0000004400)=[@rights={{0x14, 0x1, 0x1, [r16]}}, @cred={{0x1c, 0x1, 0x2, {r2, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r21, r0, r0, r0, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}], 0x98, 0x80}}], 0x5, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004640)={&(0x7f0000004600)='ack_update_msk\x00', r0, 0x0, 0xa4}, 0x18) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000004680), &(0x7f00000046c0)={0x0, 0xfb, 0x105, 0x0, 0x1, "00795c8a78fd084cde7a695f0fa587d1", "0c0adc6719d31ba96b27328f9827b8d22ec6704df3c3b2b83e434a1af6a4e9d2b7f326285438dfc67bfcb1a9d88d1ea5bdbc546dcfc30e7e2cb0a2ef296ab5882ee13e0a09a5aefa8fed8d942d68832e106a754ca992e70fbef3e6b28283b7d46d527f59cf58407d7a2061e0e079dd175d4223deaf83444ddfe8b67a3225b7ee1bf52499ebe75b7e83243cdba35edad02ee3fa8f976788dd6717e37aefa5640abfd1c92210144defbc576b698aedaf42e0a550853e6d7354337638d0701d7f559818635c8fea09bb236c628205ff1511c721c27da82b10c00f727296460fea3e7034133b2c584132213a4311ce733b24"}, 0x105, 0x1) connect$inet6(r5, &(0x7f0000004800)={0xa, 0x4e21, 0x7, @mcast2, 0x9}, 0x1c) r22 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004880), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000004980)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004940)={&(0x7f00000048c0)={0x80, r22, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008800}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000049c0)={'bridge0\x00', {0x2, 0x4e24, @loopback}}) 3.875976421s ago: executing program 4 (id=884): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x8280}], 0x1, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000005280)={0x20022000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000005240)=[0x0], 0x1}, 0x58) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@pppol2tpv3={0x1e, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x4048040) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000280)={0x87, @broadcast, 0x4e21, 0x1, 'lblcr\x00', 0x26, 0xa, 0x19}, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x0, 0x4e22, 0xfffd, 0xa, 0x60, 0xc0, 0x2b, 0x0, r6}, {0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x7ff, 0x9, 0x6, 0x9, 0xfff}, {0xedc, 0x7, 0x9d0}, 0x8, 0x6e6bb0, 0x1, 0x1}, {{@in=@empty, 0x4d3, 0xff}, 0x2, @in=@broadcast, 0x3502, 0x1, 0x3, 0x9, 0x800, 0xffffffff}}, 0xe8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3.875384901s ago: executing program 2 (id=885): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@noquota}]}, 0x2, 0x4fd, &(0x7f0000000b00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x35]}}, {@inode32}, {@huge_within_size}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x7, 'vlan0\x00', {0x80}}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x248, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x8010, 0x0, 0x800, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x24, 0xdc, 0x0, 0x2, [0x8, 0x5, 0x4, 0x5, 0x4, 0x4, 0x5da, 0xa]}]}}}}}) 2.780026429s ago: executing program 6 (id=886): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x4) 2.654644968s ago: executing program 2 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000e00), &(0x7f00000003c0), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@getchain={0x24, 0x66, 0xb04, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0x0, 0xfff3}, {0x7}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2.654134458s ago: executing program 4 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004600005c03000000006c90780000000000000000940400100420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000004000800655800000000"], 0x0) 1.534338408s ago: executing program 2 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x408000, 0xc4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x5, 0x33, &(0x7f0000000300)="85a34e37d18f6bc5e83610c68c4d7113f2446e8f90362301ad5ef4660d67ef5115b4b002d88bc4be16822b0bcd6aa2373dc40e", 0xfa, 0xd7, 0x8, 0x400, 0xfff7, 0x2, 0x7, 'syz0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.458013724s ago: executing program 4 (id=890): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) socket(0x10, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) 1.456177664s ago: executing program 0 (id=891): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r9, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000180)='./file1\x00', 0x4) 1.342202663s ago: executing program 6 (id=892): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$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") (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) socket(0x2c, 0x3, 0x0) (async, rerun: 64) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) (async) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffe83, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) io_setup(0x8, &(0x7f0000004200)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 1.156736838s ago: executing program 5 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "3856d7bf25dbefc62c38c43818aa814abffa26ebf0b36e48473f2a4d05ddf5e6a5b4eb9902a27a4a5af7dd7c3f5e8f2e9d734d9234b2f2ec992593d78508a39b", 0x3a}, 0x48, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "9d06ddfe2d0e37a49acf2100242cc6c0a8b3fa0961881af7c76487235f27ab93be564cf4a524e8427cf48f76eb8df5187152320f28baeaa2fdb8717eef31d4f0", 0x37}, 0x48, r1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x64, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe803500121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto$inet(r7, &(0x7f0000000380)='\x00', 0x1, 0x41, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000200)="11", 0x1, 0x8804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.156400338s ago: executing program 6 (id=894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x27, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000280)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000200)='./file0\x00', 0x0) 824.238284ms ago: executing program 2 (id=895): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = timerfd_create(0x8, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x1}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r8, 0x20, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/218, 0xda}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r5, 0x0, 0x1}, 0x18) 348.427492ms ago: executing program 6 (id=896): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x16}, @func]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x8}}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 121.44458ms ago: executing program 4 (id=897): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@noquota}]}, 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x35]}}, {@inode32}, {@huge_within_size}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x7, 'vlan0\x00', {0x80}}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x248, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x8010, 0x0, 0x800, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x24, 0xdc, 0x0, 0x2, [0x8, 0x5, 0x4, 0x5, 0x4, 0x4, 0x5da, 0xa]}]}}}}}) 0s ago: executing program 6 (id=898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x400}, 0x18) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x1, @remote, 0xa}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61120c00000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='nonumtail=0,flush,codepage=857,nonumtail=0,shortname=lower,shortname=lower,utf8=0,quiet,uni_xlate=r,shnnt,\x00'/123], 0x1, 0x21d, &(0x7f0000000240)="$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") syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x84, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) kernel console output (not intermixed with test programs): X: 0000000000080000 [ 418.590887][ T1279] RDX: ffffc90001d1d000 RSI: 0000000000000216 RDI: 0000000000000217 [ 418.599314][ T1279] RBP: ffffc90000cc75d0 R08: ffff88811b780000 R09: 0000000000000002 [ 418.609464][ T1279] R10: 000000000000000e R11: 0000000000000002 R12: ffff88811795682c [ 418.645194][ T1279] R13: dffffc0000000000 R14: 000000000000000e R15: 000000008000080e [ 418.655697][ T1279] FS: 00007f4d84e2b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 418.664818][ T1279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.671526][ T1279] CR2: 0000000000000000 CR3: 0000000111a38000 CR4: 00000000003526a0 [ 418.679601][ T1279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.687862][ T1279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.695909][ T1279] Call Trace: [ 418.699493][ T1279] kvm_inject_exception+0x110/0x2b0 [ 418.704761][ T1279] ? vcpu_enter_guest+0x1c8a/0x6d70 [ 418.710252][ T1279] vcpu_enter_guest+0x1ddf/0x6d70 [ 418.715567][ T1279] ? paging64_page_fault+0xaf0/0xaf0 [ 418.723649][ T1279] ? local_bh_enable+0x30/0x30 [ 418.729639][ T1279] ? finish_task_switch+0x12e/0x5a0 [ 418.735212][ T1279] ? switch_mm_irqs_off+0x30c/0x9a0 [ 418.740800][ T1279] ? __switch_to_asm+0x34/0x60 [ 418.745849][ T1279] ? __kasan_check_read+0x11/0x20 [ 418.753728][ T1279] ? vmx_get_cpl+0x188/0x290 [ 418.758864][ T1279] ? emulator_read_write_onepage+0x459/0x8c0 [ 418.765017][ T1279] ? linearize+0x56e/0x8b0 [ 418.770091][ T1279] ? emulator_read_write+0x1e2/0x570 [ 418.775558][ T1279] ? push+0x5f0/0x5f0 [ 418.780231][ T1279] ? emulator_write_emulated+0x3c/0x50 [ 418.785871][ T1279] ? writeback+0x5da/0x920 [ 418.801402][ T1279] ? x86_emulate_insn+0x47c/0x3730 [ 419.212403][ T24] audit: type=1400 audit(1756292838.980:694): avc: denied { name_bind } for pid=1287 comm="syz.4.264" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 419.295986][ T1279] ? try_to_wake_up+0x638/0xd70 [ 419.312425][ T1279] ? __kasan_check_write+0x14/0x20 [ 419.346152][ T1279] ? kvm_inject_page_fault+0x586/0xbf0 [ 419.355025][ T1279] ? __kasan_check_read+0x11/0x20 [ 419.366992][ T1279] ? vmx_get_rflags+0x103/0x180 [ 419.371954][ T1279] ? vmx_get_interrupt_shadow+0x13/0x50 [ 419.389471][ T1279] ? x86_emulate_instruction+0x1a5d/0x2460 [ 419.402050][ T1279] ? vmx_check_nested_events+0x139a/0x2000 [ 419.414686][ T1279] ? handle_vmfunc+0x860/0x860 [ 419.422629][ T1279] ? complete_emulated_pio+0xf6/0x160 [ 419.445800][ T1279] kvm_arch_vcpu_ioctl_run+0x7d0/0x1970 [ 419.453397][ T1279] kvm_vcpu_ioctl+0x78e/0xb50 [ 419.464820][ T1295] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 419.474075][ T1279] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 419.515015][ T1279] ? selinux_file_ioctl+0x377/0x480 [ 419.521214][ T1279] ? __kasan_check_write+0x14/0x20 [ 419.527251][ T1279] ? selinux_file_alloc_security+0x120/0x120 [ 419.533491][ T1279] ? vm_mmap_pgoff+0x13b/0x340 [ 419.538868][ T1279] ? __fget_files+0x2c4/0x320 [ 419.543838][ T1279] ? security_file_ioctl+0x84/0xa0 [ 419.549484][ T1279] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 419.555303][ T1279] __se_sys_ioctl+0x121/0x1a0 [ 419.560258][ T1279] __x64_sys_ioctl+0x7b/0x90 [ 419.564912][ T1279] do_syscall_64+0x31/0x40 [ 419.569411][ T1279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 419.575640][ T1279] RIP: 0033:0x7f4d863c2be9 [ 419.580226][ T1279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.600680][ T1279] RSP: 002b:00007f4d84e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.623540][ T1279] RAX: ffffffffffffffda RBX: 00007f4d865e9fa0 RCX: 00007f4d863c2be9 [ 419.644469][ T1279] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 419.653089][ T1279] RBP: 00007f4d86445e19 R08: 0000000000000000 R09: 0000000000000000 [ 419.662985][ T1279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.671267][ T1279] R13: 00007f4d865ea038 R14: 00007f4d865e9fa0 R15: 00007ffc517da8a8 [ 419.679661][ T1279] ---[ end trace 2226c61d725caeaa ]--- [ 420.912560][ T24] audit: type=1400 audit(1756292840.680:695): avc: denied { ioctl } for pid=1326 comm="syz.4.274" path="socket:[19657]" dev="sockfs" ino=19657 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 421.003655][ T1328] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 422.421065][ T24] audit: type=1400 audit(1756292842.150:696): avc: denied { read } for pid=1324 comm="syz.0.276" name="usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 422.527147][ T1331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.277'. [ 422.762640][ T24] audit: type=1400 audit(1756292842.150:697): avc: denied { open } for pid=1324 comm="syz.0.276" path="/dev/usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 423.327264][ T1339] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 423.484387][ T1339] EXT4-fs (loop5): orphan cleanup on readonly fs [ 423.496221][ T1339] EXT4-fs error (device loop5): ext4_orphan_get:1421: comm syz.5.280: bad orphan inode 15 [ 423.508396][ T1339] ext4_test_bit(bit=14, block=18) = 1 [ 423.514050][ T1339] is_bad_inode(inode)=0 [ 423.518798][ T1339] NEXT_ORPHAN(inode)=1023 [ 423.523298][ T1339] max_ino=32 [ 423.526655][ T1339] i_nlink=0 [ 423.532131][ T1339] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2930: inode #15: comm syz.5.280: corrupted xattr block 19 [ 423.545667][ T1339] EXT4-fs warning (device loop5): ext4_evict_inode:303: xattr delete (err -117) [ 423.555718][ T1339] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 423.766567][ T1357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.284'. [ 423.796348][ T1357] netlink: 40 bytes leftover after parsing attributes in process `syz.6.284'. [ 423.806096][ T1357] netlink: 40 bytes leftover after parsing attributes in process `syz.6.284'. [ 424.987093][ T24] audit: type=1400 audit(1756292843.740:698): avc: denied { mount } for pid=1360 comm="syz.0.285" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 425.040607][ T1358] EXT4-fs (loop5): Unrecognized mount option "smackfsroot=[&}^@\" or missing value [ 425.277645][ T1371] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffffÿ01777777777777777777777¬‚ú=¨ËdÌž¬· Y ýS«38`¿·˜›‚" or missing value [ 425.303710][ T24] audit: type=1400 audit(1756292845.070:699): avc: denied { connect } for pid=1356 comm="syz.5.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.178383][ T1371] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 426.186260][ T1371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 426.198270][ T1371] F2FS-fs (loop0): invalid crc value [ 426.311931][ T1371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 426.397315][ T1382] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 426.497267][ T1382] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.289: invalid block [ 426.510779][ T1382] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.289: invalid indirect mapped block 4294967295 (level 1) [ 426.528065][ T1382] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.289: invalid indirect mapped block 4294967295 (level 1) [ 426.545105][ T1382] EXT4-fs (loop6): 2 truncates cleaned up [ 426.551020][ T1382] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue [ 426.623308][ T1371] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 426.630525][ T1371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 427.982780][ T1405] device bridge1 entered promiscuous mode [ 430.342184][ T1418] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 431.399933][ T1432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 431.812072][ T24] audit: type=1400 audit(1756292851.580:700): avc: denied { ioctl } for pid=1434 comm="syz.6.304" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18841 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 431.900866][ T24] audit: type=1326 audit(1756292851.620:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 431.931616][ T24] audit: type=1326 audit(1756292851.620:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 431.955586][ T24] audit: type=1326 audit(1756292851.620:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 431.973483][ T1436] EXT4-fs (loop6): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 431.998574][ T24] audit: type=1326 audit(1756292851.620:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 432.059052][ T24] audit: type=1326 audit(1756292851.620:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 432.126015][ T24] audit: type=1326 audit(1756292851.630:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 432.189089][ T24] audit: type=1326 audit(1756292851.630:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 432.213417][ T1449] fuse: Bad value for 'fd' [ 432.223108][ T24] audit: type=1326 audit(1756292851.630:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 432.276992][ T24] audit: type=1326 audit(1756292851.630:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.6.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 433.768236][ T1473] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 434.995108][ T1476] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.200090][ T1490] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.211328][ T1490] FAT-fs (loop11): unable to read boot sector [ 436.391084][ T1490] netlink: 'syz.5.322': attribute type 15 has an invalid length. [ 436.759134][ T1496] fuse: Bad value for 'fd' [ 437.007605][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 437.007638][ T24] audit: type=1400 audit(1756292856.829:773): avc: denied { unlink } for pid=802 comm="syz-executor" name="file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 437.552454][ T1517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 437.588443][ T1518] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.616961][ T1518] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 437.819913][ T1518] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 438.469117][ T24] audit: type=1400 audit(1756292858.299:774): avc: denied { write } for pid=1516 comm="syz.0.333" name="file1" dev="loop0" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 438.503562][ T1518] exFAT-fs (loop0): hint_cluster is invalid (17) [ 438.536292][ T24] audit: type=1400 audit(1756292858.329:775): avc: denied { open } for pid=1516 comm="syz.0.333" name="file1" dev="loop0" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 438.600962][ T24] audit: type=1400 audit(1756292858.429:776): avc: denied { execute_no_trans } for pid=1516 comm="syz.0.333" path="/file1" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 438.626714][ T1529] fuse: Bad value for 'fd' [ 438.960288][ T1541] exfat: Unexpected value for 'discard' [ 442.767212][ T1554] netlink: 'syz.4.344': attribute type 12 has an invalid length. [ 442.941213][ T24] audit: type=1326 audit(1756292862.769:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.4.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f191456abe9 code=0x0 [ 443.035179][ T24] audit: type=1400 audit(1756292862.859:778): avc: denied { create } for pid=1551 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 443.096947][ T24] audit: type=1400 audit(1756292862.889:779): avc: denied { create } for pid=1551 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 443.164311][ T24] audit: type=1400 audit(1756292862.889:780): avc: denied { connect } for pid=1551 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 443.239994][ T24] audit: type=1400 audit(1756292862.889:781): avc: denied { write } for pid=1551 comm="syz.2.343" laddr=fe80::14 lport=1 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 443.270234][ T1576] incfs: Options parsing error. -22 [ 443.281594][ T1576] incfs: mount failed -22 [ 443.473186][ T1582] FAT-fs (loop5): Unrecognized mount option "00000000000000000000" or missing value [ 443.835681][ T1588] device bridge0 entered promiscuous mode [ 443.841578][ T1588] device macsec1 entered promiscuous mode [ 443.848447][ T1588] bridge0: port 3(macsec1) entered blocking state [ 443.854930][ T1588] bridge0: port 3(macsec1) entered disabled state [ 443.864113][ T1588] device bridge0 left promiscuous mode [ 444.049321][ T24] audit: type=1326 audit(1756292863.879:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191456abe9 code=0x7ffc0000 [ 444.119633][ T24] audit: type=1326 audit(1756292863.909:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191456abe9 code=0x7ffc0000 [ 444.237361][ T24] audit: type=1326 audit(1756292863.909:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f191456abe9 code=0x7ffc0000 [ 444.293888][ T1595] netlink: 'syz.2.358': attribute type 12 has an invalid length. [ 444.354686][ T24] audit: type=1326 audit(1756292863.909:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191456abe9 code=0x7ffc0000 [ 444.423517][ T24] audit: type=1326 audit(1756292863.909:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191456abe9 code=0x7ffc0000 [ 444.465825][ T1603] fuse: Unknown parameter 'smackfshat' [ 444.626981][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 444.896986][ T53] usb 5-1: device descriptor read/64, error -71 [ 445.046936][ T280] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 445.065191][ T1621] netlink: 96 bytes leftover after parsing attributes in process `syz.2.368'. [ 445.249752][ T1631] netlink: 'syz.6.372': attribute type 12 has an invalid length. [ 445.307020][ T53] usb 5-1: device descriptor read/64, error -71 [ 445.436969][ T280] usb 6-1: Using ep0 maxpacket: 16 [ 445.487193][ T280] usb 6-1: too many configurations: 22, using maximum allowed: 8 [ 445.586980][ T53] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 445.757015][ T280] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 445.764878][ T280] usb 6-1: can't read configurations, error -61 [ 445.887022][ T53] usb 5-1: device descriptor read/64, error -71 [ 446.540652][ T280] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 447.057093][ T53] usb 5-1: device descriptor read/64, error -71 [ 447.146922][ T280] usb 6-1: Using ep0 maxpacket: 16 [ 447.187124][ T280] usb 6-1: too many configurations: 22, using maximum allowed: 8 [ 447.200876][ T53] usb usb5-port1: attempt power cycle [ 447.424500][ T1660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=1660 comm=syz.6.383 [ 447.437979][ T280] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 447.445807][ T280] usb 6-1: can't read configurations, error -61 [ 447.456387][ T280] usb usb6-port1: attempt power cycle [ 447.703293][ T1671] EXT4-fs (loop4): unable to read superblock [ 447.917100][ T280] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 447.971498][ T24] kauditd_printk_skb: 87 callbacks suppressed [ 447.971552][ T24] audit: type=1400 audit(1756292867.789:874): avc: denied { read write } for pid=1670 comm="syz.4.387" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.327583][ T24] audit: type=1400 audit(1756292868.079:875): avc: denied { open } for pid=1670 comm="syz.4.387" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.367276][ T24] audit: type=1400 audit(1756292868.089:876): avc: denied { unmount } for pid=1122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 448.387414][ T24] audit: type=1400 audit(1756292868.189:877): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 448.415429][ T280] usb 6-1: device descriptor read/8, error -71 [ 448.599763][ T1688] fuse: Unknown parameter 'GPL' [ 448.742005][ T1686] EXT4-fs (loop6): Ignoring removed orlov option [ 448.800885][ T1686] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue [ 448.822447][ T24] audit: type=1400 audit(1756292868.649:878): avc: denied { mount } for pid=1685 comm="syz.6.388" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 448.845424][ T1686] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 448.866964][ T280] usb 6-1: device descriptor read/8, error -71 [ 449.051420][ T1693] FAT-fs (loop5): Directory bread(block 64) failed [ 449.051583][ T24] audit: type=1400 audit(1756292868.879:879): avc: denied { write } for pid=1685 comm="syz.6.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.058352][ T1693] FAT-fs (loop5): Directory bread(block 65) failed [ 449.085001][ T1693] FAT-fs (loop5): Directory bread(block 66) failed [ 449.091694][ T1693] FAT-fs (loop5): Directory bread(block 67) failed [ 449.098450][ T1693] FAT-fs (loop5): Directory bread(block 68) failed [ 449.105034][ T1693] FAT-fs (loop5): Directory bread(block 69) failed [ 449.111902][ T1693] FAT-fs (loop5): Directory bread(block 70) failed [ 449.118514][ T1693] FAT-fs (loop5): Directory bread(block 71) failed [ 449.125206][ T1693] FAT-fs (loop5): Directory bread(block 72) failed [ 449.131924][ T1693] FAT-fs (loop5): Directory bread(block 73) failed [ 449.217582][ T24] audit: type=1400 audit(1756292868.879:880): avc: denied { nlmsg_write } for pid=1685 comm="syz.6.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.254560][ T24] audit: type=1400 audit(1756292868.999:881): avc: denied { name_bind } for pid=1697 comm="syz.0.393" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 449.304897][ T24] audit: type=1400 audit(1756292868.999:882): avc: denied { node_bind } for pid=1697 comm="syz.0.393" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 449.475292][ T24] audit: type=1400 audit(1756292869.289:883): avc: denied { unmount } for pid=1122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 450.786092][ T1712] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 453.367016][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 453.367051][ T24] audit: type=1400 audit(1756292872.639:890): avc: denied { create } for pid=1713 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 453.665430][ T24] audit: type=1400 audit(1756292872.669:891): avc: denied { connect } for pid=1713 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 454.678471][ T1722] F2FS-fs (loop6): Unrecognized mount option "i" or missing value [ 455.395513][ T24] audit: type=1400 audit(1756292875.219:892): avc: denied { create } for pid=1729 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 455.746969][ T24] audit: type=1400 audit(1756292875.229:893): avc: denied { read write } for pid=1728 comm="syz.4.403" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.075374][ T24] audit: type=1400 audit(1756292875.229:894): avc: denied { open } for pid=1728 comm="syz.4.403" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.117184][ T24] audit: type=1400 audit(1756292875.239:895): avc: denied { ioctl } for pid=1728 comm="syz.4.403" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.153761][ T24] audit: type=1400 audit(1756292875.359:896): avc: denied { setopt } for pid=1729 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.234080][ T24] audit: type=1400 audit(1756292875.359:897): avc: denied { bind } for pid=1729 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.530246][ T24] audit: type=1400 audit(1756292876.359:898): avc: denied { ioctl } for pid=1728 comm="syz.4.403" path="socket:[19337]" dev="sockfs" ino=19337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 456.568461][ T1744] input input4: cannot allocate more than FF_MAX_EFFECTS effects [ 457.087561][ T24] audit: type=1400 audit(1756292876.919:899): avc: denied { getopt } for pid=1748 comm="syz.6.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.010228][ T1768] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.414: inode #1: comm syz.4.414: iget: illegal inode # [ 460.037251][ T1768] EXT4-fs (loop4): Remounting filesystem read-only [ 460.064265][ T1768] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.414: error while reading EA inode 1 err=-117 [ 460.107376][ T1768] EXT4-fs (loop4): 1 orphan inode deleted [ 460.123196][ T1768] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,grpid,usrjquota=,prjquota,nogrpid,errors=remount-ro,grpjquota=, [ 460.217431][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 460.217465][ T24] audit: type=1400 audit(1756292880.049:902): avc: denied { write } for pid=1767 comm="syz.4.414" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.218865][ T1776] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5953: inode #18: comm syz.4.414: bad extra_isize 6 (inode size 256) [ 460.223591][ T24] audit: type=1400 audit(1756292880.049:903): avc: denied { add_name } for pid=1767 comm="syz.4.414" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.280183][ T24] audit: type=1400 audit(1756292880.049:904): avc: denied { create } for pid=1767 comm="syz.4.414" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 460.302866][ T24] audit: type=1400 audit(1756292880.049:905): avc: denied { read write open } for pid=1767 comm="syz.4.414" path="/86/file0/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 460.327077][ T24] audit: type=1400 audit(1756292880.049:906): avc: denied { ioctl } for pid=1767 comm="syz.4.414" path="/86/file0/file0/bus" dev="loop4" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 460.352314][ T1776] EXT4-fs (loop4): Remounting filesystem read-only [ 460.603543][ T1783] EXT4-fs (loop4): Ignoring removed nobh option [ 460.623340][ T1783] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 460.731878][ T24] audit: type=1400 audit(1756292880.559:907): avc: denied { create } for pid=1780 comm="syz.2.419" dev="anon_inodefs" ino=20428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.772990][ T24] audit: type=1400 audit(1756292880.559:908): avc: denied { ioctl } for pid=1780 comm="syz.2.419" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20428 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.809610][ T1783] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,user_xattr,dioread_nolock,,errors=continue [ 460.880838][ T24] audit: type=1400 audit(1756292880.709:909): avc: denied { append } for pid=1782 comm="syz.4.418" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.954729][ T24] audit: type=1400 audit(1756292880.729:910): avc: denied { open } for pid=1782 comm="syz.4.418" path="/87/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 461.005232][ T24] audit: type=1400 audit(1756292880.729:911): avc: denied { write } for pid=1782 comm="syz.4.418" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 461.202840][ T1774] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 461.233387][ T1774] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 461.293868][ T1774] F2FS-fs (loop6): invalid crc value [ 461.411641][ T1774] F2FS-fs (loop6): Found nat_bits in checkpoint [ 461.929015][ T1774] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 461.948155][ T1774] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 462.680819][ T1798] F2FS-fs (loop4): invalid crc value [ 462.782406][ T1830] overlayfs: failed to resolve './file1': -2 [ 462.793236][ T1798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 463.039008][ T1836] fuse: Unknown parameter '' [ 463.072691][ T1798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 463.189174][ T279] attempt to access beyond end of device [ 463.189174][ T279] loop4: rw=2049, want=45104, limit=40427 [ 463.730776][ T1844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.434'. [ 463.784033][ T1844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.434'. [ 464.496775][ T1857] netlink: 'syz.5.438': attribute type 12 has an invalid length. [ 465.357124][ T1858] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 466.366919][ T1276] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 466.834188][ T1862] netlink: 'syz.4.440': attribute type 3 has an invalid length. [ 466.843210][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 466.843244][ T24] audit: type=1400 audit(1756292886.539:941): avc: denied { write } for pid=1860 comm="syz.5.439" name="fib_triestat" dev="proc" ino=4026532750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 466.939501][ T1862] netlink: 'syz.4.440': attribute type 3 has an invalid length. [ 466.966772][ T24] audit: type=1326 audit(1756292886.539:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1860 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 467.027466][ T1276] usb 7-1: device descriptor read/all, error -61 [ 467.122338][ T24] audit: type=1326 audit(1756292886.539:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1860 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 467.187904][ T1276] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 467.258365][ T24] audit: type=1326 audit(1756292886.539:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1860 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 467.366365][ T1881] syz.5.446[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.366493][ T1881] syz.5.446[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.367514][ T24] audit: type=1326 audit(1756292886.539:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1860 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 467.476995][ T1276] usb 7-1: device descriptor read/64, error -71 [ 467.516162][ T24] audit: type=1326 audit(1756292886.539:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1860 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 467.796419][ T1890] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 467.815533][ T24] audit: type=1326 audit(1756292886.539:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1860 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 467.873070][ T1890] EXT4-fs (loop5): orphan cleanup on readonly fs [ 467.886765][ T1890] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.448: bg 0: block 248: padding at end of block bitmap is not set [ 467.904002][ T1890] Quota error (device loop5): write_blk: dquota write failed [ 467.912120][ T1890] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 467.922428][ T1890] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.448: Failed to acquire dquot type 1 [ 467.934726][ T1276] usb 7-1: device descriptor read/64, error -71 [ 467.946059][ T1890] EXT4-fs (loop5): 1 truncate cleaned up [ 467.964508][ T1890] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue [ 468.159589][ T1276] usb usb7-port1: attempt power cycle [ 468.377267][ T24] audit: type=1326 audit(1756292886.539:948): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1860 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 468.972322][ T1885] fuse: Bad value for 'group_id' [ 469.129634][ T1896] tipc: Enabling of bearer rejected, failed to enable media [ 469.524733][ T1911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 472.326226][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 472.326629][ T24] audit: type=1400 audit(1756292889.439:1007): avc: denied { create } for pid=1897 comm="syz.6.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 472.372449][ T24] audit: type=1400 audit(1756292889.489:1008): avc: denied { bind } for pid=1897 comm="syz.6.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 473.076928][ T1915] EXT4-fs (loop4): orphan cleanup on readonly fs [ 473.090075][ T1915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.453: bg 0: block 248: padding at end of block bitmap is not set [ 473.106085][ T1915] Quota error (device loop4): write_blk: dquota write failed [ 473.114084][ T1915] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 473.124326][ T1915] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.453: Failed to acquire dquot type 1 [ 473.140082][ T1915] EXT4-fs (loop4): 1 truncate cleaned up [ 473.147180][ T1915] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,quota,,errors=continue [ 473.208165][ T24] audit: type=1400 audit(1756292893.029:1009): avc: denied { ioctl } for pid=1900 comm="syz.4.453" path="socket:[21724]" dev="sockfs" ino=21724 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.747331][ T1923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 474.178359][ T24] audit: type=1400 audit(1756292893.949:1010): avc: denied { write } for pid=1927 comm="syz.5.456" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 474.456643][ T24] audit: type=1400 audit(1756292894.279:1011): avc: denied { mount } for pid=1934 comm="syz.6.460" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 474.522055][ T1936] incfs: mount failed -22 [ 474.636926][ T24] audit: type=1400 audit(1756292894.339:1012): avc: denied { mounton } for pid=1934 comm="syz.6.460" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 474.805757][ T24] audit: type=1400 audit(1756292894.629:1013): avc: denied { name_bind } for pid=1937 comm="syz.2.461" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 474.830649][ T24] audit: type=1326 audit(1756292894.659:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.2.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d863c2be9 code=0x0 [ 474.956671][ T1946] netlink: 'syz.6.465': attribute type 12 has an invalid length. [ 475.116773][ T1954] tipc: Started in network mode [ 475.126950][ T1954] tipc: Own node identity 6a13d3219875, cluster identity 4711 [ 475.150091][ T1954] tipc: Enabled bearer , priority 0 [ 475.206411][ T1948] tipc: Resetting bearer [ 475.301653][ T1948] tipc: Disabling bearer [ 475.524969][ T1959] netlink: 104 bytes leftover after parsing attributes in process `syz.6.468'. [ 475.534971][ T1959] netlink: 104 bytes leftover after parsing attributes in process `syz.6.468'. [ 475.608178][ T1959] netlink: 104 bytes leftover after parsing attributes in process `syz.6.468'. [ 476.177352][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 476.447132][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 476.588038][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.936698][ T53] usb 6-1: config 0 has no interfaces? [ 476.995339][ T53] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 477.096323][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.312744][ T53] usb 6-1: config 0 descriptor?? [ 479.927838][ T1987] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 480.002740][ T1987] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.781811][ T2001] mmap: syz.0.479 (2001): VmData 17453056 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 481.048144][ T1276] usb 6-1: USB disconnect, device number 6 [ 481.165311][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 481.165344][ T24] audit: type=1400 audit(1756292900.989:1036): avc: denied { create } for pid=2012 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 481.256932][ T24] audit: type=1400 audit(1756292901.029:1037): avc: denied { ioctl } for pid=2012 comm="syz.0.484" path="socket:[21971]" dev="sockfs" ino=21971 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 481.319329][ T2018] x_tables: duplicate underflow at hook 2 [ 482.087612][ T24] audit: type=1400 audit(1756292901.919:1038): avc: denied { write } for pid=2031 comm="syz.5.490" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 482.243402][ T2038] tipc: Enabled bearer , priority 0 [ 482.252838][ T2032] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 482.270612][ T2032] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.339777][ T2036] tipc: Resetting bearer [ 482.450743][ T2036] tipc: Disabling bearer [ 482.536252][ T2046] EXT4-fs (loop4): Ignoring removed orlov option [ 482.725252][ T2046] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 482.751857][ T24] audit: type=1400 audit(1756292902.579:1039): avc: denied { read } for pid=2049 comm="syz.2.494" name="usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 482.799570][ T24] audit: type=1400 audit(1756292902.609:1040): avc: denied { append } for pid=2045 comm="syz.4.493" path="/101/bus/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 482.825441][ T24] audit: type=1400 audit(1756292902.609:1041): avc: denied { open } for pid=2049 comm="syz.2.494" path="/dev/usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 482.859945][ T24] audit: type=1400 audit(1756292902.689:1042): avc: denied { read } for pid=2045 comm="syz.4.493" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 483.040992][ T24] audit: type=1400 audit(1756292902.689:1043): avc: denied { open } for pid=2045 comm="syz.4.493" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 483.064999][ T24] audit: type=1400 audit(1756292902.689:1044): avc: denied { ioctl } for pid=2045 comm="syz.4.493" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 483.704044][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 483.767477][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 483.778572][ T24] audit: type=1400 audit(1756292903.609:1045): avc: denied { ioctl } for pid=2072 comm="syz.2.501" path="socket:[20734]" dev="sockfs" ino=20734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 483.813873][ T2073] device veth0 entered promiscuous mode [ 483.824664][ T2069] syz.0.500[2069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.824779][ T2069] syz.0.500[2069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.840322][ T2073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 484.041606][ T2085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 484.091091][ T2086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 484.210642][ T2088] tipc: Enabled bearer , priority 0 [ 484.229904][ T2087] tipc: Resetting bearer [ 484.273064][ T2087] tipc: Disabling bearer [ 485.131775][ T2106] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 485.496733][ T2106] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.787863][ T24] audit: type=1400 audit(1756292906.619:1046): avc: denied { read } for pid=2123 comm="syz.4.514" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 486.850309][ T24] audit: type=1400 audit(1756292906.679:1047): avc: denied { mounton } for pid=2123 comm="syz.4.514" path="/108/file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 486.876415][ T2129] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 486.894506][ T2129] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 486.908133][ T2129] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 487.107628][ T2133] tipc: Enabled bearer , priority 0 [ 487.129506][ T2124] xt_bpf: check failed: parse error [ 487.146164][ T2127] tipc: Resetting bearer [ 487.206070][ T2127] tipc: Disabling bearer [ 487.318659][ T24] audit: type=1400 audit(1756292907.149:1048): avc: denied { setopt } for pid=2141 comm="syz.6.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.906949][ T24] audit: type=1400 audit(1756292908.719:1049): avc: denied { bind } for pid=2141 comm="syz.6.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 490.632693][ T2164] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 490.692317][ T2164] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 491.329617][ T2177] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 491.706117][ T2179] fuse: Bad value for 'fd' [ 492.771307][ T24] audit: type=1400 audit(1756292912.599:1050): avc: denied { read write } for pid=2181 comm="syz.6.528" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 492.819582][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 492.876942][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 492.894704][ T24] audit: type=1400 audit(1756292912.639:1051): avc: denied { open } for pid=2181 comm="syz.6.528" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 492.926990][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 492.972937][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 492.998825][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.006604][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.089314][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.126970][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.154990][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.185333][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.223540][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.247342][ T2185] tipc: Started in network mode [ 493.262615][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.283342][ T2185] tipc: Own node identity 86f81ff316e9, cluster identity 4711 [ 493.296946][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.329785][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.357834][ T2185] tipc: Enabled bearer , priority 0 [ 493.367174][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.398323][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.405858][ T24] audit: type=1400 audit(1756292913.229:1052): avc: denied { ioctl } for pid=2181 comm="syz.6.528" path="socket:[20903]" dev="sockfs" ino=20903 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 493.416179][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416224][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416267][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416315][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416359][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416402][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416518][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416562][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416605][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416652][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416696][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416739][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.416784][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418195][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418248][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418292][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418336][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418380][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418424][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418512][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418554][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418597][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418640][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418682][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418735][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418779][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418835][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418878][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418921][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.418965][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419008][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419135][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419188][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419231][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419276][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419326][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419369][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419413][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419457][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419501][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419544][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419589][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419632][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419676][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419721][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419765][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419809][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419852][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419896][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419941][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.419987][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420041][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420086][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420129][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420172][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420215][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420259][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420303][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420345][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420387][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420433][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420476][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420519][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420561][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420605][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420648][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420691][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420733][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420777][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420821][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420864][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420907][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420950][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.420995][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421176][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421226][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421282][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421326][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421369][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421413][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421456][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421499][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421544][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421587][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421631][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421675][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421718][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421761][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421806][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421851][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421894][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421938][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.421981][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422026][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422071][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422114][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422157][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422214][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422287][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422333][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422377][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422422][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422466][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422510][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422555][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422601][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422645][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422690][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422735][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422779][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422824][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422869][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422914][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.422967][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423012][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423056][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423101][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423148][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423194][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423248][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423292][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423336][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423380][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423424][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423467][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423511][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423556][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423599][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423643][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423686][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423730][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423774][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423817][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423860][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423904][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423947][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.423993][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424037][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424082][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424126][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424171][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424215][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424272][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424315][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424359][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424403][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424446][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424490][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424534][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424577][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424620][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424664][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424707][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424751][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424794][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424838][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424881][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424925][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.424968][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425013][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425056][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425103][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425147][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425191][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425235][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425286][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425330][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425373][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425417][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425461][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425504][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425548][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425592][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425635][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425684][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425727][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425773][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425817][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425861][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425918][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.425962][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.426006][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.426049][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.426093][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447059][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447148][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447192][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447236][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447290][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447336][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447380][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447425][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447470][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447514][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.447560][ T20] hid-generic 0003:0002:0003.0001: unknown main item tag 0x0 [ 493.541873][ T20] hid-generic 0003:0002:0003.0001: hidraw0: USB HID v0.03 Device [syz1] on syz1 [ 493.739979][ T2187] fido_id[2187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 494.486917][ T309] tipc: 32-bit node address hash set to f31f1190 [ 495.087778][ T2183] tipc: Resetting bearer [ 495.142384][ T2183] tipc: Disabling bearer [ 495.863411][ T24] audit: type=1400 audit(1756292915.689:1053): avc: denied { create } for pid=2218 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 495.922095][ T24] audit: type=1400 audit(1756292915.729:1054): avc: denied { write } for pid=2218 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 495.974359][ T24] audit: type=1400 audit(1756292915.729:1055): avc: denied { create } for pid=2218 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.427360][ T24] audit: type=1400 audit(1756292917.259:1056): avc: denied { connect } for pid=2223 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 497.939919][ T2226] cannot load conntrack support for proto=3 [ 499.776163][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 499.854080][ T2243] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 502.001614][ T299] Bluetooth: hci0: command 0x1003 tx timeout [ 502.026924][ T2242] Bluetooth: hci0: sending frame failed (-49) [ 502.377066][ T24] audit: type=1400 audit(1756292922.199:1057): avc: denied { mounton } for pid=2233 comm="syz.6.543" path="/60/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.379488][ T2244] incfs: Can't find or create .index dir in ./file0 [ 502.445219][ T24] audit: type=1400 audit(1756292922.209:1058): avc: denied { add_name } for pid=2233 comm="syz.6.543" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.643266][ T24] audit: type=1400 audit(1756292922.209:1059): avc: denied { create } for pid=2233 comm="syz.6.543" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 503.018702][ T2244] incfs: mount failed -14 [ 503.023394][ T24] audit: type=1400 audit(1756292922.209:1060): avc: denied { associate } for pid=2233 comm="syz.6.543" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 503.661312][ T24] audit: type=1400 audit(1756292923.489:1061): avc: denied { bind } for pid=2264 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.758848][ T2267] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 503.834890][ T24] audit: type=1400 audit(1756292923.659:1062): avc: denied { append } for pid=2266 comm="syz.4.552" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 504.097321][ T299] Bluetooth: hci0: command 0x1001 tx timeout [ 504.103480][ T2242] Bluetooth: hci0: sending frame failed (-49) [ 504.128118][ T24] audit: type=1400 audit(1756292923.959:1063): avc: denied { read write } for pid=2271 comm="syz.2.553" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 504.161997][ T25] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 504.179042][ T25] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 504.195282][ T25] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 504.204280][ T24] audit: type=1400 audit(1756292923.989:1064): avc: denied { open } for pid=2271 comm="syz.2.553" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 504.229465][ T25] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 505.854754][ T2285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 505.876974][ T2281] fido_id[2281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 505.897067][ T2285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 505.926300][ T2285] syz.0.557[2285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.926568][ T2285] syz.0.557[2285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.176916][ T1276] Bluetooth: hci0: command 0x1009 tx timeout [ 506.260980][ T2292] tipc: Enabled bearer , priority 0 [ 506.299464][ T2291] tipc: Resetting bearer [ 506.323111][ T2291] tipc: Disabling bearer [ 510.212648][ T2321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 510.258318][ T2314] netem: change failed [ 510.484420][ T24] audit: type=1400 audit(1756292930.279:1065): avc: denied { read write } for pid=2316 comm="syz.6.568" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 510.688878][ T24] audit: type=1400 audit(1756292930.279:1066): avc: denied { open } for pid=2316 comm="syz.6.568" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 511.400109][ T24] audit: type=1400 audit(1756292931.229:1067): avc: denied { read } for pid=2330 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.526119][ T2331] Unknown ioctl -2147203071 [ 511.532413][ T24] audit: type=1400 audit(1756292931.369:1068): avc: denied { setattr } for pid=2330 comm="syz.2.573" path="socket:[21152]" dev="sockfs" ino=21152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 512.837046][ T297] Bluetooth: hci0: Frame reassembly failed (-84) [ 512.848894][ T24] audit: type=1326 audit(1756292932.679:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2354 comm="syz.6.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x0 [ 513.168573][ T2359] x_tables: duplicate underflow at hook 2 [ 513.290434][ T24] audit: type=1400 audit(1756292933.109:1070): avc: denied { accept } for pid=2353 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.459495][ T24] audit: type=1400 audit(1756292933.169:1071): avc: denied { getopt } for pid=2353 comm="syz.0.581" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.730278][ T24] audit: type=1326 audit(1756292933.559:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2369 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 513.764182][ T24] audit: type=1326 audit(1756292933.579:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2369 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 513.789000][ T24] audit: type=1326 audit(1756292933.579:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2369 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 513.942424][ T2374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 513.965680][ T2374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 514.358210][ T2380] exfat: Deprecated parameter 'utf8' [ 514.363613][ T2380] exfat: Deprecated parameter 'utf8' [ 514.379966][ T2380] exfat: Deprecated parameter 'namecase' [ 514.434690][ T2380] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 514.896961][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 514.905958][ T2242] Bluetooth: hci0: sending frame failed (-49) [ 515.845558][ T24] kauditd_printk_skb: 78 callbacks suppressed [ 515.845593][ T24] audit: type=1326 audit(1756292934.789:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4d863c2be9 code=0x7ffc0000 [ 516.210315][ T2410] netlink: 'syz.0.596': attribute type 12 has an invalid length. [ 516.989558][ T2422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 517.012522][ T2422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 517.072115][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 517.078673][ T2242] Bluetooth: hci0: sending frame failed (-49) [ 518.257168][ T298] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 518.538760][ T2443] device veth0_vlan left promiscuous mode [ 518.547488][ T2443] device veth0_vlan entered promiscuous mode [ 519.147000][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 519.342011][ T2447] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 519.362696][ T2449] netlink: 'syz.5.608': attribute type 12 has an invalid length. [ 519.487041][ T298] usb 7-1: unable to get BOS descriptor or descriptor too short [ 519.527165][ T298] usb 7-1: not running at top speed; connect to a high speed hub [ 519.661892][ T2461] fuse: Bad value for 'user_id' [ 519.687235][ T298] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.933285][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 519.973147][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 521.287006][ T280] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 521.314476][ T298] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.387145][ T298] usb 7-1: string descriptor 0 read error: -71 [ 521.393985][ T298] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.403193][ T298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.636552][ T24] audit: type=1326 audit(1756292943.361:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 524.593474][ T24] audit: type=1326 audit(1756292943.361:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 524.650266][ T298] usb 7-1: can't set config #1, error -71 [ 524.686942][ T24] audit: type=1326 audit(1756292943.371:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 524.738356][ T298] usb 7-1: USB disconnect, device number 5 [ 524.770521][ T24] audit: type=1326 audit(1756292943.371:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 524.794294][ T24] audit: type=1326 audit(1756292943.371:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 524.817927][ T24] audit: type=1326 audit(1756292943.381:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 524.841901][ T24] audit: type=1326 audit(1756292943.381:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 525.113631][ T24] audit: type=1326 audit(1756292943.381:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 525.148027][ T24] audit: type=1326 audit(1756292943.391:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 525.920305][ T24] audit: type=1326 audit(1756292943.391:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 526.242112][ T280] usb 3-1: device descriptor read/all, error -71 [ 526.356285][ T2499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 526.380203][ T2492] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 526.385874][ T2486] FAT-fs (loop4): Directory bread(block 64) failed [ 526.397376][ T2486] FAT-fs (loop4): Directory bread(block 65) failed [ 526.404004][ T2486] FAT-fs (loop4): Directory bread(block 66) failed [ 526.410646][ T2486] FAT-fs (loop4): Directory bread(block 67) failed [ 526.417322][ T2486] FAT-fs (loop4): Directory bread(block 68) failed [ 526.423907][ T2486] FAT-fs (loop4): Directory bread(block 69) failed [ 526.430639][ T2486] FAT-fs (loop4): Directory bread(block 70) failed [ 526.433291][ T2492] EXT4-fs (loop5): orphan cleanup on readonly fs [ 526.437241][ T2486] FAT-fs (loop4): Directory bread(block 71) failed [ 526.437348][ T2486] FAT-fs (loop4): Directory bread(block 72) failed [ 526.437381][ T2486] FAT-fs (loop4): Directory bread(block 73) failed [ 526.480050][ T2492] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.622: bg 0: block 248: padding at end of block bitmap is not set [ 526.502856][ T2506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 526.512667][ T2492] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.622: Failed to acquire dquot type 1 [ 526.525272][ T2492] EXT4-fs (loop5): 1 truncate cleaned up [ 526.532425][ T2492] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue [ 526.927510][ T2513] tipc: Enabled bearer , priority 0 [ 526.996026][ T2512] tipc: Resetting bearer [ 527.080033][ T2512] tipc: Disabling bearer [ 527.526158][ T2519] netlink: 72 bytes leftover after parsing attributes in process `syz.5.630'. [ 527.693338][ T24] kauditd_printk_skb: 64 callbacks suppressed [ 527.693389][ T24] audit: type=1400 audit(1756292948.481:1226): avc: denied { read } for pid=2536 comm="syz.2.636" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 528.031597][ T24] audit: type=1400 audit(1756292948.481:1227): avc: denied { open } for pid=2536 comm="syz.2.636" path="net:[4026532467]" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 528.307651][ T24] audit: type=1400 audit(1756292948.491:1228): avc: denied { create } for pid=2536 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 528.347126][ T24] audit: type=1400 audit(1756292948.521:1229): avc: denied { getopt } for pid=2536 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 528.509860][ T2515] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 528.516393][ T2515] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 528.516951][ T24] audit: type=1400 audit(1756292949.341:1230): avc: denied { mounton } for pid=2514 comm="syz.4.628" path="/126/file1" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 528.599465][ T2515] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 528.686369][ T2515] F2FS-fs (loop4): Inconsistent i_blocks, ino:3, iblocks:0, sectors:8 [ 528.687081][ T24] audit: type=1400 audit(1756292949.421:1231): avc: denied { read write } for pid=2551 comm="syz.5.641" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.722589][ T24] audit: type=1400 audit(1756292949.421:1232): avc: denied { open } for pid=2551 comm="syz.5.641" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.747160][ T24] audit: type=1400 audit(1756292949.421:1233): avc: denied { ioctl } for pid=2551 comm="syz.5.641" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.773131][ T24] audit: type=1400 audit(1756292949.491:1234): avc: denied { write } for pid=2553 comm="syz.2.639" name="arp" dev="proc" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 528.799087][ T24] audit: type=1400 audit(1756292949.491:1235): avc: denied { execmem } for pid=2540 comm="syz.6.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 529.101264][ T2563] tipc: Enabled bearer , priority 0 [ 529.148897][ T2561] tipc: Resetting bearer [ 529.201295][ T2561] tipc: Disabling bearer [ 529.322584][ T2569] overlayfs: workdir and upperdir must be separate subtrees [ 531.602698][ T2580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 531.657743][ T2583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 531.696999][ T281] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 531.722096][ T2582] EXT4-fs (loop4): invalid inodes per group: 1 [ 531.722096][ T2582] [ 531.744053][ T2580] netlink: 'syz.0.650': attribute type 12 has an invalid length. [ 532.007412][ T2593] FAT-fs (loop5): Unrecognized mount option "ÿ" or missing value [ 532.105235][ T2596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 532.227164][ T280] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 532.477156][ T280] usb 5-1: Using ep0 maxpacket: 16 [ 532.597480][ T280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.670904][ T280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.836995][ T281] usb 3-1: unable to get BOS descriptor or descriptor too short [ 532.880500][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 532.880544][ T24] audit: type=1400 audit(1756292953.711:1257): avc: denied { unlink } for pid=278 comm="syz-executor" name="file1" dev="tmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 532.937216][ T281] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 532.951863][ T281] usb 3-1: can't read configurations, error -71 [ 533.098766][ T2601] netlink: 'syz.0.656': attribute type 12 has an invalid length. [ 533.106741][ T24] audit: type=1400 audit(1756292953.931:1258): avc: denied { mount } for pid=2600 comm="syz.0.656" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 533.157978][ T24] audit: type=1400 audit(1756292953.991:1259): avc: denied { create } for pid=2598 comm="syz.5.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.178206][ T280] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.187653][ T280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.187731][ T2599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.655'. [ 533.268376][ T2605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 533.287087][ T2605] 8021q: VLANs not supported on lo [ 533.322449][ T280] usb 5-1: Product: syz [ 533.326696][ T280] usb 5-1: Manufacturer: syz [ 533.331743][ T280] usb 5-1: SerialNumber: syz [ 533.551294][ T24] audit: type=1400 audit(1756292954.381:1260): avc: denied { ioctl } for pid=2609 comm="syz.2.659" path="socket:[23651]" dev="sockfs" ino=23651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 533.596999][ T24] audit: type=1400 audit(1756292954.411:1261): avc: denied { bind } for pid=2606 comm="syz.5.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 533.857464][ T280] usb 5-1: 0:2 : does not exist [ 533.915866][ T280] usb 5-1: USB disconnect, device number 6 [ 534.711321][ T24] audit: type=1400 audit(1756292954.901:1262): avc: denied { nlmsg_write } for pid=2615 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 534.767025][ T24] audit: type=1400 audit(1756292954.981:1263): avc: denied { read } for pid=2615 comm="syz.4.661" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 534.796305][ T24] audit: type=1400 audit(1756292954.981:1264): avc: denied { open } for pid=2615 comm="syz.4.661" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 534.885218][ T1929] udevd[1929]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 534.902444][ T24] audit: type=1400 audit(1756292955.031:1265): avc: denied { mount } for pid=2615 comm="syz.4.661" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 534.946061][ T24] audit: type=1400 audit(1756292955.081:1266): avc: denied { ioctl } for pid=2615 comm="syz.4.661" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 535.155497][ T2632] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 535.301747][ T2640] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 535.320295][ T2645] netlink: 'syz.0.667': attribute type 12 has an invalid length. [ 535.324899][ T2640] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.396235][ T2640] bridge: RTM_NEWNEIGH with invalid ether address [ 535.445198][ T2640] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #12: comm syz.4.666: Directory hole found for htree leaf block 0 [ 535.551859][ T2651] netlink: 96 bytes leftover after parsing attributes in process `syz.4.670'. [ 536.790912][ T2664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.674'. [ 536.799931][ T2664] IPv6: NLM_F_CREATE should be specified when creating new route [ 536.807869][ T2664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.815151][ T2664] IPv6: NLM_F_CREATE should be set when creating new route [ 536.822481][ T2664] IPv6: NLM_F_CREATE should be set when creating new route [ 536.834754][ T2664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.674'. [ 536.843821][ T2664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.768991][ T2673] netlink: 'syz.6.678': attribute type 12 has an invalid length. [ 538.003381][ T2684] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 539.400815][ T2688] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 541.743793][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 541.743825][ T24] audit: type=1400 audit(1756292962.571:1294): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 541.905737][ T24] audit: type=1400 audit(1756292962.731:1295): avc: denied { name_bind } for pid=2685 comm="syz.4.682" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 541.968563][ T24] audit: type=1400 audit(1756292962.781:1296): avc: denied { node_bind } for pid=2685 comm="syz.4.682" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 542.042463][ T2720] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 542.234367][ T2724] netlink: 'syz.5.691': attribute type 12 has an invalid length. [ 542.237786][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 542.587061][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 542.651635][ T2730] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 544.267065][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.478145][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.488593][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 544.501764][ T25] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 544.511119][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.045366][ T2734] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 545.310842][ T25] usb 7-1: config 0 descriptor?? [ 545.367122][ T25] usb 7-1: can't set config #0, error -71 [ 545.395231][ T25] usb 7-1: USB disconnect, device number 6 [ 545.449062][ T2740] device ip6tnl1 entered promiscuous mode [ 545.458257][ T24] audit: type=1400 audit(1756292966.291:1297): avc: denied { name_bind } for pid=2741 comm="syz.4.697" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 547.273487][ T24] audit: type=1400 audit(1756292968.101:1298): avc: denied { ioctl } for pid=2752 comm="syz.4.701" path="socket:[23897]" dev="sockfs" ino=23897 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.443242][ T2761] netlink: 60 bytes leftover after parsing attributes in process `syz.6.702'. [ 547.474530][ T2762] netlink: 'syz.0.703': attribute type 12 has an invalid length. [ 547.633893][ T24] audit: type=1400 audit(1756292968.461:1299): avc: denied { create } for pid=2763 comm="syz.0.705" dev="anon_inodefs" ino=23460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 547.701997][ T24] audit: type=1400 audit(1756292968.511:1300): avc: denied { ioctl } for pid=2763 comm="syz.0.705" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23460 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 547.729935][ T24] audit: type=1400 audit(1756292968.521:1301): avc: denied { read } for pid=2763 comm="syz.0.705" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 547.780392][ T2767] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 548.015758][ T2738] F2FS-fs (loop5): fault_type options not supported [ 548.049177][ T2738] F2FS-fs (loop5): invalid crc value [ 548.064452][ T2738] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 548.958723][ T2738] F2FS-fs (loop5): Start checkpoint disabled! [ 548.973757][ T24] audit: type=1326 audit(1756292969.801:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2783 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d863c2be9 code=0x7ffc0000 [ 549.101556][ T24] audit: type=1326 audit(1756292969.931:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2783 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f4d863c2be9 code=0x7ffc0000 [ 549.155885][ T24] audit: type=1326 audit(1756292969.931:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2783 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d863c2be9 code=0x7ffc0000 [ 549.183765][ T24] audit: type=1326 audit(1756292969.931:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2783 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4d863c2be9 code=0x7ffc0000 [ 549.207694][ T24] audit: type=1326 audit(1756292969.931:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2783 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d863c2be9 code=0x7ffc0000 [ 549.231740][ T24] audit: type=1326 audit(1756292969.931:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2783 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d863c2be9 code=0x7ffc0000 [ 549.352564][ T2793] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 550.541515][ T2800] netlink: 1323 bytes leftover after parsing attributes in process `syz.2.713'. [ 551.288811][ T2803] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 551.402877][ T2805] netlink: 'syz.5.715': attribute type 12 has an invalid length. [ 552.972909][ T2825] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 553.836897][ T281] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 553.991973][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 553.992017][ T24] audit: type=1400 audit(1756292974.821:1332): avc: denied { create } for pid=2841 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 554.076876][ T281] usb 5-1: Using ep0 maxpacket: 16 [ 554.197065][ T281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.209838][ T2839] syz.5.725[2839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.210036][ T2839] syz.5.725[2839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.238403][ T281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.271100][ T281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.284784][ T281] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.294551][ T281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.363750][ T2850] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 555.217948][ T2852] netlink: 'syz.6.728': attribute type 12 has an invalid length. [ 555.230488][ T24] audit: type=1400 audit(1756292976.061:1333): avc: denied { create } for pid=2853 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 555.372257][ T281] usb 5-1: config 0 descriptor?? [ 555.382394][ T2858] syz.0.731[2858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.382517][ T2858] syz.0.731[2858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.405113][ T24] audit: type=1400 audit(1756292976.231:1334): avc: denied { create } for pid=2855 comm="syz.6.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 555.496413][ T24] audit: type=1400 audit(1756292976.321:1335): avc: denied { map } for pid=2855 comm="syz.6.730" path="socket:[24209]" dev="sockfs" ino=24209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 555.581028][ T24] audit: type=1400 audit(1756292976.351:1336): avc: denied { read accept } for pid=2855 comm="syz.6.730" path="socket:[24209]" dev="sockfs" ino=24209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 555.713331][ T2865] tipc: Enabling of bearer rejected, failed to enable media [ 556.028668][ T2869] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 556.208831][ T24] audit: type=1400 audit(1756292977.041:1337): avc: denied { append } for pid=2870 comm="syz.5.735" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 556.249643][ T2873] usb usb8: check_ctrlrecip: process 2873 (syz.5.735) requesting ep 01 but needs 81 [ 556.281658][ T2873] usb usb8: usbfs: process 2873 (syz.5.735) did not claim interface 0 before use [ 556.305663][ T24] audit: type=1400 audit(1756292977.071:1338): avc: denied { bind } for pid=2870 comm="syz.5.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 556.361593][ T2874] bridge: RTM_NEWNEIGH with invalid ether address [ 556.507793][ T2868] EXT4-fs (loop4): 1 orphan inode deleted [ 556.519029][ T2868] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 556.531801][ T2868] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.617038][ T281] usbhid 5-1:0.0: can't add hid device: -71 [ 556.623502][ T281] usbhid: probe of 5-1:0.0 failed with error -71 [ 556.631537][ T281] usb 5-1: USB disconnect, device number 7 [ 556.771393][ T24] audit: type=1400 audit(1756292977.601:1339): avc: denied { setopt } for pid=2888 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 556.815803][ T24] audit: type=1400 audit(1756292977.641:1340): avc: denied { bind } for pid=2888 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 556.884452][ T2891] netlink: 'syz.6.740': attribute type 12 has an invalid length. [ 556.950598][ T24] audit: type=1326 audit(1756292977.781:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2894 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 557.006073][ T2900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.742'. [ 557.015116][ T2900] tipc: Invalid UDP bearer configuration [ 557.015169][ T2900] tipc: Enabling of bearer rejected, failed to enable media [ 557.029892][ T2900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.742'. [ 557.677506][ T2915] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 559.948714][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 559.948769][ T24] audit: type=1400 audit(1756292978.811:1347): avc: denied { ioctl } for pid=2918 comm="syz.4.748" path="socket:[24321]" dev="sockfs" ino=24321 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 560.846962][ T281] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 561.032608][ T2954] EXT4-fs (loop4): Test dummy encryption mode enabled [ 561.041287][ T2954] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 561.078508][ T2954] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.758: bad orphan inode 131083 [ 561.091085][ T2954] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue [ 561.237222][ T281] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.325965][ T281] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.346882][ T281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 561.364127][ T281] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 561.383288][ T281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.403404][ T281] usb 3-1: config 0 descriptor?? [ 561.625371][ T24] audit: type=1400 audit(1756292982.451:1348): avc: denied { read write } for pid=2976 comm="syz.6.763" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 561.665782][ T24] audit: type=1400 audit(1756292982.491:1349): avc: denied { open } for pid=2976 comm="syz.6.763" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 561.690616][ T24] audit: type=1400 audit(1756292982.491:1350): avc: denied { bind } for pid=2976 comm="syz.6.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.711026][ T24] audit: type=1400 audit(1756292982.491:1351): avc: denied { name_bind } for pid=2976 comm="syz.6.763" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 561.750510][ T24] audit: type=1400 audit(1756292982.491:1352): avc: denied { node_bind } for pid=2976 comm="syz.6.763" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 561.956531][ T2988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 562.007047][ T281] usbhid 3-1:0.0: can't add hid device: -71 [ 562.013188][ T281] usbhid: probe of 3-1:0.0 failed with error -71 [ 562.040468][ T281] usb 3-1: USB disconnect, device number 8 [ 562.138331][ T24] audit: type=1400 audit(1756292982.971:1353): avc: denied { write } for pid=2992 comm="syz.5.768" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 562.161254][ T24] audit: type=1400 audit(1756292982.971:1354): avc: denied { add_name } for pid=2992 comm="syz.5.768" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 562.184989][ T24] audit: type=1400 audit(1756292982.971:1355): avc: denied { create } for pid=2992 comm="syz.5.768" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 562.206235][ T24] audit: type=1400 audit(1756292982.971:1356): avc: denied { associate } for pid=2992 comm="syz.5.768" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 562.233668][ T2995] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 566.320141][ T3019] netlink: 52 bytes leftover after parsing attributes in process `syz.2.775'. [ 566.421685][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.429201][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.439599][ T3018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.775'. [ 566.501783][ T3026] netlink: 71 bytes leftover after parsing attributes in process `syz.4.776'. [ 566.968830][ T3034] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 567.018056][ T3034] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.115907][ T3047] netlink: 'syz.6.781': attribute type 5 has an invalid length. [ 567.123707][ T3047] netlink: 'syz.6.781': attribute type 11 has an invalid length. [ 567.146989][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 567.147033][ T24] audit: type=1400 audit(1756292987.891:1358): avc: denied { map } for pid=3030 comm="syz.5.778" path="socket:[24958]" dev="sockfs" ino=24958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 567.197276][ T24] audit: type=1400 audit(1756292987.891:1359): avc: denied { read } for pid=3030 comm="syz.5.778" path="socket:[24958]" dev="sockfs" ino=24958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 568.049669][ T298] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 568.165811][ T24] audit: type=1400 audit(1756292988.991:1360): avc: denied { connect } for pid=3050 comm="syz.6.785" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.217798][ T24] audit: type=1400 audit(1756292989.021:1361): avc: denied { setopt } for pid=3050 comm="syz.6.785" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff01::1 fport=19489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.302375][ T24] audit: type=1400 audit(1756292989.021:1362): avc: denied { write } for pid=3050 comm="syz.6.785" path="socket:[24486]" dev="sockfs" ino=24486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.367008][ T24] audit: type=1400 audit(1756292989.021:1363): avc: denied { read } for pid=3050 comm="syz.6.785" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff01::1 fport=19489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.427055][ T298] usb 3-1: not running at top speed; connect to a high speed hub [ 568.522369][ T298] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 568.536938][ T298] usb 3-1: config 95 has no interface number 0 [ 568.547778][ T298] usb 3-1: config 95 interface 1 has no altsetting 0 [ 568.612939][ T24] audit: type=1400 audit(1756292989.441:1364): avc: denied { remount } for pid=3032 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 568.634062][ T3057] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 568.804231][ T1474] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 568.855388][ T24] audit: type=1400 audit(1756292989.681:1365): avc: denied { mac_admin } for pid=3059 comm="syz.0.787" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.209828][ T24] audit: type=1400 audit(1756292989.761:1366): avc: denied { setopt } for pid=3050 comm="syz.6.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 569.239612][ T3060] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 569.252052][ T24] audit: type=1400 audit(1756292990.041:1367): avc: denied { relabelto } for pid=3059 comm="syz.0.787" name="file0" dev="tmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 569.297133][ T298] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 569.306570][ T298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.316419][ T298] usb 3-1: Product: syz [ 569.321461][ T298] usb 3-1: Manufacturer: syz [ 569.326109][ T298] usb 3-1: SerialNumber: syz [ 569.750666][ T298] usb 3-1: USB disconnect, device number 9 [ 570.220286][ T3065] device veth1_macvtap left promiscuous mode [ 570.243378][ T3065] device veth1_macvtap entered promiscuous mode [ 570.263164][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 570.278786][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 570.286767][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.301544][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.308690][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.317704][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 570.327817][ T1474] usb 5-1: Using ep0 maxpacket: 32 [ 570.334379][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.349154][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.356675][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.369181][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 570.378805][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 570.388093][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.397655][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 570.406344][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.416168][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.425370][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.434646][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.443714][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.459978][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 570.475437][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.484928][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.494691][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.504665][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.513866][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.523682][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.534359][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 570.543914][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.553851][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 570.562750][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 570.571645][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.580577][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.588303][ T1474] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 570.596518][ T1474] usb 5-1: config 0 has no interface number 0 [ 570.597338][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.603505][ T1474] usb 5-1: config 0 interface 184 has no altsetting 0 [ 570.611222][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.629324][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 570.641926][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 570.657073][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.868128][ T1474] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 570.901092][ T1474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.976218][ T1474] usb 5-1: Product: syz [ 571.010681][ T1474] usb 5-1: Manufacturer: syz [ 571.039265][ T1474] usb 5-1: SerialNumber: syz [ 571.237961][ T1474] usb 5-1: config 0 descriptor?? [ 571.278296][ T1474] smsc75xx v1.0.0 [ 571.343046][ T1474] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 571.404976][ T1474] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 571.496661][ T1474] usb 5-1: USB disconnect, device number 8 [ 571.517473][ T3088] SELinux: failed to load policy [ 572.056396][ T3106] netlink: 'syz.6.802': attribute type 27 has an invalid length. [ 572.236495][ T3106] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.244002][ T3106] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.877559][ T3106] device ip6tnl1 left promiscuous mode [ 575.341539][ T3127] x_tables: duplicate underflow at hook 1 [ 575.348239][ T3128] x_tables: duplicate underflow at hook 1 [ 575.354747][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 575.354777][ T24] audit: type=1400 audit(1756292996.181:1420): avc: denied { accept } for pid=3126 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.182258][ T3143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3143 comm=syz.5.812 [ 577.382353][ T24] audit: type=1326 audit(1756292998.211:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 577.663114][ T3149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3149 comm=syz.0.813 [ 577.694862][ T24] audit: type=1326 audit(1756292998.211:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 577.731545][ T3152] fuse: Bad value for 'group_id' [ 577.741912][ T24] audit: type=1326 audit(1756292998.211:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 577.834452][ T24] audit: type=1326 audit(1756292998.211:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 577.862971][ T24] audit: type=1326 audit(1756292998.211:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 577.931504][ T24] audit: type=1326 audit(1756292998.211:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 578.013217][ T24] audit: type=1326 audit(1756292998.521:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 578.087520][ T24] audit: type=1326 audit(1756292998.521:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 578.161847][ T24] audit: type=1326 audit(1756292998.691:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 579.383655][ T3169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 579.433592][ T3169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 580.491303][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 580.491333][ T24] audit: type=1400 audit(1756293001.321:1436): avc: denied { create } for pid=3176 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 580.839001][ T3188] fuse: Bad value for 'group_id' [ 580.912025][ T3189] netlink: 36 bytes leftover after parsing attributes in process `syz.6.824'. [ 581.696962][ T15] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 583.746203][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 584.507001][ T15] usb 5-1: device descriptor read/all, error -71 [ 584.823597][ T3232] overlayfs: failed to resolve './file0': -2 [ 584.878867][ T24] audit: type=1400 audit(1756293005.711:1437): avc: denied { bind } for pid=3229 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 587.291859][ T3255] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 587.305952][ T24] audit: type=1400 audit(1756293008.141:1438): avc: denied { relabelto } for pid=3254 comm="syz.2.846" name="181" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 587.387007][ T24] audit: type=1400 audit(1756293008.181:1439): avc: denied { associate } for pid=3254 comm="syz.2.846" name="181" dev="tmpfs" ino=984 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 587.507308][ T24] audit: type=1400 audit(1756293008.251:1440): avc: denied { create } for pid=3254 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 587.589770][ T3265] device dummy0 entered promiscuous mode [ 587.618718][ T24] audit: type=1400 audit(1756293008.401:1441): avc: denied { write } for pid=278 comm="syz-executor" name="181" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 587.652410][ T3258] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.847: bad orphan inode 11862016 [ 587.667963][ T24] audit: type=1400 audit(1756293008.401:1442): avc: denied { remove_name } for pid=278 comm="syz-executor" name="binderfs" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 587.780259][ T3258] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,,errors=continue [ 587.807039][ T24] audit: type=1400 audit(1756293008.401:1443): avc: denied { rmdir } for pid=278 comm="syz-executor" name="181" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 588.276298][ T24] audit: type=1400 audit(588.223:1444): avc: denied { append } for pid=3270 comm="syz.5.851" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 588.807458][ T24] audit: type=1400 audit(588.663:1445): avc: denied { mounton } for pid=3257 comm="syz.4.847" path="/164/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 588.919900][ T3281] 9p: Unknown access argument ÿ [ 589.644699][ T24] audit: type=1326 audit(589.613:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3293 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 591.275272][ T24] audit: type=1326 audit(589.613:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3293 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1870d4be9 code=0x7ffc0000 [ 592.774763][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 592.774826][ T24] audit: type=1400 audit(592.743:1474): avc: denied { create } for pid=3310 comm="syz.2.861" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 593.376822][ T3319] udc-core: couldn't find an available UDC or it's busy [ 593.383901][ T3319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 593.401206][ T3323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 593.494119][ T15] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 595.370495][ T298] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 595.380900][ T24] audit: type=1326 audit(595.353:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 596.329844][ T24] audit: type=1326 audit(595.353:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 596.449443][ T24] audit: type=1326 audit(595.353:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 596.493069][ T24] audit: type=1326 audit(595.353:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 596.706560][ T24] audit: type=1326 audit(596.423:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 596.750532][ T24] audit: type=1326 audit(596.423:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f72f3be9 code=0x7ffc0000 [ 597.687095][ T3344] tipc: Enabled bearer , priority 0 [ 597.762405][ T3344] tipc: Resetting bearer [ 597.787038][ T1276] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 597.833908][ T3344] tipc: Disabling bearer [ 597.856924][ T15] usb 5-1: device not accepting address 11, error -71 [ 598.836972][ T298] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 598.954973][ T1276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.966892][ T1276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.976741][ T1276] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 598.986152][ T1276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.007321][ T1276] usb 3-1: config 0 descriptor?? [ 599.122651][ T24] audit: type=1400 audit(599.093:1481): avc: denied { mount } for pid=3364 comm="syz.4.878" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 599.176875][ T298] usb 7-1: Using ep0 maxpacket: 32 [ 599.183079][ T3371] 9pnet: Insufficient options for proto=fd [ 599.297043][ T298] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.317050][ T298] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 599.326392][ T298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.357869][ T298] usb 7-1: config 0 descriptor?? [ 599.505133][ T3377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 599.506887][ T280] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 599.758141][ T1276] hid-led: probe of 0003:1D34:0004.0003 failed with error -71 [ 599.792187][ T1276] usb 3-1: USB disconnect, device number 10 [ 599.886995][ T280] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.902499][ T280] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.991909][ T24] audit: type=1400 audit(599.963:1482): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 600.087005][ T280] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 600.096151][ T280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.116839][ T280] usb 6-1: Product: syz [ 600.121103][ T280] usb 6-1: Manufacturer: syz [ 600.125757][ T280] usb 6-1: SerialNumber: syz [ 600.157709][ T280] usb 6-1: config 0 descriptor?? [ 600.198189][ T280] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 600.228178][ T3381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 600.237951][ T3381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 600.341346][ T24] audit: type=1400 audit(600.313:1483): avc: denied { create } for pid=3383 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 600.737256][ T24] audit: type=1400 audit(600.693:1484): avc: denied { getopt } for pid=3385 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 601.657120][ T298] usbhid 7-1:0.0: can't add hid device: -71 [ 601.674666][ T298] usbhid: probe of 7-1:0.0 failed with error -71 [ 601.776524][ T3398] netem: change failed [ 601.779317][ T298] usb 7-1: USB disconnect, device number 8 [ 602.704582][ T15] usb 6-1: USB disconnect, device number 7 [ 602.851044][ T3404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 602.939797][ T3404] netlink: 31 bytes leftover after parsing attributes in process `syz.2.889'. [ 602.999321][ T3404] netlink: 'syz.2.889': attribute type 3 has an invalid length. [ 603.056536][ T3404] netlink: 'syz.2.889': attribute type 2 has an invalid length. [ 603.064392][ T3404] netlink: 31 bytes leftover after parsing attributes in process `syz.2.889'. [ 603.115994][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 603.140573][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 603.151121][ T24] audit: type=1400 audit(603.123:1485): avc: denied { mount } for pid=3418 comm="syz.6.894" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 603.272521][ T24] audit: type=1400 audit(603.123:1486): avc: denied { mounton } for pid=3418 comm="syz.6.894" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 603.587290][ T280] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 604.020181][ T24] audit: type=1400 audit(603.993:1487): avc: denied { unmount } for pid=1122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 604.075779][ T24] audit: type=1400 audit(604.043:1488): avc: denied { wake_alarm } for pid=3421 comm="syz.2.895" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 604.149671][ T3426] IPv6: NLM_F_REPLACE set, but no existing node found! [ 604.187333][ T280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.235766][ T280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.264550][ T280] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 604.286744][ T280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.479362][ T3428] ================================================================== [ 604.495788][ T3428] BUG: KASAN: use-after-free in __ext4_iget+0x36d/0x40e0 [ 604.502871][ T3428] Read of size 8 at addr ffff88812c565f48 by task syz.4.897/3428 [ 604.510633][ T3428] [ 604.513029][ T3428] CPU: 0 PID: 3428 Comm: syz.4.897 Tainted: G W 5.10.240-syzkaller #0 [ 604.522536][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 604.522546][ T3428] Call Trace: [ 604.522585][ T3428] __dump_stack+0x21/0x24 [ 604.522640][ T3428] dump_stack_lvl+0x169/0x1d8 [ 604.543145][ T280] usb 6-1: config 0 descriptor?? [ 604.545312][ T3428] ? show_regs_print_info+0x18/0x18 [ 604.545364][ T3428] ? thaw_kernel_threads+0x220/0x220 [ 604.560914][ T3428] ? _raw_spin_lock+0x8e/0xe0 [ 604.565669][ T3428] print_address_description+0x7f/0x2c0 [ 604.571287][ T3428] ? __ext4_iget+0x36d/0x40e0 [ 604.576304][ T3428] kasan_report+0xe2/0x130 [ 604.580788][ T3428] ? __ext4_iget+0x36d/0x40e0 [ 604.585543][ T3428] __asan_report_load8_noabort+0x14/0x20 [ 604.591252][ T3428] __ext4_iget+0x36d/0x40e0 [ 604.595831][ T3428] ? idr_replace+0x190/0x190 [ 604.600494][ T3428] ? __kasan_check_write+0x14/0x20 [ 604.605672][ T3428] ? _raw_write_lock+0x8e/0xe0 [ 604.610521][ T3428] ? _raw_write_trylock+0x140/0x140 [ 604.615787][ T3428] ? __proc_create+0x564/0x8d0 [ 604.620709][ T3428] ? __kasan_check_write+0x14/0x20 [ 604.625903][ T3428] ? ext4_get_projid+0x140/0x140 [ 604.630910][ T3428] ? _raw_write_unlock+0x2b/0x60 [ 604.635919][ T3428] ? proc_register+0x34d/0x4e0 [ 604.640759][ T3428] ext4_enable_quotas+0x33b/0x6d0 [ 604.645862][ T3428] ext4_fill_super+0x82a9/0x8b60 [ 604.650900][ T3428] ? ext4_mount+0x40/0x40 [ 604.655296][ T3428] ? set_blocksize+0x1fe/0x3c0 [ 604.660142][ T3428] ? sb_set_blocksize+0xaa/0xf0 [ 604.665075][ T3428] mount_bdev+0x28b/0x3a0 [ 604.669472][ T3428] ? ext4_mount+0x40/0x40 [ 604.673883][ T3428] ext4_mount+0x34/0x40 [ 604.678119][ T3428] legacy_get_tree+0xed/0x190 [ 604.682864][ T3428] ? ext4_chksum+0x160/0x160 [ 604.687517][ T3428] vfs_get_tree+0x89/0x260 [ 604.692172][ T3428] do_new_mount+0x25a/0xa20 [ 604.696754][ T3428] path_mount+0x572/0xc80 [ 604.701163][ T3428] __se_sys_mount+0x318/0x380 [ 604.705956][ T3428] ? __x64_sys_mount+0xd0/0xd0 [ 604.710794][ T3428] ? debug_smp_processor_id+0x17/0x20 [ 604.716248][ T3428] __x64_sys_mount+0xbf/0xd0 [ 604.720922][ T3428] do_syscall_64+0x31/0x40 [ 604.725411][ T3428] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 604.731364][ T3428] RIP: 0033:0x7f191456c38a [ 604.735853][ T3428] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.755644][ T3428] RSP: 002b:00007f1912fd2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 604.764267][ T3428] RAX: ffffffffffffffda RBX: 00007f1912fd2ef0 RCX: 00007f191456c38a [ 604.772351][ T3428] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 00007f1912fd2eb0 [ 604.780387][ T3428] RBP: 0000200000000000 R08: 00007f1912fd2ef0 R09: 0000000000000000 [ 604.788417][ T3428] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 604.796454][ T3428] R13: 00007f1912fd2eb0 R14: 00000000000004fd R15: 00002000000002c0 [ 604.804573][ T3428] [ 604.806963][ T3428] Allocated by task 1171: [ 604.811356][ T3428] __kasan_slab_alloc+0xbd/0xf0 [ 604.816275][ T3428] slab_post_alloc_hook+0x5d/0x2f0 [ 604.821460][ T3428] kmem_cache_alloc+0x165/0x2e0 [ 604.826378][ T3428] f2fs_alloc_inode+0x26/0x410 [ 604.831311][ T3428] iget_locked+0x146/0x7d0 [ 604.835801][ T3428] f2fs_iget+0x55/0x4dc0 [ 604.840128][ T3428] f2fs_fill_super+0x39f0/0x6c70 [ 604.845225][ T3428] mount_bdev+0x28b/0x3a0 [ 604.849629][ T3428] f2fs_mount+0x34/0x40 [ 604.853844][ T3428] legacy_get_tree+0xed/0x190 [ 604.858599][ T3428] vfs_get_tree+0x89/0x260 [ 604.863111][ T3428] do_new_mount+0x25a/0xa20 [ 604.867688][ T3428] path_mount+0x572/0xc80 [ 604.872098][ T3428] __se_sys_mount+0x318/0x380 [ 604.876846][ T3428] __x64_sys_mount+0xbf/0xd0 [ 604.881841][ T3428] do_syscall_64+0x31/0x40 [ 604.886331][ T3428] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 604.892264][ T3428] [ 604.894645][ T3428] Last potentially related work creation: [ 604.900437][ T3428] kasan_save_stack+0x3a/0x60 [ 604.905289][ T3428] __kasan_record_aux_stack+0xd2/0x100 [ 604.910944][ T3428] kasan_record_aux_stack_noalloc+0xb/0x10 [ 604.916814][ T3428] call_rcu+0x10e/0x1050 [ 604.921132][ T3428] evict+0x857/0x910 [ 604.925100][ T3428] iput+0x638/0x7c0 [ 604.928981][ T3428] f2fs_fill_super+0x5453/0x6c70 [ 604.933992][ T3428] mount_bdev+0x28b/0x3a0 [ 604.938403][ T3428] f2fs_mount+0x34/0x40 [ 604.942623][ T3428] legacy_get_tree+0xed/0x190 [ 604.947368][ T3428] vfs_get_tree+0x89/0x260 [ 604.951856][ T3428] do_new_mount+0x25a/0xa20 [ 604.956429][ T3428] path_mount+0x572/0xc80 [ 604.960835][ T3428] __se_sys_mount+0x318/0x380 [ 604.965663][ T3428] __x64_sys_mount+0xbf/0xd0 [ 604.970330][ T3428] do_syscall_64+0x31/0x40 [ 604.974823][ T3428] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 604.980744][ T3428] [ 604.983134][ T3428] The buggy address belongs to the object at ffff88812c565a20 [ 604.983134][ T3428] which belongs to the cache f2fs_inode_cache of size 1520 [ 604.997781][ T3428] The buggy address is located 1320 bytes inside of [ 604.997781][ T3428] 1520-byte region [ffff88812c565a20, ffff88812c566010) [ 605.011272][ T3428] The buggy address belongs to the page: [ 605.017012][ T3428] page:ffffea0004b15800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812c5619c0 pfn:0x12c560 [ 605.028810][ T3428] head:ffffea0004b15800 order:3 compound_mapcount:0 compound_pincount:0 [ 605.037306][ T3428] flags: 0x4000000000010200(slab|head) [ 605.042877][ T3428] raw: 4000000000010200 dead000000000100 dead000000000122 ffff8881029fd380 [ 605.051656][ T3428] raw: ffff88812c5619c0 000000008013000b 00000001ffffffff 0000000000000000 [ 605.060297][ T3428] page dumped because: kasan: bad access detected [ 605.066753][ T3428] page_owner tracks the page as allocated [ 605.072592][ T3428] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 583, ts 356882096910, free_ts 345372521197 [ 605.094267][ T3428] prep_new_page+0x179/0x180 [ 605.098918][ T3428] get_page_from_freelist+0x2235/0x23d0 [ 605.104536][ T3428] __alloc_pages_nodemask+0x268/0x5f0 [ 605.109975][ T3428] new_slab+0x84/0x3f0 [ 605.114143][ T3428] ___slab_alloc+0x2a6/0x450 [ 605.118794][ T3428] __slab_alloc+0x63/0xa0 [ 605.123274][ T3428] kmem_cache_alloc+0x1af/0x2e0 [ 605.128186][ T3428] f2fs_alloc_inode+0x26/0x410 [ 605.133011][ T3428] iget_locked+0x146/0x7d0 [ 605.137484][ T3428] f2fs_iget+0x55/0x4dc0 [ 605.141788][ T3428] f2fs_fill_super+0x39f0/0x6c70 [ 605.146802][ T3428] mount_bdev+0x28b/0x3a0 [ 605.151207][ T3428] f2fs_mount+0x34/0x40 [ 605.155433][ T3428] legacy_get_tree+0xed/0x190 [ 605.160173][ T3428] vfs_get_tree+0x89/0x260 [ 605.164647][ T3428] do_new_mount+0x25a/0xa20 [ 605.169205][ T3428] page last free stack trace: [ 605.173952][ T3428] free_unref_page_prepare+0x2b7/0x2d0 [ 605.179547][ T3428] free_unref_page_list+0x12e/0x9b0 [ 605.184983][ T3428] release_pages+0xe38/0xe80 [ 605.189645][ T3428] __pagevec_release+0x71/0xe0 [ 605.194473][ T3428] shmem_undo_range+0x6e1/0x1760 [ 605.199594][ T3428] shmem_evict_inode+0x1fd/0x9c0 [ 605.204599][ T3428] evict+0x478/0x910 [ 605.208549][ T3428] iput+0x638/0x7c0 [ 605.212424][ T3428] dentry_unlink_inode+0x2cf/0x380 [ 605.217591][ T3428] __dentry_kill+0x44f/0x650 [ 605.222248][ T3428] dentry_kill+0xc0/0x2a0 [ 605.226640][ T3428] dput+0x42/0x80 [ 605.230328][ T3428] __fput+0x4fe/0x770 [ 605.234489][ T3428] ____fput+0x15/0x20 [ 605.238617][ T3428] task_work_run+0x127/0x190 [ 605.243270][ T3428] do_exit+0xa4f/0x2480 [ 605.247466][ T3428] [ 605.249835][ T3428] Memory state around the buggy address: [ 605.255610][ T3428] ffff88812c565e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.263934][ T3428] ffff88812c565e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.272071][ T3428] >ffff88812c565f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.280185][ T3428] ^ [ 605.287046][ T3428] ffff88812c565f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.295294][ T3428] ffff88812c566000: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 605.303936][ T3428] ================================================================== [ 605.312045][ T3428] Disabling lock debugging due to kernel taint [ 605.365808][ T24] audit: type=1400 audit(606.334:1489): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 605.387325][ T3428] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 605.412661][ T3428] EXT4-fs (loop4): mount failed [ 605.421354][ T24] audit: type=1400 audit(606.364:1490): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.705990][ T24] audit: type=1400 audit(606.364:1491): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.750493][ T24] audit: type=1400 audit(606.364:1492): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.793382][ T24] audit: type=1400 audit(606.364:1493): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 605.834722][ T24] audit: type=1400 audit(606.364:1494): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 605.883030][ T24] audit: type=1400 audit(606.364:1495): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 606.265578][ T280] hid-led: probe of 0003:1D34:0004.0004 failed with error -71 [ 606.281642][ T280] usb 6-1: USB disconnect, device number 8