last executing test programs: 18m58.609965107s ago: executing program 32 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$unix(0x1, 0x5, 0x0) getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40080c5}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x4004}, 0x48084) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x20048810) recvmmsg(r7, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000010280)=""/4081, 0xff1}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000d40)=""/253, 0xfd}, {&(0x7f0000000e40)=""/80, 0x50}], 0x4}, 0x5}], 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) 16m57.273566527s ago: executing program 33 (id=488): socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 16m46.539666779s ago: executing program 34 (id=518): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") getpid() r0 = syz_open_dev$loop(0x0, 0xff, 0x2) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 16m1.112210575s ago: executing program 35 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x200}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x0, 0x2}, {{@in6=@local, 0x4d4, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342c}]}]}, 0x17c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0xfffffffe, 0x4) sendto$inet(r2, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10100, 0x0) r3 = io_uring_setup(0x117d, &(0x7f00000003c0)={0x0, 0x190a, 0x8000, 0x2, 0x5}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000003880)=[{0x1, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002680)=""/4096, 0x1000}], &(0x7f00000036c0)=[0x9, 0x40, 0x4, 0x0]}, {0x1, 0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003700)=""/212, 0xd4}], &(0x7f0000003840)=[0x4, 0x9, 0xfffffffffffffff7]}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, &(0x7f0000000300)={0x0, 0x24, 0x1c, {0x1c, 0x11, "98e7c6dde4263d3db71c093cce367bb457fe88370a0c28a5d8ca"}}, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x4, 0xa58, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$inet6(r5, &(0x7f0000000340)="5a5a807af6fbc2a7cf88aab41d00f3813cb2d712e91511c67b88dbc31494fe3be9c81e5dd78c58e72a5ff4eaba396bb5cec4c14f36df4663575f926fd15ded860e0fd2705cceeb52e2a3e30d69e89c105a8f95635d64d7e8e7ac642dce4261d47af4f165326ac2ad7d9b42f98d30", 0x6e, 0x800, 0x0, 0x0) memfd_create(&(0x7f0000000080)='GPL\x00', 0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) 13m38.520658637s ago: executing program 36 (id=1033): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@abort}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpjquota}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x40, 0x571, &(0x7f0000000500)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val, @tail_call, @printk={@d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d610002202000000030109021200"], 0x0) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x104) pwrite64(r9, 0x0, 0x0, 0x200980) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80), 0x0, 0x23, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a80), &(0x7f0000000b40), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESOCT=r3, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r11}, 0x10) pipe2$9p(&(0x7f0000000180), 0x0) 12m52.034906399s ago: executing program 37 (id=1218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x1e, 0x80004, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r3 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r3) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c041}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x1000, 0x2f, &(0x7f00000015c0)="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", &(0x7f0000000440)=""/47, 0x9, 0x0, 0xba, 0x30, &(0x7f0000000540)="5dd93420fca5f6b2f2c453692dce28748e4aa2f253505a2c30e399809351ed5e8a4238518b5187079af4685552a405fe4bf89cf7a5e05c5be9bcbcb715e9692e5e6f72205899a52bedee314f16d77f722853eb7370e1e065c669740f9fc8a61d050bd031b75fda9c2dcf676512156d3b3fe97e775880d862fecafff518cbf2691b4a7890382d0735f87db57dad9b76d6e11ad166a8be047969bc729600e87b004d513ea120a7630a6f629c8359f4ba84475314981d108bf59801", &(0x7f0000000480)="4075ceb253734c047bd77632257e1fc76932ee6648e5fabbb6ec4a2e8dfa8b936129ed294d6c9f8b629c746036f2d827", 0xf}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 12m34.968373376s ago: executing program 38 (id=1284): r0 = fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = gettid() lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'os2.', '\\]\\\x00'}, &(0x7f0000000180)=""/237, 0xed) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) 11m55.889909467s ago: executing program 39 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="8fbabae063b30ae08873445d552994ae156a0debee1f65211e8a404933122aefacbee55818fd4bb9770fe0ed5f762bcf16", 0x31}], 0x1}, 0x20048014) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x2, 0x7, 0x0, 0x401, 0xe0, 0x1, 0xdc, 0x8, 0x0, 0x82, 0x6, 0x0, 0x730c, 0x2, 0x6f, 0x1, 0x4f, 0x3, '\x00', 0x8, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="8fbabae063b30ae08873445d552994ae156a0debee1f65211e8a404933122aefacbee55818fd4bb9770fe0ed5f762bcf16", 0x31}], 0x1}, 0x20048014) (async) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x2, 0x7, 0x0, 0x401, 0xe0, 0x1, 0xdc, 0x8, 0x0, 0x82, 0x6, 0x0, 0x730c, 0x2, 0x6f, 0x1, 0x4f, 0x3, '\x00', 0x8, 0x1}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) 11m53.194517537s ago: executing program 40 (id=1453): r0 = syz_io_uring_setup(0x1eb2, &(0x7f0000000200)={0x0, 0x100000, 0x3800}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = eventfd2(0x3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r2, 0x1) io_uring_enter(r0, 0x1816, 0x0, 0xb, 0x0, 0x0) syz_io_uring_complete(r1) 11m43.567914433s ago: executing program 41 (id=1496): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 11m34.622356727s ago: executing program 42 (id=1543): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000080)='./file1\x00', 0x1000801, &(0x7f0000002680)=ANY=[], 0x1, 0x203, &(0x7f0000000580)="$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") 10m32.732972262s ago: executing program 43 (id=1804): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 10m26.600714114s ago: executing program 44 (id=1825): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffefd}, 0x1c) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) write$bt_hci(r1, &(0x7f0000000540)={0x1, @create_phy_link={{0x435, 0x3}, {0xc9, 0x9, 0x7}}}, 0x7) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="000000000000fdff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='d=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_clone(0x40001100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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"/306], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m11.65668973s ago: executing program 45 (id=1882): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3e, 0x0, 0x3, 0x40, 0x198, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x0, 0x7fffffffffffffff, 0x20000, 0x4000000007, 0x4, 0x0, 0xfffffffffffffffe}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f00000003c0)={[{@nombcache}, {@nobarrier}, {@nodiscard}, {@orlov}, {@dioread_nolock}, {@lazytime}, {@noload}, {@nobh}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) chdir(&(0x7f0000001180)='./bus\x00') statfs(&(0x7f0000000200)='.\x00', 0x0) 9m40.794167596s ago: executing program 46 (id=2029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000002000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0x0, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1, @mcast1, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96}}, 0x1c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) 9m27.556478986s ago: executing program 47 (id=2106): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00431b"], 0x28}}, 0x8000000) 9m2.09027015s ago: executing program 48 (id=2227): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r0 = syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 8m20.246257802s ago: executing program 49 (id=2371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) pwritev2(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f00000006c0)="c99d3625ad3edde422a702e6bcba74ec83d6c05d60795c38639a85f8720ea0859228912cff4f454ff3027704e97abf95708b07f5e259e66e5a0da658976947453302e1977b335b6f667936a75c94012d9b898ad906baa92a0bd076ceca96c3059b71158ebe89fe373963ee9197e013de4c333b57f568d5fd1baaa393c713e6f64fbe5e900b0e435370bbff9f000000000000e28b822c727a9b5ca7646881d6106b35f7be0bf4ca9121956ec49b72", 0xae}, {&(0x7f0000000780)="be56fa60362d5bace0c03f22eadaa174d07b407c3c9f20a7f1009fca1fa237510ad4660a74968e279df1a78fb22c55ad57df8504241aa1740ea6471ccf6746f63009eae4ae868695", 0x48}, {&(0x7f0000000800)="c9cd7d0dac69c7d211901edd718c31725aeef788935cc37b122576aa6b12fe1eb86626a0b1c40cf88080aa717c26ffdf22e6153684d9dcf4933b2a80b7c8ad43150c34ee2ef9042b9df69c2b7cb51726b29f47aa9ab2bf9552b7266a799b57", 0x5f}, {&(0x7f0000000400)="cfed37df36a3d8ec531e34023bfb3b8230f8a425612f6babd8c8e818c2bc66ff415c8ddaadad02a1f0c8", 0xffffffffffffffa7}, {&(0x7f0000000980)="08d5ce31143badbd868c93a78e0d94b6e593128ffc7d8bd524302a123a86eabffac306f1d455462e4d5b9f1af7191c983d942a1707e7bab12ab768b82566d296f3d247b566cb3ca109a18d018c011bc80afb8522db5cbcdb4a53db6ea17ff17b48f8b732e65e13661f661e62d739c78e", 0x70}], 0x5, 0xe7b, 0x8, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x2, 0x7fff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9015070900be0083000000000b09007a150b5d8c3dda"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000003880)={0x14, &(0x7f00000037c0)={0x20, 0x30, 0xab, {0xab, 0x21, "471a45d19e53fc80e389611d611e8a0f28c000113344cfdefe2795cd83c01f29f83f0a5691f98a58bd7021b5bc9eb77964037ac1866ce1529aee433d5b6a9b633b7a3cf8bb9ebcbdd0c2815714d4388fc52b462c48a5053e37c03370ecc46e65bc4af5271fbc5e756b5b000b318a34e92b28bc7d01aafe531725d777218ee80071832b6118e41197034e3221c7558405596cd1d2bb77c7510cbf6e676f7eec641332dc31ca7685ca27"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000003a80)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="003144000000bcc9887900eec0f3de1a1d0b0000000000005992ca617f20ff34bfa1d7cf3d143553ed5487855aa4c024845d114029c1056ed8e8f9ce113dff684b3b6f121124c7b986e73fd32417a4aa77b6393b"], &(0x7f0000003940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003980)={0x0, 0x8, 0x1}, &(0x7f00000039c0)={0x20, 0x0, 0x3a, {0x38, "54ad90478761e8e25966ec1da9c041031b17dbaf9568fdd81ec3e4c58b2b9f39d02c468fe120cb5af23edeef02603701bc3474ced67e3dde"}}, &(0x7f0000003a00)={0x20, 0x1, 0x1}, &(0x7f0000003a40)={0x20, 0x0, 0x1, 0x10}}) 8m6.617161208s ago: executing program 50 (id=2412): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 7m34.860190527s ago: executing program 51 (id=2555): setreuid(0x0, 0x0) clock_gettime(0x2, &(0x7f0000000200)) setreuid(0x0, 0x0) (async) clock_gettime(0x2, &(0x7f0000000200)) (async) 7m33.648877766s ago: executing program 52 (id=2559): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x80, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0xffffffff, 0xe661, 0x8000, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0xffffffff, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xd, 0x312, 0x7a, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x6, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x7, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x10, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x9, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x900003, 0x200, 0x80, 0x3, 0x4, 0x950bfaf, 0x1000, 0x8001, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x3, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10083, 0x5, 0x8, 0x30b1d693, 0x80, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x100]}, 0x45c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000064000d0b7858f067376407eb72507200"], 0x18}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty, 0x20000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000010180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r6}, 0x10) clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000000383a00fe800000000000000000000000000000000000000102009078000007d0608cb02b00002f00fc000000000000000000000000000001fe800000000000f8ffffff00"/110], 0x0) r7 = dup(r5) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d1) 7m21.977378492s ago: executing program 53 (id=2610): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f00000006c0)="c99d3625ad3edde422a702e6bcba74ec83d6c05d60795c38639a85f8720ea0859228912cff4f454ff3027704e97abf95708b07f5e259e66e5a0da658976947453302e1977b335b6f667936a75c94012d9b898ad906baa92a0bd076ceca96c3059b71158ebe89fe373963ee9197e013de4c333b57f568d5fd1baaa393c713e6f64fbe5e900b0e435370bbff9f000000000000e28b822c727a9b5ca7646881d6106b35f7be0bf4ca9121956ec49b72", 0xae}, {&(0x7f0000000780)="be56fa60362d5bace0c03f22eadaa174d07b407c3c9f20a7f1009fca1fa237510ad4660a74968e279df1a78fb22c55ad57df8504241aa1740ea6471ccf6746f63009eae4ae868695", 0x48}, {&(0x7f0000000800)="c9cd7d0dac69c7d211901edd718c31725aeef788935cc37b122576aa6b12fe1eb86626a0b1c40cf88080aa717c26ffdf22e6153684d9dcf4933b2a80b7c8ad43150c34ee2ef9042b9df69c2b7cb51726b29f47aa9ab2bf9552b7266a799b57", 0x5f}, {&(0x7f0000000400)="cfed37df36a3d8ec531e34023bfb3b8230f8a425612f6babd8c8e818c2bc66ff415c8ddaadad02a1f0c8", 0xffffffffffffffa7}, {&(0x7f0000000980)="08d5ce31143badbd868c93a78e0d94b6e593128ffc7d8bd524302a123a86eabffac306f1d455462e4d5b9f1af7191c983d942a1707e7bab12ab768b82566d296f3d247b566cb3ca109a18d018c011bc80afb8522db5cbcdb4a53db6ea17ff17b48f8b732e65e13661f661e62d739c78e", 0x70}], 0x5, 0xe7b, 0x8, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x2, 0x7fff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9015070900be0083000000000b09007a150b5d8c3dda"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000003880)={0x14, &(0x7f00000037c0)={0x20, 0x30, 0xab, {0xab, 0x21, "471a45d19e53fc80e389611d611e8a0f28c000113344cfdefe2795cd83c01f29f83f0a5691f98a58bd7021b5bc9eb77964037ac1866ce1529aee433d5b6a9b633b7a3cf8bb9ebcbdd0c2815714d4388fc52b462c48a5053e37c03370ecc46e65bc4af5271fbc5e756b5b000b318a34e92b28bc7d01aafe531725d777218ee80071832b6118e41197034e3221c7558405596cd1d2bb77c7510cbf6e676f7eec641332dc31ca7685ca27"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000003a80)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="003144000000bcc9887900eec0f3de1a1d0b0000000000005992ca617f20ff34bfa1d7cf3d143553ed5487855aa4c024845d114029c1056ed8e8f9ce113dff684b3b6f121124c7b986e73fd32417a4aa77b6393b"], &(0x7f0000003940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003980)={0x0, 0x8, 0x1}, &(0x7f00000039c0)={0x20, 0x0, 0x3a, {0x38, "54ad90478761e8e25966ec1da9c041031b17dbaf9568fdd81ec3e4c58b2b9f39d02c468fe120cb5af23edeef02603701bc3474ced67e3dde"}}, &(0x7f0000003a00)={0x20, 0x1, 0x1}, &(0x7f0000003a40)={0x20, 0x0, 0x1, 0x10}}) 7m21.847997454s ago: executing program 54 (id=2614): r0 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000700)=[{r3}, {r3, 0x9048}], 0x2, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x121500) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x3) write$char_usb(r2, 0x0, 0x0) 7m10.463834676s ago: executing program 55 (id=2654): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0xfffffffffffffffe) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="009a000000000000001f000100005800009d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r8, 0x80f4, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800ea040000007b8af8ff00000000bfa200000000000007020000f8ff4746b7030000080000b8676a21beb3a9dec9aae5e18c0ab83b374e5545fdbba97d8a8394b5aa444300b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) dup(r3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) munlockall() 6m55.473731102s ago: executing program 56 (id=2734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @mss={0x2, 0xff}, @sack_perm], 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) umount2(&(0x7f0000000780)='./bus\x00', 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 6m51.713498499s ago: executing program 57 (id=2750): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010029bd7000000000000c000000200001801400020073"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="070000eeffffffffffffff002a120000008e99e62408000000c2d066f0a45e33995048df9b69303e58c732ab81672dbd14d6e30546d6ea0ecbf0b71253d73349544d769cfdeb546af558fe15ae546b810752a189a1ab05188ccaca93b3d147838f88be620ed0adcc20ca9406bef1371d2b73"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x10d0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x6, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x10a0, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x4}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xb7b0}, @TCA_FLOW_MASK={0x8, 0x6, 0xfffffffc}, @TCA_FLOW_POLICE={0x106c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x802, 0x0, 0x0, 0x401, 0x7fff, 0x4, 0x1, 0x7fff, 0x80000000, 0x100, 0x1, 0x4, 0x3, 0x9, 0x2, 0x8, 0x9, 0xa, 0xffffffff, 0x3, 0x7fffffff, 0xfe, 0x488, 0x2, 0x4, 0x6d, 0x36d5, 0x4, 0x0, 0x7, 0xffffb3e4, 0x7, 0x3, 0x5, 0x6, 0xfffffff5, 0x3, 0x6, 0xffff0000, 0x5, 0x7fffffff, 0x3, 0x4, 0xfff, 0x1, 0xfc03, 0x7fff, 0x4, 0x1, 0x7, 0x22bdc3e5, 0x42, 0x0, 0x80000001, 0x0, 0xe243, 0x2, 0xd, 0x7fffffff, 0x6, 0xfffffffd, 0x2, 0x0, 0x52, 0x5, 0xffffffff, 0x6d, 0xffff83b3, 0x9, 0x200, 0x4, 0x5, 0x6, 0x3, 0x100, 0x4, 0x5, 0x5, 0x8, 0x7, 0x78, 0x81e, 0x1, 0xfffffbff, 0x3, 0x6f04, 0x5, 0xffffffc0, 0xb, 0x2, 0x1, 0xa8a, 0x200, 0x78e, 0x5, 0x8, 0x0, 0x6, 0x9, 0x7, 0xb, 0x6, 0x4b4eb5ab, 0x3, 0x0, 0x9, 0x8, 0x5, 0x7f, 0x128221cd, 0x2, 0x5, 0x8, 0xffffff46, 0x7, 0x4, 0x6, 0x5, 0xc, 0x80000001, 0x116, 0x7fff, 0xa, 0x0, 0x1e3, 0x40, 0x1, 0x5, 0x0, 0x3, 0xff, 0x7, 0x4, 0x9, 0xdca6, 0x7, 0x7044, 0xb, 0x3, 0x3, 0x7, 0x5, 0x87, 0x1400, 0x800000, 0x2, 0x6, 0x101, 0x7, 0xa2b, 0x2, 0x9, 0x1, 0x1, 0x8, 0x8, 0x7, 0x10000, 0x70, 0xfffffff8, 0x46, 0x2, 0x5, 0x2b0, 0x1, 0x4, 0xe472, 0x3, 0xb, 0x0, 0x80000001, 0x9, 0x8, 0x2, 0x1, 0x2, 0xa, 0x7ff, 0xc, 0xc, 0x3ff, 0x0, 0xffffff4d, 0xfffffffb, 0x85, 0x1, 0x80, 0xf, 0xffffffff, 0x4, 0x6, 0x2, 0x9, 0x5, 0x6, 0x6, 0x10, 0x0, 0xb, 0xa, 0x7, 0x1, 0x1, 0x0, 0xe6, 0x9, 0x7, 0x4872, 0x0, 0x60eb, 0x1, 0x800000, 0x10001, 0x7fff, 0x8, 0x80000000, 0x0, 0x9, 0x0, 0x80000001, 0x5, 0x8, 0x4, 0xc, 0xffff, 0x4, 0x2, 0x5, 0x8000, 0x1ff, 0x5e, 0x100, 0x2, 0x3, 0x38000, 0x3, 0x5, 0x5f, 0xfdd6, 0x8, 0x7, 0x9613, 0x3, 0x10, 0x9, 0x3, 0x0, 0x1, 0x8, 0x6, 0x6, 0x9, 0xffffffff, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0x2, 0x8ff, 0x6, 0x7, 0x9, 0x6, 0x14b3, 0x24200000, 0x5, 0x3, 0x3, 0x5, 0x10001, 0xf, 0xa, 0x0, 0x3ff, 0xfd3d, 0x1, 0xd, 0x4, 0x5, 0x2, 0x4, 0x1, 0x3, 0x0, 0xfffffff8, 0x1, 0x8, 0x90, 0x9, 0x52de8388, 0x2, 0x10000, 0x9, 0x7fffffff, 0x8, 0xfffffffd, 0x8, 0x8, 0xffff8001, 0x0, 0x80000000, 0xfffffffc, 0x3, 0x7fff, 0x4, 0x9000, 0x3, 0x2, 0x9, 0x80000000, 0x3, 0x80, 0x99, 0x7, 0x4, 0x40, 0x10d6, 0x446, 0x2, 0xfffff78c, 0x7, 0x2, 0x3, 0x5, 0xff, 0x400, 0xa0, 0x2, 0x2, 0x3, 0x7, 0x5, 0x8, 0x3, 0x2, 0x0, 0x7f, 0xac, 0x6, 0x8, 0xa60, 0x7, 0x23a1, 0x0, 0x0, 0x4, 0x7ff, 0x3, 0x6, 0x0, 0x400, 0x9, 0xb, 0xffff, 0x4, 0x0, 0x1, 0x3, 0x3, 0x8, 0x5a0f, 0x7, 0x4, 0x6, 0x4, 0x2, 0x7, 0x2, 0x7, 0x200, 0x5, 0x6, 0x2, 0x6337, 0x3, 0x89, 0x80000001, 0x4, 0x86b3, 0x8000, 0xb79a, 0x5, 0x4, 0xa, 0x7, 0x4, 0x267, 0x481d, 0x7, 0x80000000, 0x6, 0x8, 0x7, 0xff, 0x200, 0x4, 0x9, 0x2, 0x3a, 0x5, 0x7, 0x400, 0x5, 0x7, 0x1, 0x59b, 0x0, 0x8, 0x14, 0x9, 0x0, 0x3, 0x2, 0x98b, 0x3ff, 0x7, 0x7f, 0x1fc00, 0x1, 0x3, 0x5, 0x9, 0x0, 0x3, 0x400, 0x1, 0x92a, 0x5e3c, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x2, 0x7fff, 0x3, 0x7, 0x1, 0x9, 0x7, 0x7, 0x0, 0xffffffff, 0xfffffffb, 0x0, 0x4, 0x8, 0x5ad3, 0x5, 0x9, 0x7f, 0x7, 0x4, 0x5, 0x7, 0x0, 0xffff0001, 0x7, 0x1, 0x2, 0x7ff, 0x10001, 0xe, 0x6, 0xfffffffd, 0x4, 0x7ff, 0x3fe00, 0x2, 0x6, 0x80000000, 0x6, 0x200, 0x0, 0xc, 0x80000000, 0x0, 0x126, 0x8, 0xced, 0x2, 0x8000, 0x3, 0x6, 0x8000, 0x0, 0x2, 0x400, 0x8, 0x38000, 0x0, 0x9, 0xa, 0x1c, 0x6, 0x4, 0x5, 0x400, 0x9, 0x834, 0xf2f, 0xc, 0xb, 0x3, 0x880, 0x9, 0x2, 0x200, 0x1ff, 0x1d4, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x3, 0x1, 0x7, 0x4, 0x0, 0x1ff, 0x9, 0x3, 0x7, 0x4, 0xd, 0x5, 0xe381, 0x8, 0xb, 0x167, 0x3, 0x2dd, 0x7, 0x101, 0x47a9, 0x8000, 0x4, 0x0, 0xc9, 0x2b0, 0x212, 0x7fffffff, 0x3dd2, 0x7, 0xfffffffe, 0x7, 0x1000, 0x2, 0x7, 0x401, 0xa3ed, 0x0, 0xd4, 0x6, 0xd, 0x5, 0xa, 0x401, 0x7, 0x7fffffff, 0x7fffffff, 0x4, 0x8, 0x0, 0x6, 0x1, 0x5, 0x7, 0xf1, 0xfffffff8, 0x642df501, 0x4, 0x80000001, 0x4e29, 0x10000, 0x1, 0x7, 0x0, 0x7, 0x53df2a7e, 0x1, 0x0, 0x0, 0x6, 0x9, 0xfd, 0x1, 0x80000000, 0x2, 0xfffffffa, 0x2, 0x83, 0xffff, 0x3, 0x8, 0xe, 0x4, 0x9, 0x5, 0x7, 0x2, 0x6, 0x558, 0x9, 0xffffff10, 0x401, 0xe, 0x3, 0x3, 0x8, 0x400, 0xce5, 0xdcd, 0x6, 0x3, 0x15f2, 0x5, 0x100, 0x1000, 0xd3a, 0x0, 0x1, 0x70, 0x80000001, 0x2fb2e262, 0x8, 0x4, 0xa97, 0xd0, 0x9, 0xdd2b, 0x0, 0x7, 0x7, 0x10001, 0x698, 0x1, 0xfffffff8, 0x8000, 0x3, 0x7, 0x8, 0x54d, 0xffffffff, 0x8, 0x8, 0x0, 0x8, 0x9, 0x0, 0x3, 0xff, 0x2, 0x9, 0x0, 0xde9, 0x6c, 0xfff, 0x6e5, 0x7, 0x7, 0x7, 0x800, 0x800, 0x6, 0x9, 0x10, 0x2, 0x7fffffff, 0x40, 0x8, 0x3, 0x812, 0xfffffff5, 0x3, 0x2, 0x0, 0x5, 0x8, 0x5, 0x81, 0xa1, 0x80, 0x3ff, 0x7, 0x3, 0xd, 0x4, 0x1, 0xbd, 0x3, 0x1, 0x1, 0x7, 0x7, 0x5, 0x0, 0xf, 0x10000, 0x2, 0x0, 0x1, 0xfffff662, 0xf, 0x1, 0x3, 0x7, 0x3, 0x4, 0x4, 0x14b, 0xf, 0x1, 0x8, 0xef1, 0x2, 0x7fff, 0x7, 0x5, 0x1, 0x2, 0x8000, 0x101, 0x1, 0x627, 0x1, 0x7, 0x2, 0xb43, 0x2, 0x1, 0xffffffc0, 0xffffffff, 0x246e, 0x2, 0x1, 0x1, 0x8, 0x5, 0x10001, 0x100, 0x8, 0x9f45, 0x2, 0x50, 0x401, 0x8, 0xfffffffe, 0x6, 0x0, 0x7, 0xffff64b0, 0x5, 0x80, 0x81, 0x8, 0x200, 0x5, 0x101, 0xb, 0x20000000, 0x6, 0x7fff, 0x0, 0x7ff, 0x6, 0x6, 0xa48, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xffff7593, 0x2, 0x3, 0x3ff, 0x6, 0xffff, 0x5, 0xffffa851, 0x8, 0x443d, 0x7, 0x10, 0x4, 0xf, 0x1, 0x1, 0x4, 0x7, 0xe14, 0x3, 0x401, 0x6, 0x3, 0x1, 0x1000, 0x40, 0x7, 0xb87b, 0x2, 0xa, 0xe3200, 0x3, 0x7, 0x7fffffff, 0x7, 0x1ff, 0x1, 0xc593, 0x0, 0x2, 0x7, 0x75, 0x0, 0x5, 0x5, 0xfff, 0x8001, 0x5, 0x47dd, 0x5, 0x3, 0xc1, 0x1, 0x6, 0x4, 0x1, 0x3, 0x2, 0x5, 0x3, 0x2, 0x401, 0x5, 0x6, 0x4, 0x6, 0x6, 0x6, 0x9, 0xb, 0x682, 0xb1, 0x0, 0x7685, 0xfffffffd, 0x4, 0x4, 0x80000001, 0xfffffffa, 0x8d, 0x9, 0x5, 0x5, 0x7, 0x1, 0x100, 0x0, 0x7, 0x4, 0x2, 0x0, 0x1, 0x7, 0x4, 0x9, 0x2, 0xa9, 0xe, 0x9, 0x100, 0x2, 0x3, 0x7, 0x81, 0x0, 0xb, 0x8, 0x5e, 0x8000, 0x9, 0x2, 0x0, 0x3f, 0x8, 0x101, 0x3, 0x1, 0x0, 0x3, 0x6, 0x0, 0x1, 0x9, 0xfffffff7, 0x8, 0xb3, 0x7320, 0x101, 0x5, 0x80000000, 0xe4, 0x9, 0xffff, 0x40, 0xffffff7d, 0x4, 0x2, 0x0, 0x0, 0x800, 0xb6c, 0xef2, 0xd4f, 0x1, 0x81, 0x3, 0x7, 0x5, 0x6, 0x6, 0x8000, 0xfffffffb, 0x1000, 0x9, 0x6, 0x1c0, 0x2, 0x8000, 0x18000, 0x7, 0x3, 0x7, 0x0, 0x48c, 0x7, 0x3, 0x8, 0x5, 0x80000001, 0x400, 0x8, 0x2, 0x0, 0x0, 0x7, 0x5, 0x1, 0x1, 0xfffffffd, 0x2, 0x0, 0x8, 0x4, 0x7, 0x40, 0x1000, 0x0, 0x6, 0x988, 0x9, 0x800, 0x3, 0xff, 0x9, 0x8, 0x7f, 0x1, 0x7, 0x6, 0x2, 0x7, 0x33, 0x2, 0x3ff, 0x7, 0x58, 0x9, 0xffffffff, 0x7f, 0x101, 0xf9d, 0x2, 0x2, 0x3, 0xb7f5, 0x7fff, 0x5, 0xfffff801, 0x5, 0x3, 0xa, 0x2c, 0x8, 0x4, 0x4, 0x5, 0x6, 0x7, 0xd, 0x10, 0x401, 0x7, 0xfffffff3, 0x2, 0x1, 0x27, 0x135f, 0xb, 0x1000, 0x97d, 0x8, 0x4, 0x3, 0x10000, 0x98000000, 0x1ff, 0x800, 0x0, 0xfffffd5c, 0x69a, 0x2023, 0x9, 0x3, 0x9, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x2, 0xe5f, 0x8, {0x80, 0x1, 0x81, 0x8, 0x10, 0x4}, {0x1, 0x2, 0x1c58, 0xff4f, 0x6, 0x2b}, 0x80, 0x800, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff81}]}]}}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) close(0xffffffffffffffff) r8 = socket(0x10, 0x800, 0xfffffffd) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000300)={0x80}) 6m43.73634398s ago: executing program 58 (id=2797): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080045100070008001010000000000000001ac1414aa030490781206183f250000000067fff500890000ac1e2101e00000020144241251ffffffff0000000500000061c5ffffffff00000004070fdaac141412ac141433"], 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m39.329048826s ago: executing program 59 (id=2828): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 6) 5m38.80467556s ago: executing program 60 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @mss={0x2, 0xff}, @sack_perm], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) umount2(&(0x7f0000000780)='./bus\x00', 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5m34.80091885s ago: executing program 61 (id=3109): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[], 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r6], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYRES16=r7], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b0, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6032}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x101, @mcast1, 0x28}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private0, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8080}, 0x2402c804) connect$bt_rfcomm(r5, &(0x7f0000001280)={0x1f, @none, 0x8}, 0xa) 4m30.596511419s ago: executing program 62 (id=3417): sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m18.329998495s ago: executing program 63 (id=3475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000280)="b14cb0491f73ac3b862838295c5b1a8eb4397dad13eeede842a0f5cac5162313660dad6445d34e9db4b42cfb4b0e5fe5bcc0ddbf3b77d205a6bcb9536eb2bb8cc63aea013cc240786a80aa390f63933a712f1058528881e90b17d2339d2e98b0596d5ad6a2164a18496a4a394fbe6814ac59405fb2f2667eb0126703aaa30cbcfdcb8bdb3868889367866c379e216d906d30c0b1199062ef4adec4cd4536f318335ed3dee6e509fbee2ee80c9f0fca7953f36864599c36083b0051520791bfda10e95914d14eea35ce7df73cdf5f35f5b2575fb6d9ee63cc2884559aaf2178ad09c65629199dd7c8d77f5a9c656cad14360d5406d7c165", &(0x7f0000000380)="dde7e45a30d10820313ae5cecf78abecbc3d651fc19e89cbdce461a5f1890061e3fa4ab2204b3f6ceeaa91d15412263c1af5439f96f7977414353f9cca05369fda495b21003549f5"}}, &(0x7f0000000200)) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m46.540075845s ago: executing program 7 (id=3611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564bf02f13acaf"]) 3m46.410748746s ago: executing program 64 (id=3611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564bf02f13acaf"]) 3m39.758114077s ago: executing program 5 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffff}, 0x38) 3m35.494113821s ago: executing program 5 (id=3640): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace(0x8, r7) 3m34.100447082s ago: executing program 5 (id=3642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m33.816927237s ago: executing program 5 (id=3645): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc8d4cb3927ebe405e97559a6a544452a6b87a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 3m32.366699918s ago: executing program 5 (id=3652): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 3m31.885130186s ago: executing program 5 (id=3657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x185000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095d230f1681c209363f105a178120d6481a3643b"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x10, 0x2, 0x0, 0x56, 0x101, 0x0}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 3m31.802094677s ago: executing program 65 (id=3657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x185000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095d230f1681c209363f105a178120d6481a3643b"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x10, 0x2, 0x0, 0x56, 0x101, 0x0}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2m24.740148529s ago: executing program 2 (id=3923): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") ptrace$setsig(0x4203, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x1014}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 2m22.440058025s ago: executing program 2 (id=3931): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2400) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='ro']) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r1) 2m21.894987582s ago: executing program 2 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) 2m20.05807183s ago: executing program 2 (id=3936): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc8d4cb3927ebe405e97559a6a544452a6b87a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000100)='./control\x00') r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 2m19.697176566s ago: executing program 2 (id=3937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x100, 0x1c8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x9000000, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@statistic={{0x38}, {0x2, 0x0, 0xe5, 0xcde, 0x8001, {0xfffffffffffffff7}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x2, 0x0, 0x2}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x120, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 2m19.679147466s ago: executing program 2 (id=3941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=0xffffffffffffffff], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x3, 0x10e, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_usb_connect(0x3, 0x10e, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0) (async) 2m19.623579637s ago: executing program 66 (id=3941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=0xffffffffffffffff], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x3, 0x10e, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_usb_connect(0x3, 0x10e, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0) (async) 1m41.217666987s ago: executing program 8 (id=4069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="060000000000000002004e25e0000002"], 0x90) 1m39.927409736s ago: executing program 8 (id=4075): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, r8, 0x301, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "78e3e6988269df57a21a4018aefeb197565642a4bec659"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2f6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "64afacd399610f8d5cc21fdffb12800342019dfe2b10d91e2e0496"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6c38a9f5}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9dae}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x99fb}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1m38.835740863s ago: executing program 8 (id=4081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.672267775s ago: executing program 8 (id=4082): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 1m37.193015278s ago: executing program 8 (id=4087): socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000fff000/0x1000)=nil, 0x40000000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16) syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402"], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="290101812acfe161959db697d7dc3ff89cfb8c629079243c299ed961748c2d29bdc303bdeedf558c97836a36a0f19b5ac4ab281a35fc3aacfeb6a1625c3e2125c45aebd22bbfe52856cfe88ddbf4232440fc00579969d7ab4007b4b4ccd0df2806406eb40bbc6c2109da8e4ab7d581137d7b4ed4602aad53a3d23de210a2189aa3736fc89e22cb486035d60f0d95fce03f4a788d191e7118a0ae065daf2cad564b96e34e5ee08ce7", &(0x7f0000000000)=""/47, &(0x7f0000000240)="4d95c899d1f0d30c73c79d58639fd7bb196c81670c72c4e38da47d78fb6a6272177711f3b91ee5f68059738dee9ea87da898b0cfc8248d685e7b27233c8a225e096acbd9c14e8132835e3562f4b486eba96e823b89b250d33949ced6c1f7511aaf98ac3637ef976e4d937d7041b91b43b84f7c55ba9e8e71cbb1efc0e969195ab3ea43dbb6022aa2497adba785191c656cae3f4fa2fac1ba5360f44fc31fb90523773357c602", &(0x7f0000000040)="63d4", 0x8, r7}, 0x38) 1m37.089451719s ago: executing program 8 (id=4090): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0xf000000, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m37.00636917s ago: executing program 67 (id=4090): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0xf000000, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 59.92245854s ago: executing program 9 (id=4252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="060000000000000002004e25e0000002"], 0x90) 58.957259104s ago: executing program 9 (id=4260): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7a}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x44}}, 0x200000000000000) 58.872297836s ago: executing program 9 (id=4261): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17", @ANYBLOB], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4}) creat(&(0x7f0000000040)='./bus\x00', 0x40) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) 57.92745542s ago: executing program 9 (id=4267): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc8d4cb3927ebe"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 56.571458851s ago: executing program 9 (id=4271): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008000000010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) 56.150769537s ago: executing program 68 (id=4274): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008000000010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) 15.531248959s ago: executing program 4 (id=4454): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210004, &(0x7f0000000080)={[{@auto_da_alloc_val}]}, 0x1, 0x501, &(0x7f0000000140)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r6}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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") recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000"], 0x18, 0x40000}}], 0x1, 0x4004080) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.421278075s ago: executing program 4 (id=4462): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x6, 0x14fe, &(0x7f0000002180)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf250100000000000000014100000018001700"], 0x34}, 0x1, 0x0, 0x0, 0x44011}, 0x40) truncate(&(0x7f0000000000)='./file1\x00', 0x5e02) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13.696978786s ago: executing program 3 (id=4467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000010002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.42451398s ago: executing program 4 (id=4470): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0x0, 0x100, 0x1c8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x100000000000000}, [@common=@unspec=@statistic={{0x38}, {0x2, 0x0, 0xe5, 0xcde, 0x8001, {0xfffffffffffffff7}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x2, 0x0, 0x2}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x4, 0x4, 0x6, 0x2, 0x7, 0x2], 0x3}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.701632251s ago: executing program 3 (id=4474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @empty, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x7ff, 0x7}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000008d"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27, 0x0, 0x0, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000007600000024001280090001007866726d0000000014000280080001000400000008000200020000000a0002"], 0x5c}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000b, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, 0x0, 0x4004040) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x12, 0x20, 0x10, 0x40, 0x5ac, 0x8501, 0x9e4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0xa0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) 12.026087621s ago: executing program 4 (id=4478): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc8d4cb3927ebe405e97559a6a544452a6b8"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 8.698474291s ago: executing program 4 (id=4482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) close(r4) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/194, 0xc2) 8.406478225s ago: executing program 0 (id=4485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='ifs_status\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20080700000007f46babe2261f50"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) 8.406088025s ago: executing program 4 (id=4486): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "01d3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000740)={0x20, 0x15, 0x2, "1e1e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x220000, &(0x7f00000002c0)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x10d242, 0x49) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000600)=""/142, 0x8e}], 0x4, &(0x7f00000008c0)=""/211, 0xd3}, 0x6}], 0x1, 0x40000121, &(0x7f0000000780)={0x0, 0x989680}) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000140)={0x50d, {{0xa, 0x0, 0x0, @mcast2, 0x44000}}, {{0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x108) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0dd7e99bb6e770f7601e8fdaa1a184d003093016fd5f20b994d81f33410f868b879dc4b98624e3acfefd1ad886603141a36c54709232fca8a1e0090ca563b2691a2765c9118899e1ec632d029273a51b4c3688b518b76094d13f4a1f8eeb1f0d85f2d9857eee7a30829c2707d968b02da4226565a5bfc60d6e3133c28fa06b0520", @ANYRES16=r4, @ANYBLOB="796100000000000000007e0000000c0099000800000026000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x54) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4001) 8.246187798s ago: executing program 69 (id=4486): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "01d3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000740)={0x20, 0x15, 0x2, "1e1e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x220000, &(0x7f00000002c0)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x10d242, 0x49) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000600)=""/142, 0x8e}], 0x4, &(0x7f00000008c0)=""/211, 0xd3}, 0x6}], 0x1, 0x40000121, &(0x7f0000000780)={0x0, 0x989680}) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000140)={0x50d, {{0xa, 0x0, 0x0, @mcast2, 0x44000}}, {{0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x108) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0dd7e99bb6e770f7601e8fdaa1a184d003093016fd5f20b994d81f33410f868b879dc4b98624e3acfefd1ad886603141a36c54709232fca8a1e0090ca563b2691a2765c9118899e1ec632d029273a51b4c3688b518b76094d13f4a1f8eeb1f0d85f2d9857eee7a30829c2707d968b02da4226565a5bfc60d6e3133c28fa06b0520", @ANYRES16=r4, @ANYBLOB="796100000000000000007e0000000c0099000800000026000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x54) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4001) 7.997922571s ago: executing program 6 (id=4489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="060000000000000002004e25e0000002"], 0x90) 7.470315739s ago: executing program 3 (id=4490): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0x0, 0x100, 0x1c8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x100000000000000}, [@common=@unspec=@statistic={{0x38}, {0x2, 0x0, 0xe5, 0xcde, 0x8001, {0xfffffffffffffff7}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x2, 0x0, 0x2}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x4, 0x4, 0x6, 0x2, 0x7, 0x2], 0x3}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.335999956s ago: executing program 6 (id=4492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="060000000000000002004e25e0000002"], 0x90) 6.280101717s ago: executing program 7 (id=4487): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17", @ANYBLOB], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4}) creat(&(0x7f0000000040)='./bus\x00', 0x40) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) 5.794375164s ago: executing program 3 (id=4494): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @func_proto, @func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007311410000000000630a00ff000000009500000000000000b003000000e54d9a4320c267fb3605f6c3f687dcfe09064db290cb1e5db93406c6a38b2b345f8f3c747a79a06ef7917f53fef4d0e04e3b462e606c8bb1d523659dfd3f5e898b83540000c2c680a56b7cf106b2e1b6c8315202d1b30aa6ea5867dc08cc"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff6c, 0x10, &(0x7f0000000000), 0xfffffe51, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1008, 0x0, 0x13, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x4048084) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f00000002c0)={0x0, 0xa, 0x5f, {0x5f, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1680bb7fcdc61a45a16816e0e6f78c3be4173b100806ff414b32a0a9fe4e671d8e48a5bb8c2"}}, 0x0}, 0x0) 5.668499066s ago: executing program 1 (id=4495): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f00000012c0)={@remote, @empty}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) 5.525172138s ago: executing program 0 (id=4496): r0 = socket$inet(0x2, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x100000, 0x4, 0xff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe000) 5.524445748s ago: executing program 0 (id=4497): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b61"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r4, &(0x7f0000000140)=""/194, 0xc2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) 5.091369635s ago: executing program 6 (id=4498): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000, 0x0, 0xf0}) 4.695094461s ago: executing program 0 (id=4499): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x3, 0x0, 0x800}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001400)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000580)) 4.663148631s ago: executing program 7 (id=4500): syz_emit_ethernet(0x56, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000002440), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002380)={'ip6gre0\x00', &(0x7f0000002480)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x7, 0x6, 0x79, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x80, 0x800, 0x9c37}}) bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x11, 0xc, &(0x7f0000002400)=ANY=[@ANYRESHEX=r4, @ANYRES16, @ANYRESDEC=0x0, @ANYRES64=r2, @ANYRES16=r6, @ANYRES32=r1, @ANYRES16=r6], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', r7, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x808c00, 0x0) r8 = syz_open_procfs(r1, &(0x7f0000000100)='smaps\x00') add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) read$FUSE(r8, &(0x7f0000006040)={0x2020}, 0x2020) 4.353115525s ago: executing program 1 (id=4501): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0x87, 0x29, 0x2, {0x70000000, [{{0x2, 0x1, 0x1}, 0xfffffffffffffff0, 0x3, 0x7, './file0'}, {{0x0, 0x1, 0x3}, 0xff, 0x61, 0x7, './file0'}, {{0x80, 0x2}, 0x2e, 0x6, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4, 0x3, 0x7, './file0'}]}}, 0x87) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x400}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x38}}, 0x4008004) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xa, 0x2, 0xe, '\x00', 0x80}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0xffff15a7, 0xfffffff9, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x35, 0x1}, {0x34, 0x6}, {0x0, 0x0, 0x6, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x1, 0x0, 0xfe, '\x00', 0x3}, {0x0, 0x0, 0x80}, {}, {}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0xfc, 0x0, 0xfa}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='thermal_power_cpu_limit\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x128, 0x6c, 0x0, 0x128, 0x0, 0x1f0, 0x258, 0x258, 0x1f0, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xd, 0x7f}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x320) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2a, 0x38, 0x25, 0x8, 0x5c6, 0x9077, 0xdda1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xb, 0x1, 0xe0, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 3.803525604s ago: executing program 1 (id=4502): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setresuid(0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009099ac5fd99e845459ee060a1956d2d6975a2dc97e0abc7073f65b2409dcbf293abc55992805d572fb1a7230d67d410fdcf9356c75527e679f74864e1e0b2409929564"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) writev(r4, &(0x7f0000000140), 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7f, 0x6, 0xfff, 0xd0f}}) 3.803147964s ago: executing program 6 (id=4503): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17", @ANYBLOB], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4}) creat(&(0x7f0000000040)='./bus\x00', 0x40) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) 3.577879717s ago: executing program 7 (id=4504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="060000000000000002004e25e0000002"], 0x90) 2.079355849s ago: executing program 7 (id=4505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) times(&(0x7f00000003c0)) 1.977948831s ago: executing program 1 (id=4506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.889189132s ago: executing program 0 (id=4507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r1 = open(0x0, 0x14927e, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7ab19000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r1, 0xffffffffffffffff}, 0x4) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x0, 0xd, 0x5, 0x5, 0x80, 0xfffffffffffffff0}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000400)=""/172, 0x40f00, 0x14, '\x00', 0x0, @sock_ops, r1, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000008c0)=[r5, r6, r1, r1], &(0x7f0000000900)=[{0x4, 0x1, 0xf, 0x7}, {0x0, 0x2, 0x4, 0x8}, {0x4, 0x1, 0x10, 0x2}, {0x0, 0xfffffffe, 0xc, 0x2}, {0x0, 0x2, 0x2, 0x3}, {0x5, 0x3, 0xf}, {0x5, 0x5, 0xc}], 0x10, 0x8, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000280)={0x0, 0x3, 0x2c, 0x4, 0x104, 0x1}) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 1.787827224s ago: executing program 7 (id=4508): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17", @ANYBLOB], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4}) creat(&(0x7f0000000040)='./bus\x00', 0x40) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) 1.424162149s ago: executing program 6 (id=4509): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r4, &(0x7f0000000140)=""/194, 0xc2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) 1.412689209s ago: executing program 3 (id=4510): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x99}, @initr0={0x18, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x1d, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x3, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x2, 0x5, 0xd, 0x8}, {0x5, 0x2, 0x4, 0x5}, {0x2, 0x2, 0xf, 0x8}, {0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x5, 0x6}, {0x0, 0x5, 0x6}, {0x0, 0x4, 0x6, 0xb}, {0x3, 0x3, 0xd, 0x5}], 0x10, 0xf, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000000)={0x1, 0x3}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1.311636231s ago: executing program 1 (id=4511): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0xa000200b}) epoll_pwait(r7, &(0x7f0000000040), 0x1, 0x80000000, 0x0, 0xfffffffffffffee3) shutdown(r6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f6000719a18f2ba0bdd3dd7e0f3a68182c362c1eb789df11bac9ac4e3d57b50500233b658e59a2e833fb0a801edce81bdf04c54e5eea620a6b475db2647501e6408d6c211302812da4ec4e40a4c06a117fa777ce7436389186ece13bc2ab52acfc6007c9544061ca57e4f9c6243d2f3fd66d38291369a42113ba26741831625d4a324ef3bfcb495d94a889cf77d2c2d876c5acf4bb7be74d9bce463322e613c2652704511213ec73ad23cdce008e4a28c188565111740b3bf5cddd5c43304a69e9e79241b3c03de96564033bb419f69def", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf256c0000000c009900070000003500000008009f00040000000800270000000000050018011d00000008002700000000000800a0000600000005001901050000000800220191000000"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) 1.224267902s ago: executing program 3 (id=4512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r5, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) 144.574948ms ago: executing program 0 (id=4513): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0x87, 0x29, 0x2, {0x70000000, [{{0x2, 0x1, 0x1}, 0xfffffffffffffff0, 0x3, 0x7, './file0'}, {{0x0, 0x1, 0x3}, 0xff, 0x61, 0x7, './file0'}, {{0x80, 0x2}, 0x2e, 0x6, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4, 0x3, 0x7, './file0'}]}}, 0x87) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x400}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x38}}, 0x4008004) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xa, 0x2, 0xe, '\x00', 0x80}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0xffff15a7, 0xfffffff9, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x35, 0x1}, {0x34, 0x6}, {0x0, 0x0, 0x6, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x1, 0x0, 0xfe, '\x00', 0x3}, {0x0, 0x0, 0x80}, {}, {}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0xfc, 0x0, 0xfa}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='thermal_power_cpu_limit\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x128, 0x6c, 0x0, 0x128, 0x0, 0x1f0, 0x258, 0x258, 0x1f0, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xd, 0x7f}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x320) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2a, 0x38, 0x25, 0x8, 0x5c6, 0x9077, 0xdda1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xb, 0x1, 0xe0, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 808.39µs ago: executing program 6 (id=4514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newlink={0x5c, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0xd}}]}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x26000400) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f00000001c0)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 0s ago: executing program 1 (id=4515): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_bpf_prog_alloc_security\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000200)={r3, 0x5, 0x7}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x2}}, 0x24, 0x0) kernel console output (not intermixed with test programs): escriptor too short [ 1061.741791][ T24] usb 9-1: config 11 has no interfaces? [ 1061.796713][ T24] usb 9-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1061.938287][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.959419][T14968] loop4: detected capacity change from 0 to 512 [ 1061.968050][ T24] usb 9-1: Product: syz [ 1061.979490][ T24] usb 9-1: Manufacturer: syz [ 1061.994893][T14968] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1062.012214][ T24] usb 9-1: SerialNumber: syz [ 1062.022727][T14968] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1062.031884][ T6] usb 7-1: USB disconnect, device number 14 [ 1062.055209][T14968] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3890: bad orphan inode 131083 [ 1062.066693][T14968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1062.729369][ T24] usb 9-1: USB disconnect, device number 28 [ 1063.040273][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1063.292510][T14983] loop4: detected capacity change from 0 to 512 [ 1063.315665][T14983] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1063.906288][T14100] EXT4-fs (loop2): unmounting filesystem. [ 1064.024040][T15004] loop8: detected capacity change from 0 to 512 [ 1064.052529][T15004] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1064.070676][T15004] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1064.125937][T15004] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.3899: bad orphan inode 131083 [ 1064.160440][T15004] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1064.249070][T15008] loop6: detected capacity change from 0 to 512 [ 1064.297330][T15008] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1064.315694][T15008] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1064.526982][T15008] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.3900: bad orphan inode 131083 [ 1064.583474][T15008] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1064.651435][T15014] syz.2.3901[15014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1064.651520][T15014] syz.2.3901[15014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1065.657505][T13486] EXT4-fs (loop8): unmounting filesystem. [ 1065.677222][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1068.316366][T15043] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1068.355727][T15046] loop6: detected capacity change from 0 to 512 [ 1068.432114][T15046] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1068.500655][T15050] incfs: Can't find or create .index dir in ./file0 [ 1068.507368][T15050] incfs: mount failed -14 [ 1068.550434][T15046] EXT4-fs (loop6): 1 truncate cleaned up [ 1068.594585][T15046] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1068.639017][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1069.407261][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1069.415125][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1069.653879][ T24] usb 3-1: config 11 has no interfaces? [ 1069.668137][ T24] usb 3-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1069.684991][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.714690][ T24] usb 3-1: Product: syz [ 1069.719012][ T24] usb 3-1: Manufacturer: syz [ 1069.723629][ T24] usb 3-1: SerialNumber: syz [ 1069.963686][ T24] usb 3-1: USB disconnect, device number 24 [ 1072.756418][T15099] loop2: detected capacity change from 0 to 1024 [ 1072.859778][T15099] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1072.914285][T15099] EXT4-fs (loop2): invalid journal inode [ 1072.920850][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1072.927050][T15099] EXT4-fs (loop2): can't get journal size [ 1072.935898][T15099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1073.594320][T15113] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1074.687473][T14100] EXT4-fs (loop2): unmounting filesystem. [ 1075.157072][T15133] loop6: detected capacity change from 0 to 512 [ 1075.176748][T15133] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1075.189547][T15131] kvm: apic: phys broadcast and lowest prio [ 1075.196223][T15133] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1075.252993][T15133] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.3933: bad orphan inode 131083 [ 1075.255483][T15131] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1075.372436][T15133] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1077.167746][T15150] loop2: detected capacity change from 0 to 512 [ 1077.175662][T15150] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1077.253977][ T24] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1077.291082][T15150] EXT4-fs (loop2): 1 truncate cleaned up [ 1077.296978][T15150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1077.438144][T15153] EXT4-fs (loop2): unmounting filesystem. [ 1077.457795][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1077.526260][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1077.546169][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1077.811465][T15165] overlayfs: failed to clone upperpath [ 1077.843672][ T24] usb 9-1: config 11 has no interfaces? [ 1078.089257][ T24] usb 9-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1078.201649][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.284979][ T24] usb 9-1: Product: syz [ 1078.291495][ T24] usb 9-1: Manufacturer: syz [ 1078.296220][ T24] usb 9-1: SerialNumber: syz [ 1078.365688][ T24] usb 9-1: USB disconnect, device number 29 [ 1078.389010][T15170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.396166][T15170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.404676][T15170] device bridge_slave_0 entered promiscuous mode [ 1078.412031][T15170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.420374][T15170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.428525][T15170] device bridge_slave_1 entered promiscuous mode [ 1079.600913][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1080.120021][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1080.136552][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1080.153956][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1080.172006][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.179154][ T8793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.201952][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1080.216026][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1080.224500][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.231584][ T8793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.283313][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1080.307195][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1080.325043][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1080.342676][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1080.361810][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1080.395914][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1080.413834][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1080.433871][T15170] device veth0_vlan entered promiscuous mode [ 1080.443576][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1080.458893][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1080.586225][T15170] device veth1_macvtap entered promiscuous mode [ 1080.613630][T15206] syz.8.3952[15206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.613705][T15206] syz.8.3952[15206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.628520][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1080.660823][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1080.669308][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1080.684646][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1080.694590][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1080.703947][T15205] bridge0: port 3(syz_tun) entered blocking state [ 1080.717956][T15205] bridge0: port 3(syz_tun) entered disabled state [ 1080.725002][T15205] device syz_tun entered promiscuous mode [ 1080.745689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1080.757708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1080.786641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1080.799812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.195327][T15224] syz.4.3956[15224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.195509][T15224] syz.4.3956[15224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.211101][T15224] loop4: detected capacity change from 0 to 512 [ 1081.295696][T15224] EXT4-fs: Ignoring removed nobh option [ 1081.318361][T15224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1081.988749][T15240] loop6: detected capacity change from 0 to 128 [ 1082.006562][T15240] EXT4-fs: Ignoring removed nobh option [ 1082.014195][T15240] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1082.508499][ T28] audit: type=1400 audit(1017.046:1274): avc: denied { ioctl } for pid=15239 comm="syz.6.3961" path="socket:[76025]" dev="sockfs" ino=76025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1083.360414][ T28] audit: type=1400 audit(1017.841:1275): avc: denied { create } for pid=15249 comm="syz.1.3963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 1083.529182][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1083.644950][T15256] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1084.471918][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1084.722830][T15276] syz.0.3971[15276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.722932][T15276] syz.0.3971[15276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.811093][T15278] loop6: detected capacity change from 0 to 512 [ 1084.881487][T15278] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1084.913831][T15278] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1084.946935][T15278] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.3973: bad orphan inode 131083 [ 1085.122895][T15278] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1087.379439][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1087.502844][ T28] audit: type=1400 audit(1021.714:1276): avc: denied { connect } for pid=15299 comm="syz.8.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1087.581198][ T28] audit: type=1400 audit(1021.714:1277): avc: denied { append } for pid=15299 comm="syz.8.3977" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1087.990120][ T28] audit: type=1400 audit(1022.172:1278): avc: denied { ioctl } for pid=15304 comm="syz.8.3979" path="socket:[75691]" dev="sockfs" ino=75691 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1091.969051][T15368] loop6: detected capacity change from 0 to 512 [ 1091.980290][T15360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.006854][T15360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.017422][T15368] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1092.017588][T15360] device bridge_slave_0 entered promiscuous mode [ 1092.031755][T15360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.038909][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.046834][T15360] device bridge_slave_1 entered promiscuous mode [ 1092.050613][T15368] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1092.109765][T15368] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.3995: bad orphan inode 131083 [ 1092.131951][T15373] loop4: detected capacity change from 0 to 256 [ 1092.137941][T15368] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1092.140542][T15373] exfat: Deprecated parameter 'utf8' [ 1092.201618][T15373] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011fde, chksum : 0x56f3948c, utbl_chksum : 0xe619d30d) [ 1092.294716][ T28] audit: type=1400 audit(1026.194:1279): avc: denied { lock } for pid=15372 comm="syz.4.3996" path="/82/file0/file1" dev="loop4" ino=1048911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1092.651088][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1092.658829][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1092.666879][ T28] audit: type=1400 audit(1026.194:1280): avc: denied { ioctl } for pid=15372 comm="syz.4.3996" path="/82/file0/file1" dev="loop4" ino=1048911 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1092.702645][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1092.714553][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1092.733134][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.740321][ T8718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.804692][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1092.813830][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1092.822627][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1092.831129][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.838208][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.847033][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1092.890934][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1092.916793][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1093.063832][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1093.072743][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1093.091242][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1093.185515][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1093.441242][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1093.452305][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1093.524268][T15360] device veth0_vlan entered promiscuous mode [ 1093.550601][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1093.562574][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1093.780678][T15360] device veth1_macvtap entered promiscuous mode [ 1093.961101][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1093.972462][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1093.983020][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1093.988489][T15411] loop8: detected capacity change from 0 to 512 [ 1094.002238][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1094.016596][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1094.027182][T15411] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1094.059200][T15411] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1094.145605][T15411] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4002: bad orphan inode 131083 [ 1094.160842][T15411] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1095.268782][T13486] EXT4-fs (loop8): unmounting filesystem. [ 1095.287559][T15427] syz.1.4007[15427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.287635][T15427] syz.1.4007[15427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.313555][T15429] loop4: detected capacity change from 0 to 512 [ 1095.335466][T15429] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1095.342734][T15429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1095.423712][T15429] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4008: bad orphan inode 131083 [ 1095.869165][T15429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1099.115133][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1099.140591][ T28] audit: type=1326 audit(1032.602:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.0.4011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa35f98e929 code=0x0 [ 1099.257620][T15455] xt_bpf: check failed: parse error [ 1099.265364][T15455] syz.4.4012[15455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.265487][T15455] syz.4.4012[15455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.283121][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1099.967628][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1099.975257][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1099.982866][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1099.990416][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1099.998195][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1100.005837][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1100.013371][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1100.338381][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1100.346215][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1100.358093][T15464] loop8: detected capacity change from 0 to 512 [ 1100.376030][T15464] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1100.393863][T15464] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1100.417423][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1100.421328][T15464] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4016: bad orphan inode 131083 [ 1100.425281][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1100.452866][T15464] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1101.854295][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1101.897986][T13486] EXT4-fs (loop8): unmounting filesystem. [ 1101.918860][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1101.926454][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1101.958714][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.214514][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.222413][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.237640][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.245440][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.253099][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.261081][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.268570][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.276471][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.284088][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.291710][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.299203][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.306937][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.314710][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.361881][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.369514][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.384957][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.392734][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.462825][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.470362][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.478067][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.488655][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.499595][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.509443][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.521569][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.774512][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.782060][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.789530][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.797056][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.811532][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.827209][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1102.998491][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1103.091395][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1103.160043][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1103.191061][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1103.198749][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1103.206760][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1103.214594][ T353] hid-generic 0008:0006:0007.007F: unknown main item tag 0x0 [ 1103.223378][ T353] hid-generic 0008:0006:0007.007F: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1103.250683][T15490] loop8: detected capacity change from 0 to 512 [ 1103.259042][T15490] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1103.285682][T15490] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1103.319302][T15490] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4019: bad orphan inode 131083 [ 1103.358437][T15493] fido_id[15493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1103.374628][T15490] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1104.412566][T13486] EXT4-fs (loop8): unmounting filesystem. [ 1105.118338][ T28] audit: type=1326 audit(1038.196:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1105.982604][ T28] audit: type=1326 audit(1038.785:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.037607][ T28] audit: type=1326 audit(1038.785:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.081911][T15545] syz.0.4040[15545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1106.082000][T15545] syz.0.4040[15545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1106.128460][ T28] audit: type=1326 audit(1038.794:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.193752][ T28] audit: type=1326 audit(1038.804:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.233605][ T28] audit: type=1326 audit(1038.822:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.264195][ T28] audit: type=1326 audit(1038.822:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.315981][ T28] audit: type=1326 audit(1038.832:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.393595][ T28] audit: type=1326 audit(1038.832:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f98e929 code=0x7ffc0000 [ 1106.652853][T15566] loop6: detected capacity change from 0 to 512 [ 1106.674424][T15566] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1106.688959][T15566] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1106.715414][T15568] loop8: detected capacity change from 0 to 512 [ 1106.728989][T15568] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1106.745241][T15568] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1106.749204][T15566] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4045: bad orphan inode 131083 [ 1106.773269][T15568] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4046: bad orphan inode 131083 [ 1106.794652][T15568] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1106.803856][T15566] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1108.855553][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1108.862076][T13486] EXT4-fs (loop8): unmounting filesystem. [ 1110.801610][T15607] loop6: detected capacity change from 0 to 512 [ 1110.808406][T15607] EXT4-fs: dax option not supported [ 1110.866508][T13590] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1110.970030][T15611] loop8: detected capacity change from 0 to 512 [ 1111.007327][T15611] EXT4-fs (loop8): 1 truncate cleaned up [ 1111.013151][T15611] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1111.628581][T15617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4056'. [ 1111.841899][T15621] loop6: detected capacity change from 0 to 512 [ 1111.881433][T15621] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1111.888296][T15621] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1111.933107][T15621] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4057: bad orphan inode 131083 [ 1111.954399][T15621] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1113.167338][T15635] loop4: detected capacity change from 0 to 512 [ 1113.189754][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1113.281649][T15635] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1113.288493][T15635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1113.389434][T15635] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4060: bad orphan inode 131083 [ 1113.432260][T15635] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1114.367825][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1114.595482][T15656] loop6: detected capacity change from 0 to 256 [ 1114.674982][T13752] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1114.816002][T15661] loop4: detected capacity change from 0 to 512 [ 1115.176132][T15661] EXT4-fs (loop4): 1 orphan inode deleted [ 1115.182042][T15661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1115.231664][ T8792] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1115.411924][ T8792] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:112: Failed to release dquot type 1 [ 1115.680038][T13486] EXT4-fs (loop8): unmounting filesystem. [ 1116.175350][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1116.258010][T15677] loop4: detected capacity change from 0 to 128 [ 1116.282929][T15677] EXT4-fs: Ignoring removed nobh option [ 1116.390341][T15677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1116.443248][ T28] audit: type=1400 audit(1048.784:1291): avc: denied { create } for pid=15676 comm="syz.4.4070" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1116.947153][T15694] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1117.289722][ T40] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1117.493606][ T40] usb 7-1: Using ep0 maxpacket: 8 [ 1117.501571][ T40] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1117.541364][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1117.559069][ T40] usb 7-1: config 11 has no interfaces? [ 1117.589823][ T40] usb 7-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1117.627592][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.689070][ T40] usb 7-1: Product: syz [ 1117.696997][ T40] usb 7-1: Manufacturer: syz [ 1117.701875][T15706] netlink: 888 bytes leftover after parsing attributes in process `syz.4.4077'. [ 1117.711844][ T40] usb 7-1: SerialNumber: syz [ 1117.723823][T15706] netlink: 137 bytes leftover after parsing attributes in process `syz.4.4077'. [ 1117.734304][T15706] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 1117.803607][ T28] audit: type=1400 audit(1050.056:1292): avc: denied { getopt } for pid=15709 comm="syz.1.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1118.484176][T15715] netlink: 'syz.1.4080': attribute type 27 has an invalid length. [ 1118.509628][T15715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.516934][T15715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.721293][T15725] loop8: detected capacity change from 0 to 512 [ 1118.816271][ T40] usb 7-1: USB disconnect, device number 15 [ 1118.826825][T15725] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1118.998456][T15725] EXT4-fs (loop8): 1 truncate cleaned up [ 1119.004322][T15725] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1119.979513][T15727] EXT4-fs (loop8): unmounting filesystem. [ 1120.253993][T15751] sch_fq: defrate 4294967295 ignored. [ 1120.300179][T15754] device lo entered promiscuous mode [ 1120.471399][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.497589][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.505270][T15752] device bridge_slave_0 entered promiscuous mode [ 1120.551016][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.559318][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.583653][T15752] device bridge_slave_1 entered promiscuous mode [ 1120.703815][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.710938][T15752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.718290][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.725366][T15752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.736952][T15768] loop4: detected capacity change from 0 to 512 [ 1120.763418][T15768] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1120.770501][T15768] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4096: bg 0: block 248: padding at end of block bitmap is not set [ 1120.786549][T15768] Quota error (device loop4): write_blk: dquota write failed [ 1120.792061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1120.793982][T15768] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1120.811252][T15768] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.4096: Failed to acquire dquot type 1 [ 1120.823626][T15768] EXT4-fs (loop4): 1 truncate cleaned up [ 1120.829475][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.836876][T15768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1120.846120][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.881631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1120.907472][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.914620][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.934102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1120.948249][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.955335][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.969693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1120.991724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1121.024871][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1121.034800][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1121.050179][T15752] device veth0_vlan entered promiscuous mode [ 1121.057639][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1121.069590][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1121.083927][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1121.092932][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1121.106296][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1121.115030][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1121.124993][T15752] device veth1_macvtap entered promiscuous mode [ 1121.131811][T15771] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1121.143044][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1121.150809][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1121.159173][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1121.170722][T15774] loop6: detected capacity change from 0 to 256 [ 1121.178015][T15774] FAT-fs (loop6): bogus number of FAT sectors [ 1121.189366][T15774] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1121.199377][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1121.234195][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1121.350489][T15782] overlayfs: failed to clone upperpath [ 1121.427550][T15636] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1121.546000][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1121.578684][ T40] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1121.630727][T15636] usb 1-1: Using ep0 maxpacket: 8 [ 1121.637387][T15636] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1121.652954][T15636] usb 1-1: config 11 has no interfaces? [ 1121.668862][T15636] usb 1-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1121.694240][T15636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.716222][T15636] usb 1-1: Product: syz [ 1121.726372][T15636] usb 1-1: Manufacturer: syz [ 1121.739797][T15636] usb 1-1: SerialNumber: syz [ 1121.865960][ T40] usb 10-1: Using ep0 maxpacket: 32 [ 1121.880240][ T40] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1121.893139][ T40] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1121.916963][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.940916][ T40] usb 10-1: config 0 descriptor?? [ 1122.412049][ T40] wacom 0003:056A:0331.0080: hidraw0: USB HID v0.07 Device [HID 056a:0331] on usb-dummy_hcd.9-1/input0 [ 1122.826686][ T40] usb 10-1: USB disconnect, device number 23 [ 1122.867508][T15636] usb 1-1: USB disconnect, device number 27 [ 1122.879256][T15806] fido_id[15806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1124.548463][T15840] input: syz0 as /devices/virtual/input/input48 [ 1124.700597][T15829] loop6: detected capacity change from 0 to 40427 [ 1124.728077][T15829] F2FS-fs (loop6): fault_injection options not supported [ 1124.751558][T15829] F2FS-fs (loop6): invalid crc value [ 1124.797860][T15829] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1125.063155][T15829] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1125.082549][T15850] overlayfs: failed to clone upperpath [ 1125.118390][T15829] syz.6.4114: attempt to access beyond end of device [ 1125.118390][T15829] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1125.192422][T12177] syz-executor: attempt to access beyond end of device [ 1125.192422][T12177] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1125.192766][T15852] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1125.260688][T15854] loop9: detected capacity change from 0 to 512 [ 1125.314623][T15854] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1125.758475][T15752] EXT4-fs (loop9): unmounting filesystem. [ 1126.433649][ T28] audit: type=1400 audit(1058.138:1293): avc: denied { unmount } for pid=12177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1126.760276][T15886] loop6: detected capacity change from 0 to 512 [ 1126.769953][T15888] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1126.975899][T15886] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1127.002485][T15886] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1127.049519][T15886] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4129: bad orphan inode 131083 [ 1127.072498][T15886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1127.635355][T15894] loop4: detected capacity change from 0 to 131072 [ 1127.957153][T15903] xt_hashlimit: invalid rate [ 1127.971959][T15894] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1127.980112][T15894] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1127.992749][T15894] F2FS-fs (loop4): invalid crc value [ 1128.044538][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1128.089527][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4135'. [ 1128.104098][T15894] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1128.150471][T15894] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1128.157703][T15894] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1128.182202][ T28] audit: type=1400 audit(1059.766:1294): avc: denied { listen } for pid=15893 comm="syz.4.4132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1128.461426][ T28] audit: type=1400 audit(1060.028:1295): avc: denied { bind } for pid=15925 comm="syz.6.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1128.504765][T15636] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1128.685292][T15933] loop4: detected capacity change from 0 to 2048 [ 1128.703372][T15933] EXT4-fs: Ignoring removed mblk_io_submit option [ 1128.710160][T15933] EXT4-fs: dax option not supported [ 1128.736317][T15934] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1128.752279][T15636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.802383][T15636] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1128.811856][T15636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.848994][T15636] usb 1-1: config 0 descriptor?? [ 1129.034276][T15941] loop4: detected capacity change from 0 to 512 [ 1129.045494][T15941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1129.399763][T15941] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1129.515597][T15941] EXT4-fs (loop4): 1 truncate cleaned up [ 1129.521398][T15941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1129.596922][T15947] syz.9.4145[15947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1129.597035][T15947] syz.9.4145[15947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1129.682836][T15636] keytouch 0003:0926:3333.0081: fixing up Keytouch IEC report descriptor [ 1129.788907][T15636] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0081/input/input49 [ 1129.910163][T15636] keytouch 0003:0926:3333.0081: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1130.243547][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1130.604858][T15965] xt_hashlimit: size too large, truncated to 1048576 [ 1130.772048][T15967] loop4: detected capacity change from 0 to 1024 [ 1130.909993][T15967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1130.997119][T15979] loop6: detected capacity change from 0 to 256 [ 1131.017766][T15979] FAT-fs (loop6): Unrecognized mount option "tz=cTC" or missing value [ 1131.032749][T15981] syz.1.4155[15981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1131.032836][T15981] syz.1.4155[15981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1131.061601][T13590] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1131.083769][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1131.249394][T15985] loop6: detected capacity change from 0 to 512 [ 1131.281730][T15985] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1131.310875][T15985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1131.357922][T15985] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4156: bad orphan inode 131083 [ 1131.383700][T15985] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1131.809611][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1132.060913][ T24] usb 1-1: USB disconnect, device number 28 [ 1132.253448][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1132.369500][T15999] syz.6.4160[15999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1132.369585][T15999] syz.6.4160[15999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1132.799702][T16011] loop4: detected capacity change from 0 to 512 [ 1132.824863][ T102] udevd[102]: worker [13590] terminated by signal 33 (Unknown signal 33) [ 1132.835066][T16011] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1132.841974][ T102] udevd[102]: worker [13590] failed while handling '/devices/virtual/block/loop4' [ 1132.851786][T16011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1132.873526][T16011] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4162: bad orphan inode 131083 [ 1132.884347][T16011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1132.966017][T16015] loop6: detected capacity change from 0 to 128 [ 1132.980343][ T102] udevd[102]: worker [13752] terminated by signal 33 (Unknown signal 33) [ 1132.989642][T16015] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1132.996746][ T102] udevd[102]: worker [13752] failed while handling '/devices/virtual/block/loop6' [ 1133.008192][T16015] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1133.322102][T16020] can0: slcan on ptm0. [ 1133.356333][ T28] audit: type=1400 audit(1064.602:1296): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.391641][T16020] futex_wake_op: syz.6.4164 tries to shift op by -1; fix this program [ 1133.391799][ T28] audit: type=1400 audit(1064.602:1297): avc: denied { read } for pid=141 comm="dhcpcd" name="n18" dev="tmpfs" ino=33773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1133.423395][ T28] audit: type=1400 audit(1064.602:1298): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=33773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1133.446254][ T28] audit: type=1400 audit(1064.602:1299): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=33773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1133.504002][ T28] audit: type=1400 audit(1064.742:1300): avc: denied { read } for pid=16032 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.526947][ T28] audit: type=1400 audit(1064.742:1301): avc: denied { open } for pid=16032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.564555][ T28] audit: type=1400 audit(1064.742:1302): avc: denied { getattr } for pid=16032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.796008][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1133.850218][T16015] can0 (unregistered): slcan off ptm0. [ 1133.889248][ T28] audit: type=1400 audit(1065.107:1303): avc: denied { write } for pid=16030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.912752][ T28] audit: type=1400 audit(1065.107:1304): avc: denied { add_name } for pid=16030 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.913978][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1133.942105][ T28] audit: type=1400 audit(1065.107:1305): avc: denied { create } for pid=16030 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1134.138885][T14303] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1134.583072][T16076] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1134.595460][T16076] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1134.658272][T16084] loop9: detected capacity change from 0 to 512 [ 1134.675323][T14303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.686456][T14303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.696391][T14303] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1134.705526][T14303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.724091][T14303] usb 5-1: config 0 descriptor?? [ 1137.896393][T16125] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1137.921635][T16127] loop9: detected capacity change from 0 to 512 [ 1137.958987][T16127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.046126][T16127] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1138.097611][T16127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee01c, mo2=0002] [ 1138.123887][T16127] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1138.186190][T16127] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 33619980: comm syz.9.4188: invalid block [ 1138.914966][T16127] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.4188: invalid indirect mapped block 2185560079 (level 1) [ 1139.157757][T16127] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4188: bg 0: block 361: padding at end of block bitmap is not set [ 1139.199189][T14303] uclogic 0003:256C:006D.0082: failed retrieving string descriptor #100: -71 [ 1139.216753][T14303] uclogic 0003:256C:006D.0082: failed retrieving pen parameters: -71 [ 1139.219764][T16127] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1139.224895][T14303] uclogic 0003:256C:006D.0082: failed probing pen v1 parameters: -71 [ 1139.243296][T16127] EXT4-fs (loop9): 1 truncate cleaned up [ 1139.249669][T16127] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1139.291603][T16127] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.4188: dx entry: limit 0 != root limit 125 [ 1139.304717][T14303] uclogic 0003:256C:006D.0082: failed probing parameters: -71 [ 1139.328934][T14303] uclogic: probe of 0003:256C:006D.0082 failed with error -71 [ 1139.345402][T16127] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.4188: Corrupt directory, running e2fsck is recommended [ 1139.361617][T14303] usb 5-1: USB disconnect, device number 42 [ 1139.412982][T16145] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1139.496489][T16127] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 1139.837008][T14303] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1139.952294][T15752] EXT4-fs (loop9): unmounting filesystem. [ 1140.093355][T14303] usb 5-1: Using ep0 maxpacket: 8 [ 1140.100510][T14303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1140.126181][T14303] usb 5-1: config 11 has no interfaces? [ 1140.133362][T14303] usb 5-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1140.157483][T14303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.170977][T14303] usb 5-1: Product: syz [ 1140.192343][T14303] usb 5-1: Manufacturer: syz [ 1140.253185][T14303] usb 5-1: SerialNumber: syz [ 1140.525487][T16161] loop6: detected capacity change from 0 to 256 [ 1140.544758][T16161] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1140.556258][T16160] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4198'. [ 1140.600039][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 1140.600059][ T28] audit: type=1400 audit(1071.384:1440): avc: denied { write } for pid=16162 comm="syz.6.4199" name="/" dev="configfs" ino=14562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1140.633974][ T28] audit: type=1400 audit(1071.384:1441): avc: denied { add_name } for pid=16162 comm="syz.6.4199" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1140.657464][ T28] audit: type=1400 audit(1071.384:1442): avc: denied { create } for pid=16162 comm="syz.6.4199" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1140.680161][ T28] audit: type=1400 audit(1071.384:1443): avc: denied { prog_load } for pid=16162 comm="syz.6.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1140.699004][ T28] audit: type=1400 audit(1071.384:1444): avc: denied { bpf } for pid=16162 comm="syz.6.4199" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1140.721836][ T28] audit: type=1400 audit(1071.384:1445): avc: denied { ioctl } for pid=16162 comm="syz.6.4199" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1140.747112][ T28] audit: type=1400 audit(1071.412:1446): avc: denied { ioctl } for pid=16162 comm="syz.6.4199" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1140.773075][ T28] audit: type=1400 audit(1071.412:1447): avc: denied { read write } for pid=16164 comm="syz.0.4200" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1140.796055][ T28] audit: type=1400 audit(1071.412:1448): avc: denied { open } for pid=16164 comm="syz.0.4200" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1140.818922][ T28] audit: type=1400 audit(1071.412:1449): avc: denied { bpf } for pid=16164 comm="syz.0.4200" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1140.952599][ T9678] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1141.237507][ T9678] usb 7-1: Using ep0 maxpacket: 16 [ 1141.253195][ T9678] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1141.313962][ T9678] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.344958][ T9678] usb 7-1: config 0 has no interface number 0 [ 1141.421160][ T9678] usb 7-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1141.431075][ T9678] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1141.439181][ T9678] usb 7-1: Product: syz [ 1141.443465][ T9678] usb 7-1: SerialNumber: syz [ 1142.504669][T16183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1142.512106][T16183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1142.753944][T14303] usb 5-1: USB disconnect, device number 43 [ 1142.812614][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1142.906256][ T9678] usb 7-1: config 0 descriptor?? [ 1142.920706][ T9678] snd-usb-audio: probe of 7-1:0.2 failed with error -2 [ 1142.940766][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1142.986147][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1143.001981][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1143.010440][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1143.023027][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1143.031535][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1143.060082][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1143.070350][T13867] udevd[13867]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1143.131525][ T9678] usb 7-1: USB disconnect, device number 16 [ 1143.206973][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1144.152500][T16216] overlayfs: failed to clone upperpath [ 1144.371108][T16222] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1144.426428][T16223] loop9: detected capacity change from 0 to 256 [ 1144.434009][T16223] FAT-fs (loop9): Unrecognized mount option "uoi_xlate=0" or missing value [ 1144.628570][T13867] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1144.849888][T16225] loop4: detected capacity change from 0 to 1024 [ 1144.963240][T16225] EXT4-fs: Ignoring removed nobh option [ 1145.205018][T16225] EXT4-fs: Ignoring removed bh option [ 1145.294605][T16225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1145.423336][T16225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1146.207758][T16234] overlayfs: conflicting lowerdir path [ 1146.211446][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 1146.211467][ T28] audit: type=1400 audit(1076.004:1641): avc: denied { execmem } for pid=16224 comm="syz.4.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1146.344087][ T28] audit: type=1400 audit(1076.229:1642): avc: denied { bpf } for pid=16227 comm="syz.1.4217" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1146.558246][T16223] device xfrm0 entered promiscuous mode [ 1146.568434][ T28] audit: type=1400 audit(1076.229:1643): avc: denied { map_create } for pid=16227 comm="syz.1.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1146.587507][ T28] audit: type=1400 audit(1076.229:1644): avc: denied { bpf } for pid=16227 comm="syz.1.4217" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1146.636326][ T28] audit: type=1400 audit(1076.229:1645): avc: denied { map_read map_write } for pid=16227 comm="syz.1.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1146.721140][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1146.776946][ T28] audit: type=1400 audit(1076.257:1646): avc: denied { prog_load } for pid=16227 comm="syz.1.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1146.830329][T16240] loop9: detected capacity change from 0 to 512 [ 1146.838301][T13940] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1146.848428][ T28] audit: type=1400 audit(1076.257:1647): avc: denied { perfmon } for pid=16227 comm="syz.1.4217" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1146.872278][ T28] audit: type=1400 audit(1076.276:1648): avc: denied { create } for pid=16227 comm="syz.1.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1146.892752][T16240] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1146.894500][ T28] audit: type=1400 audit(1076.304:1649): avc: denied { map_create } for pid=16227 comm="syz.1.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1146.920661][T16240] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1146.959142][T16240] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.4220: bad orphan inode 131083 [ 1146.972640][T16240] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1148.177612][T15752] EXT4-fs (loop9): unmounting filesystem. [ 1148.754558][T16262] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1148.889018][T16258] loop9: detected capacity change from 0 to 40427 [ 1148.901727][T16258] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1148.909753][T16258] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1148.920016][T16266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1148.930387][T16266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=16266 comm=syz.4.4227 [ 1148.961547][T16258] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1149.283526][T16258] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1149.290992][T16258] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1150.279235][T16290] syz.1.4233[16290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.279317][T16290] syz.1.4233[16290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.354825][T16296] loop4: detected capacity change from 0 to 128 [ 1150.386580][T16296] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1150.653030][T16300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1150.668368][T16300] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1154.133495][ T28] kauditd_printk_skb: 355 callbacks suppressed [ 1154.133512][ T28] audit: type=1400 audit(1081.841:2000): avc: denied { bpf } for pid=16306 comm="syz.9.4238" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1154.264404][ T28] audit: type=1400 audit(1081.841:2001): avc: denied { prog_load } for pid=16306 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1154.330744][T16318] xt_bpf: check failed: parse error [ 1154.343397][T16316] overlayfs: failed to resolve './file0': -2 [ 1154.350418][ T28] audit: type=1400 audit(1082.393:2002): avc: denied { map_create } for pid=16306 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1154.483175][T16320] xt_socket: unknown flags 0xc [ 1154.783049][ T28] audit: type=1400 audit(1082.393:2003): avc: denied { map_read map_write } for pid=16306 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1155.321557][ T28] audit: type=1400 audit(1082.777:2004): avc: denied { perfmon } for pid=16306 comm="syz.9.4238" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1155.736004][ T28] audit: type=1400 audit(1083.104:2005): avc: denied { prog_run } for pid=16306 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1155.754671][ T28] audit: type=1400 audit(1083.216:2006): avc: denied { create } for pid=16306 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1155.774789][ T28] audit: type=1400 audit(1083.338:2007): avc: denied { write } for pid=16306 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1155.794816][ T28] audit: type=1400 audit(1083.338:2008): avc: denied { read } for pid=16306 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1155.830528][T16328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1155.872897][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1155.959361][T16331] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1156.738676][ T8791] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1156.750574][ T8791] leaked reference. [ 1156.754426][ T8791] fib6_nh_init+0x8e6/0x1ff0 [ 1156.759048][ T8791] rtm_new_nexthop+0x27be/0x6150 [ 1156.764010][ T8791] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 1156.768975][ T8791] netlink_rcv_skb+0x1f2/0x440 [ 1156.773766][ T8791] rtnetlink_rcv+0x1c/0x20 [ 1156.778208][ T8791] netlink_unicast+0x8b1/0xa30 [ 1156.783000][ T8791] netlink_sendmsg+0x8aa/0xbc0 [ 1156.787797][ T8791] ____sys_sendmsg+0x5a9/0x990 [ 1156.792578][ T8791] ___sys_sendmsg+0x21c/0x290 [ 1156.797273][ T8791] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1156.802246][ T8791] x64_sys_call+0x171/0x9a0 [ 1156.806783][ T8791] do_syscall_64+0x4c/0xa0 [ 1156.811232][ T8791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1156.877780][T15636] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1156.910715][T16346] loop6: detected capacity change from 0 to 1024 [ 1156.929159][T16346] EXT4-fs: Ignoring removed i_version option [ 1156.941942][T16346] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1156.972403][T16346] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1157.018826][T16346] fscrypt: AES-256-XTS using blk-crypto-fallback [ 1157.091487][T15636] usb 1-1: Using ep0 maxpacket: 8 [ 1157.098880][T15636] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1157.113874][T15636] usb 1-1: config 11 has no interfaces? [ 1157.131525][T15636] usb 1-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1157.153628][T15636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.166173][T15636] usb 1-1: Product: syz [ 1157.173063][T15636] usb 1-1: Manufacturer: syz [ 1157.183828][T15636] usb 1-1: SerialNumber: syz [ 1157.365463][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1157.689708][T16360] IPv6: sit1: Disabled Multicast RS [ 1157.754355][T14303] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1157.925316][T14303] usb 7-1: device descriptor read/64, error -71 [ 1157.947461][T15636] usb 1-1: USB disconnect, device number 29 [ 1158.032291][T11569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1158.032522][ T8127] Bluetooth: hci0: command 0x1003 tx timeout [ 1158.144037][T16375] device dummy0 entered promiscuous mode [ 1158.150154][T16375] device vlan2 entered promiscuous mode [ 1158.219970][T16381] syz.9.4261[16381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1158.220054][T16381] syz.9.4261[16381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1158.235319][T14303] usb 7-1: device descriptor read/64, error -71 [ 1158.490505][T16390] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 1158.534710][T14303] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1158.716460][T14303] usb 7-1: device descriptor read/64, error -71 [ 1159.005030][T14303] usb 7-1: device descriptor read/64, error -71 [ 1159.133593][T14303] usb usb7-port1: attempt power cycle [ 1159.309007][T16400] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1159.457718][T16402] loop9: detected capacity change from 0 to 512 [ 1159.475511][T16402] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1159.497041][ T28] kauditd_printk_skb: 392 callbacks suppressed [ 1159.497131][ T28] audit: type=1400 audit(1088.978:2399): avc: denied { bpf } for pid=16396 comm="syz.9.4267" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1159.593769][T14303] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1159.654037][T16402] EXT4-fs (loop9): 1 truncate cleaned up [ 1159.659871][T16402] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1159.810416][T14303] usb 7-1: device descriptor read/8, error -71 [ 1160.329952][ T28] audit: type=1400 audit(1088.988:2400): avc: denied { map_create } for pid=16396 comm="syz.9.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1160.497440][T16407] loop4: detected capacity change from 0 to 40427 [ 1160.506680][T16407] F2FS-fs (loop4): fault_type options not supported [ 1160.522142][T16407] F2FS-fs (loop4): invalid crc value [ 1160.533454][ T28] audit: type=1400 audit(1088.988:2401): avc: denied { map_read map_write } for pid=16396 comm="syz.9.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1160.554130][ T28] audit: type=1400 audit(1088.997:2402): avc: denied { bpf } for pid=16396 comm="syz.9.4267" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1160.581051][T16407] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1160.621824][T16407] F2FS-fs (loop4): Start checkpoint disabled! [ 1160.643031][T14303] usb 7-1: device descriptor read/8, error -71 [ 1160.663054][T16407] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1160.702142][T16406] F2FS-fs (loop4): ino:10, start:0, end:4096, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1160.719690][T16406] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1160.720927][T16413] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1160.726293][T16406] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 1160.732811][T16413] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 1160.740483][T16406] audit: backlog limit exceeded [ 1160.748135][T16413] audit: backlog limit exceeded [ 1160.769808][T16404] EXT4-fs (loop9): unmounting filesystem. [ 1160.959081][ T7212] kworker/u4:37: attempt to access beyond end of device [ 1160.959081][ T7212] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1161.057527][T16423] loop6: detected capacity change from 0 to 2048 [ 1161.076569][T16423] EXT4-fs: Ignoring removed mblk_io_submit option [ 1161.108591][T16423] EXT4-fs: dax option not supported [ 1161.176177][T13867] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1161.425079][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1161.714397][T16432] loop4: detected capacity change from 0 to 512 [ 1161.737444][T16432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1161.749135][T16432] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1161.798162][T16425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.805387][T16425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.814270][T16425] device bridge_slave_0 entered promiscuous mode [ 1161.823254][T16425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.830933][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.839283][T16425] device bridge_slave_1 entered promiscuous mode [ 1161.966981][T16439] loop4: detected capacity change from 0 to 1024 [ 1161.998935][T16445] syz.0.4284[16445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.999016][T16445] syz.0.4284[16445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1162.066007][T16439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1162.247118][T16439] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 1162.452848][T16425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.460000][T16425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.467315][T16425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.474403][T16425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.501488][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1162.536788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1162.555495][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.583837][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.597137][ T8645] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1162.635685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1162.676654][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.683812][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.726797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1162.744067][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.751241][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.792539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1162.801711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1162.809761][ T8645] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.821373][ T8645] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1162.832901][ T8645] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1162.845866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1163.435574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1163.924806][T16425] device veth0_vlan entered promiscuous mode [ 1163.940036][T16425] device veth1_macvtap entered promiscuous mode [ 1163.989693][ T9678] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1164.005582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1164.024318][ T8645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1164.045877][ T8645] usb 1-1: SerialNumber: syz [ 1164.057448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1164.070872][T16473] loop6: detected capacity change from 0 to 512 [ 1164.077498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1164.100640][T16474] loop3: detected capacity change from 0 to 1024 [ 1164.108275][T16474] EXT4-fs: Ignoring removed i_version option [ 1164.118203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1164.129936][T16474] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.4275: Invalid block bitmap block 0 in block_group 0 [ 1164.143760][T16474] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.4275: Failed to acquire dquot type 0 [ 1164.144116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1164.164203][T16474] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.4275: Freeing blocks not in datazone - block = 0, count = 4096 [ 1164.174234][T16473] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1164.185304][T16474] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.4275: Invalid inode bitmap blk 0 in block_group 0 [ 1164.198109][ T8718] EXT4-fs error (device loop3): ext4_release_dquot:6825: comm kworker/u4:54: Failed to release dquot type 0 [ 1164.212223][T16474] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 1164.219782][T16473] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1164.231250][T16474] EXT4-fs (loop3): 1 orphan inode deleted [ 1164.237114][T16474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1164.282953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1164.313879][T16473] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4289: bad orphan inode 131083 [ 1164.328984][T16473] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1164.330641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1164.412764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1164.422670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1164.432607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1164.440816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1164.501910][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1164.603324][T16491] syz.6.4296[16491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.603434][T16491] syz.6.4296[16491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.970957][T16425] EXT4-fs (loop3): unmounting filesystem. [ 1165.002661][ T28] kauditd_printk_skb: 510 callbacks suppressed [ 1165.002982][ T28] audit: type=1400 audit(1094.001:2898): avc: denied { map_create } for pid=16485 comm="syz.1.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1165.279878][ T28] audit: type=1400 audit(1094.001:2899): avc: denied { map_read map_write } for pid=16485 comm="syz.1.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1165.725510][ T8645] usb 1-1: 0:2 : does not exist [ 1165.917340][T16501] loop3: detected capacity change from 0 to 512 [ 1165.929511][ T28] audit: type=1400 audit(1094.011:2900): avc: denied { bpf } for pid=16485 comm="syz.1.4295" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1166.703756][T16501] ext3: Unknown parameter 'fsuuid' [ 1166.724209][ T8645] usb 1-1: USB disconnect, device number 30 [ 1166.777140][ T28] audit: type=1400 audit(1094.011:2901): avc: denied { prog_load } for pid=16485 comm="syz.1.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1166.948755][ T28] audit: type=1400 audit(1094.011:2902): avc: denied { perfmon } for pid=16485 comm="syz.1.4295" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1167.013844][ T28] audit: type=1400 audit(1094.011:2903): avc: denied { prog_run } for pid=16485 comm="syz.1.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1167.135236][ T28] audit: type=1400 audit(1094.076:2904): avc: denied { map_create } for pid=16485 comm="syz.1.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1167.157018][ T28] audit: type=1400 audit(1094.076:2905): avc: denied { create } for pid=16485 comm="syz.1.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1167.176282][ T28] audit: type=1400 audit(1094.086:2906): avc: denied { setopt } for pid=16485 comm="syz.1.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1167.195471][ T28] audit: type=1400 audit(1094.179:2907): avc: denied { unmount } for pid=16425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1167.219001][T16511] device pim6reg1 entered promiscuous mode [ 1167.246139][T16510] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1167.279668][T16510] FAT-fs (loop3): unable to read boot sector [ 1167.332396][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4301'. [ 1167.332911][T16519] syz.3.4303[16519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1167.344594][T16511] bridge0: port 4(macsec0) entered blocking state [ 1167.361642][T16519] syz.3.4303[16519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1167.372154][T16511] bridge0: port 4(macsec0) entered disabled state [ 1167.949924][T16529] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1167.953251][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1168.100412][T16534] loop4: detected capacity change from 0 to 256 [ 1168.134521][T16534] FAT-fs (loop4): Directory bread(block 64) failed [ 1168.141561][T16534] FAT-fs (loop4): Directory bread(block 65) failed [ 1168.149308][T16534] FAT-fs (loop4): Directory bread(block 66) failed [ 1168.156139][T16534] FAT-fs (loop4): Directory bread(block 67) failed [ 1168.163976][T16534] FAT-fs (loop4): Directory bread(block 68) failed [ 1168.171771][T16534] FAT-fs (loop4): Directory bread(block 69) failed [ 1168.178953][T16534] FAT-fs (loop4): Directory bread(block 70) failed [ 1168.185662][T16534] FAT-fs (loop4): Directory bread(block 71) failed [ 1168.192965][T16534] FAT-fs (loop4): Directory bread(block 72) failed [ 1168.199838][T16534] FAT-fs (loop4): Directory bread(block 73) failed [ 1168.244088][T16537] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4311'. [ 1168.325639][T16541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30992 sclass=netlink_route_socket pid=16541 comm=syz.0.4311 [ 1168.327274][T14303] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1168.491696][T16552] loop3: detected capacity change from 0 to 512 [ 1168.500837][T16552] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1168.507925][T16552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1168.573281][T14303] usb 7-1: Using ep0 maxpacket: 8 [ 1168.660900][T14303] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1168.700894][T16552] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.4316: bad orphan inode 131083 [ 1168.848223][T14303] usb 7-1: config 11 has no interfaces? [ 1168.890798][T16552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1168.972299][T14303] usb 7-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1169.145068][T14303] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.385597][T14303] usb 7-1: Product: syz [ 1169.389829][T14303] usb 7-1: Manufacturer: syz [ 1169.407651][T16425] EXT4-fs (loop3): unmounting filesystem. [ 1169.416110][T14303] usb 7-1: SerialNumber: syz [ 1169.687211][T14303] usb 7-1: USB disconnect, device number 21 [ 1170.005712][ T8645] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 1170.210577][ T8645] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1170.243840][ T8645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.270888][ T8645] usb 4-1: config 0 descriptor?? [ 1170.369933][T16585] 9pnet_fd: Insufficient options for proto=fd [ 1170.422619][ T28] kauditd_printk_skb: 437 callbacks suppressed [ 1170.422639][ T28] audit: type=1400 audit(1099.221:3339): avc: denied { bpf } for pid=16583 comm="syz.0.4326" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1170.450373][ T28] audit: type=1400 audit(1099.221:3340): avc: denied { prog_load } for pid=16583 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1170.469582][ T28] audit: type=1400 audit(1099.221:3341): avc: denied { perfmon } for pid=16583 comm="syz.0.4326" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1170.541584][ T28] audit: type=1400 audit(1099.221:3342): avc: denied { prog_run } for pid=16583 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1170.861413][ T28] audit: type=1400 audit(1099.221:3343): avc: denied { mounton } for pid=16583 comm="syz.0.4326" path="/58" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1171.141463][ T28] audit: type=1400 audit(1099.230:3344): avc: denied { bpf } for pid=16583 comm="syz.0.4326" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1171.328601][T16591] loop4: detected capacity change from 0 to 512 [ 1171.348056][T16573] 9pnet_fd: Insufficient options for proto=fd [ 1171.375970][T16591] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1171.410153][ T28] audit: type=1400 audit(1099.249:3345): avc: denied { map_create } for pid=16583 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1171.432688][ T28] audit: type=1400 audit(1099.249:3346): avc: denied { perfmon } for pid=16583 comm="syz.0.4326" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1171.453435][ T28] audit: type=1400 audit(1099.249:3347): avc: denied { map_read map_write } for pid=16583 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1171.456701][T16591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1171.473958][ T28] audit: type=1400 audit(1099.249:3348): avc: denied { prog_load } for pid=16583 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1171.492581][T16594] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4329'. [ 1171.511251][T16594] tc_dump_action: action bad kind [ 1171.538163][T16591] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4328: bad orphan inode 131083 [ 1171.549317][T16591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1171.624586][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1172.066094][ T8645] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1172.108125][ T8645] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1172.180854][T16612] loop4: detected capacity change from 0 to 256 [ 1172.268959][ T8645] asix: probe of 4-1:0.0 failed with error -71 [ 1172.273238][T16612] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1173.040027][ T8645] usb 4-1: USB disconnect, device number 27 [ 1173.061300][T16619] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1173.362623][ T9678] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1173.794117][ T9678] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.926256][ T9678] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.501177][ T9678] usb 7-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1174.525874][ T9678] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.609588][ T9678] usb 7-1: config 0 descriptor?? [ 1174.752395][T16652] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1174.857910][T16655] futex_wake_op: syz.1.4348 tries to shift op by -1; fix this program [ 1175.032700][T16663] loop4: detected capacity change from 0 to 512 [ 1175.072654][T16663] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1175.107321][T16664] syz.1.4350[16664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.107401][T16664] syz.1.4350[16664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.155204][T16663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1175.222082][T16663] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4352: bad orphan inode 131083 [ 1175.255890][T16663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1175.348990][T16668] syz.6.4340[16668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.349070][T16668] syz.6.4340[16668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.364430][T16668] loop6: detected capacity change from 0 to 128 [ 1175.391399][T16668] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1175.421836][T16668] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1175.485404][T16672] loop3: detected capacity change from 0 to 1024 [ 1175.551449][T16672] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1175.592527][T16672] EXT4-fs (loop3): invalid journal inode [ 1175.614762][T16672] EXT4-fs (loop3): can't get journal size [ 1175.645183][T16672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1175.954160][ T28] kauditd_printk_skb: 345 callbacks suppressed [ 1175.954191][ T28] audit: type=1400 audit(1104.459:3694): avc: denied { unmount } for pid=13940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1175.981981][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1176.044229][ T28] audit: type=1400 audit(1104.506:3695): avc: denied { read write } for pid=13940 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1176.137328][ T28] audit: type=1400 audit(1104.506:3696): avc: denied { read write open } for pid=13940 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1176.162413][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.178702][ T28] audit: type=1400 audit(1104.506:3697): avc: denied { ioctl } for pid=13940 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1176.209267][ T28] audit: type=1400 audit(1104.525:3698): avc: denied { bpf } for pid=16678 comm="syz.0.4356" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1176.345217][ T28] audit: type=1400 audit(1104.525:3699): avc: denied { map_create } for pid=16678 comm="syz.0.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.633894][ T28] audit: type=1400 audit(1104.525:3700): avc: denied { map_read map_write } for pid=16678 comm="syz.0.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.653436][ T28] audit: type=1400 audit(1104.525:3701): avc: denied { bpf } for pid=16679 comm="syz.4.4355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1176.680780][ T9678] usbhid 7-1:0.0: can't add hid device: -71 [ 1176.683142][ T28] audit: type=1400 audit(1104.534:3702): avc: denied { map_create } for pid=16679 comm="syz.4.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.686772][ T9678] usbhid: probe of 7-1:0.0 failed with error -71 [ 1176.759488][ T9678] usb 7-1: USB disconnect, device number 22 [ 1176.766192][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1176.773170][ T28] audit: type=1400 audit(1104.534:3703): avc: denied { map_read map_write } for pid=16679 comm="syz.4.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.841539][T16690] loop6: detected capacity change from 0 to 512 [ 1176.853068][T16688] incfs: Error accessing: ./file0. [ 1176.866689][T16690] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1176.882370][T16688] incfs: mount failed -20 [ 1176.887924][T16690] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1176.927533][T16690] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4358: bad orphan inode 131083 [ 1176.967522][T16690] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1177.158210][T16694] futex_wake_op: syz.0.4359 tries to shift op by -1; fix this program [ 1179.012310][T16711] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1179.265252][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1179.292043][T16425] EXT4-fs (loop3): unmounting filesystem. [ 1179.353469][T16717] loop6: detected capacity change from 0 to 512 [ 1179.380287][T16717] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1179.402239][T16717] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1179.436263][T16717] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4365: bad orphan inode 131083 [ 1179.457021][T16717] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1180.161765][ T8645] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1180.256562][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1180.355769][ T8645] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1180.366756][ T8645] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.377750][ T8645] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.387616][ T8645] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1180.793402][ T8645] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1180.803109][ T8645] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1180.811308][ T8645] usb 4-1: Manufacturer: syz [ 1180.812269][T16746] device macsec1 entered promiscuous mode [ 1180.823782][T16746] device vlan1 entered promiscuous mode [ 1180.832336][ T8645] usb 4-1: config 0 descriptor?? [ 1180.842844][T16746] device vlan1 left promiscuous mode [ 1181.316694][ T28] kauditd_printk_skb: 276 callbacks suppressed [ 1181.317083][ T28] audit: type=1400 audit(1109.426:3980): avc: denied { bpf } for pid=16751 comm="syz.0.4377" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1181.527672][ T28] audit: type=1400 audit(1109.426:3981): avc: denied { prog_load } for pid=16751 comm="syz.0.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1181.547175][ T8645] appleir 0003:05AC:8243.0083: unknown main item tag 0x0 [ 1181.558082][ T8645] appleir 0003:05AC:8243.0083: No inputs registered, leaving [ 1181.601026][ T8645] appleir 0003:05AC:8243.0083: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1181.616840][ T28] audit: type=1400 audit(1109.436:3982): avc: denied { bpf } for pid=16751 comm="syz.0.4377" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1181.682994][ T8645] usb 4-1: USB disconnect, device number 28 [ 1181.719741][ T28] audit: type=1400 audit(1109.436:3983): avc: denied { prog_load } for pid=16751 comm="syz.0.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1181.770697][T16765] fido_id[16765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1181.811355][ T28] audit: type=1400 audit(1109.436:3984): avc: denied { map_create } for pid=16751 comm="syz.0.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1181.856117][ T28] audit: type=1400 audit(1109.436:3985): avc: denied { map_read map_write } for pid=16751 comm="syz.0.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1181.896338][ T28] audit: type=1400 audit(1109.436:3986): avc: denied { perfmon } for pid=16751 comm="syz.0.4377" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1181.994598][T16769] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1182.001208][T16769] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 1182.008973][T16769] audit: backlog limit exceeded [ 1182.267868][ T291] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1182.868451][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.962804][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.116869][T16781] loop6: detected capacity change from 0 to 16 [ 1183.129884][ T291] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1183.133309][T16781] erofs: (device loop6): mounted with root inode @ nid 36. [ 1183.148835][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.162031][T16781] xt_l2tp: v2 doesn't support IP mode [ 1183.167992][ T291] usb 5-1: config 0 descriptor?? [ 1183.392478][T16762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.424221][T16762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.530354][T16809] loop6: detected capacity change from 0 to 512 [ 1184.580857][T16809] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1184.607275][T16809] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1184.650814][ T291] uclogic 0003:256C:006D.0084: failed retrieving string descriptor #100: -71 [ 1184.697917][T16809] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4396: bad orphan inode 131083 [ 1184.708211][ T291] uclogic 0003:256C:006D.0084: failed retrieving pen parameters: -71 [ 1184.718817][T16809] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1184.881057][ T291] uclogic 0003:256C:006D.0084: failed probing pen v1 parameters: -71 [ 1184.892182][ T291] uclogic 0003:256C:006D.0084: failed probing parameters: -71 [ 1184.902208][ T291] uclogic: probe of 0003:256C:006D.0084 failed with error -71 [ 1184.915569][ T291] usb 5-1: USB disconnect, device number 44 [ 1185.744672][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1185.904226][T16811] loop3: detected capacity change from 0 to 40427 [ 1185.923881][T16811] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1185.968306][T16811] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1186.017536][T16811] F2FS-fs (loop3): invalid crc value [ 1186.051763][T16811] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1186.166279][T16811] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1186.176668][T16811] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1186.561361][T16811] incfs_lookup_dentry err:-111 [ 1186.561660][T16843] incfs_lookup_dentry err:-107 [ 1186.582260][T16811] incfs: Can't find or create .index dir in ./file0 [ 1186.629752][T16811] incfs: mount failed -111 [ 1186.661388][T16843] incfs: Can't find or create .index dir in ./file0 [ 1186.675254][ T28] kauditd_printk_skb: 429 callbacks suppressed [ 1186.675299][ T28] audit: type=1400 audit(1114.477:4392): avc: denied { prog_load } for pid=16849 comm="syz.6.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1186.699301][T16843] incfs: mount failed -107 [ 1186.740385][ T28] audit: type=1400 audit(1114.487:4393): avc: denied { bpf } for pid=16849 comm="syz.6.4405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1186.742413][T16850] loop6: detected capacity change from 0 to 256 [ 1186.809278][T16848] loop4: detected capacity change from 0 to 512 [ 1186.816206][ T28] audit: type=1400 audit(1114.487:4394): avc: denied { perfmon } for pid=16849 comm="syz.6.4405" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1186.902090][T16848] ext4: Unknown parameter 'uid' [ 1186.939081][T16850] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1186.982033][ T28] audit: type=1400 audit(1114.534:4395): avc: denied { read write } for pid=16849 comm="syz.6.4405" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1187.235965][ T28] audit: type=1400 audit(1114.534:4396): avc: denied { open } for pid=16849 comm="syz.6.4405" path="/dev/loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1188.404732][ T28] audit: type=1400 audit(1114.543:4397): avc: denied { ioctl } for pid=16849 comm="syz.6.4405" path="/dev/loop6" dev="devtmpfs" ino=124 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.011987][ T28] audit: type=1400 audit(1114.608:4398): avc: denied { read write } for pid=16837 comm="syz.4.4403" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.037271][ T28] audit: type=1400 audit(1114.608:4399): avc: denied { open } for pid=16837 comm="syz.4.4403" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.062089][ T28] audit: type=1400 audit(1114.608:4400): avc: denied { ioctl } for pid=16837 comm="syz.4.4403" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.088072][ T28] audit: type=1400 audit(1114.636:4401): avc: denied { unmount } for pid=16425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1189.700230][T16873] loop3: detected capacity change from 0 to 2048 [ 1189.767805][T16873] Alternate GPT is invalid, using primary GPT. [ 1190.051606][T16873] loop3: p1 p2 p3 [ 1190.105063][ T102] Alternate GPT is invalid, using primary GPT. [ 1190.117933][ T102] loop3: p1 p2 p3 [ 1190.460685][T16885] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1190.550817][T16887] syz.6.4415[16887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.550893][T16887] syz.6.4415[16887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.671425][T16891] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 1192.083777][ T28] kauditd_printk_skb: 190 callbacks suppressed [ 1192.083797][ T28] audit: type=1400 audit(1119.519:4556): avc: denied { create } for pid=16893 comm="syz.0.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1192.083826][ T28] audit: type=1400 audit(1119.519:4557): avc: denied { write } for pid=16893 comm="syz.0.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1192.083850][ T28] audit: type=1400 audit(1119.519:4558): avc: denied { read } for pid=16893 comm="syz.0.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1192.093636][ T28] audit: type=1400 audit(1119.557:4559): avc: denied { bpf } for pid=16883 comm="syz.1.4414" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1192.093939][ T28] audit: type=1400 audit(1119.557:4560): avc: denied { prog_load } for pid=16883 comm="syz.1.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1192.093968][ T28] audit: type=1400 audit(1119.557:4561): avc: denied { perfmon } for pid=16883 comm="syz.1.4414" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1192.094300][ T28] audit: type=1400 audit(1119.557:4562): avc: denied { prog_run } for pid=16883 comm="syz.1.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1192.106923][ T28] audit: type=1400 audit(1119.566:4563): avc: denied { mounton } for pid=16883 comm="syz.1.4414" path="/109/file0" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1192.107498][T16888] overlayfs: failed to clone upperpath [ 1192.110886][ T28] audit: type=1400 audit(1119.566:4564): avc: denied { bpf } for pid=16893 comm="syz.0.4416" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1192.111248][ T28] audit: type=1400 audit(1119.566:4565): avc: denied { prog_load } for pid=16893 comm="syz.0.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1192.163439][T16895] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1192.281808][T16898] syz.1.4417[16898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1192.281922][T16898] syz.1.4417[16898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1192.484386][ T40] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1192.573784][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1192.691176][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 1192.695099][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1192.696271][ T40] usb 1-1: config 11 has no interfaces? [ 1192.698358][ T40] usb 1-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=dd.a1 [ 1192.698406][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.698447][ T40] usb 1-1: Product: syz [ 1192.698480][ T40] usb 1-1: Manufacturer: syz [ 1192.698514][ T40] usb 1-1: SerialNumber: syz [ 1193.610078][ T40] usb 1-1: USB disconnect, device number 31 [ 1194.530465][T16920] loop6: detected capacity change from 0 to 512 [ 1194.553122][T16920] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1194.570224][T16920] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1194.595733][T16920] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4423: bad orphan inode 131083 [ 1194.606967][T16920] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1194.744690][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1195.491357][T16940] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4426'. [ 1195.801833][T16943] syz.0.4428[16943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1195.801928][T16943] syz.0.4428[16943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1196.732598][T16957] input: syz1 as /devices/virtual/input/input51 [ 1197.333625][T16966] loop6: detected capacity change from 0 to 512 [ 1197.352745][T16966] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1197.483469][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 1197.483489][ T28] audit: type=1400 audit(1124.589:4815): avc: denied { read write } for pid=16425 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1197.611584][ T28] audit: type=1400 audit(1124.589:4816): avc: denied { open } for pid=16425 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1197.643720][ T28] audit: type=1400 audit(1124.589:4817): avc: denied { ioctl } for pid=16425 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1197.671671][T16962] loop4: detected capacity change from 0 to 40427 [ 1197.710573][ T28] audit: type=1400 audit(1124.636:4818): avc: denied { execmem } for pid=16969 comm="syz.3.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1197.733618][ T28] audit: type=1400 audit(1124.692:4819): avc: denied { bpf } for pid=16964 comm="syz.0.4434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1197.861322][T16972] input: syz1 as /devices/virtual/input/input52 [ 1197.940707][ T28] audit: type=1400 audit(1124.692:4820): avc: denied { prog_load } for pid=16964 comm="syz.0.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1197.959613][ T28] audit: type=1400 audit(1124.692:4821): avc: denied { bpf } for pid=16964 comm="syz.0.4434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1198.004239][ T28] audit: type=1400 audit(1124.692:4822): avc: denied { map_create } for pid=16964 comm="syz.0.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1198.042523][T16962] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1198.049626][ T28] audit: type=1400 audit(1124.692:4823): avc: denied { map_read map_write } for pid=16964 comm="syz.0.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1198.070832][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1198.117132][ T28] audit: type=1400 audit(1124.692:4824): avc: denied { prog_load } for pid=16964 comm="syz.0.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1198.126186][T16977] loop6: detected capacity change from 0 to 256 [ 1198.190960][T16962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1198.478758][ T8645] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1198.523995][T16986] xt_hashlimit: size too large, truncated to 1048576 [ 1198.646347][ T8645] usb 7-1: device descriptor read/64, error -71 [ 1198.908701][T13940] syz-executor: attempt to access beyond end of device [ 1198.908701][T13940] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1198.934575][ T8645] usb 7-1: device descriptor read/64, error -71 [ 1199.074393][T16989] 9pnet: Could not find request transport: 0x00000000000000030x0000000000000005 [ 1199.233832][ T8645] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1199.394248][ T8645] usb 7-1: device descriptor read/64, error -71 [ 1199.685896][ T8645] usb 7-1: device descriptor read/64, error -71 [ 1200.131377][T17015] loop4: detected capacity change from 0 to 512 [ 1200.304251][T17015] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1200.389212][T17015] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1200.884926][T17020] overlayfs: failed to resolve './file0': -2 [ 1200.912865][ T8645] usb usb7-port1: attempt power cycle [ 1200.923111][T17015] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4448: bad orphan inode 131083 [ 1200.944136][T17015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1201.073700][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4449'. [ 1201.192494][T13940] EXT4-fs (loop4): unmounting filesystem. [ 1201.293583][T17029] overlayfs: unrecognized mount option "verity=require" or missing value [ 1201.607197][ T8645] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1201.764545][T17046] loop4: detected capacity change from 0 to 512 [ 1201.774813][T17046] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1201.784804][T17046] EXT4-fs warning (device loop4): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 1201.926240][T17055] loop6: detected capacity change from 0 to 512 [ 1201.934706][T17055] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1201.971498][T17055] EXT4-fs (loop6): 1 truncate cleaned up [ 1201.980578][T17055] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1202.098916][ T8645] usb 7-1: device not accepting address 25, error -71 [ 1202.732155][T17072] loop4: detected capacity change from 0 to 256 [ 1202.761458][T17072] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1202.793815][T17072] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1202.858595][T17072] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1202.859609][ T28] kauditd_printk_skb: 484 callbacks suppressed [ 1202.859627][ T28] audit: type=1400 audit(1129.622:5309): avc: denied { unmount } for pid=12177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1202.898179][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1202.963699][T17079] loop6: detected capacity change from 0 to 256 [ 1202.968649][T17078] overlayfs: failed to clone upperpath [ 1202.989103][T17079] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1202.999298][ T28] audit: type=1400 audit(1129.640:5310): avc: denied { mount } for pid=17066 comm="syz.4.4462" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1203.021623][T17079] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1203.024410][T17079] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1203.053948][ T28] audit: type=1400 audit(1129.640:5311): avc: denied { read write } for pid=17066 comm="syz.4.4462" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1203.078924][ T28] audit: type=1400 audit(1129.640:5312): avc: denied { open } for pid=17066 comm="syz.4.4462" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1203.107159][ T28] audit: type=1400 audit(1129.640:5313): avc: denied { ioctl } for pid=17066 comm="syz.4.4462" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1203.157966][T17079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1203.158213][T17078] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1203.164559][T17079] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 1203.178980][T17079] audit: backlog limit exceeded [ 1203.183922][T17079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1203.410362][T17089] loop6: detected capacity change from 0 to 2048 [ 1203.480014][T17089] Alternate GPT is invalid, using primary GPT. [ 1203.488372][T17089] loop6: p1 p2 p3 [ 1204.010368][T17110] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 1204.552242][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1205.017680][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1205.186647][T17123] loop6: detected capacity change from 0 to 1024 [ 1205.207333][T17123] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1205.230599][T17123] EXT4-fs (loop6): invalid journal inode [ 1205.240532][T17123] EXT4-fs (loop6): can't get journal size [ 1205.275939][T17123] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1205.772080][T17135] loop4: detected capacity change from 0 to 512 [ 1205.783967][ T24] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 1205.798825][ T24] usb 4-1: config 0 has no interface number 0 [ 1205.807656][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 1205.817563][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.844375][T17135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1205.870833][ T24] usb 4-1: Product: syz [ 1205.909044][T17135] EXT4-fs (loop4): 1 truncate cleaned up [ 1205.915012][T17135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1206.241491][ T24] usb 4-1: Manufacturer: syz [ 1206.264485][ T24] usb 4-1: SerialNumber: syz [ 1206.396759][ T24] usb 4-1: config 0 descriptor?? [ 1208.382849][ T28] kauditd_printk_skb: 300 callbacks suppressed [ 1208.382870][ T28] audit: type=1400 audit(1132.942:5607): avc: denied { ioctl } for pid=17111 comm="syz.3.4474" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1208.427342][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1208.522372][T17138] EXT4-fs (loop4): unmounting filesystem. [ 1208.541454][ T28] audit: type=1400 audit(1132.952:5608): avc: denied { setopt } for pid=17140 comm="syz.1.4480" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1208.578628][ T28] audit: type=1400 audit(1133.176:5609): avc: denied { bpf } for pid=17139 comm="syz.0.4481" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1208.600114][ T28] audit: type=1400 audit(1133.176:5610): avc: denied { map_create } for pid=17139 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1208.619203][ T28] audit: type=1400 audit(1133.176:5611): avc: denied { map_read map_write } for pid=17139 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1208.638950][ T28] audit: type=1400 audit(1133.279:5612): avc: denied { prog_load } for pid=17139 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1208.657917][ T28] audit: type=1400 audit(1133.279:5613): avc: denied { perfmon } for pid=17139 comm="syz.0.4481" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1208.678741][ T28] audit: type=1400 audit(1133.279:5614): avc: denied { prog_run } for pid=17139 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1208.700500][ T24] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 1208.707202][ T24] usb 4-1: No valid video chain found. [ 1208.716207][ T28] audit: type=1400 audit(1133.578:5615): avc: denied { bpf } for pid=17139 comm="syz.0.4481" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1208.736653][ T28] audit: type=1400 audit(1133.578:5616): avc: denied { map_create } for pid=17139 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1208.783065][T17152] loop6: detected capacity change from 0 to 2048 [ 1208.845219][T17152] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1208.994868][ T8706] kworker/dying (8706) used greatest stack depth: 19488 bytes left [ 1209.075338][T17152] overlayfs: './bus' not a directory [ 1209.090771][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1209.132613][T12177] EXT4-fs (loop6): unmounting filesystem. [ 1209.186422][T17164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.193875][T17164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.202646][T17164] device bridge_slave_0 entered promiscuous mode [ 1209.210901][T17164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.218075][T17164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.226711][T17164] device bridge_slave_1 entered promiscuous mode [ 1209.300377][T17164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.307489][T17164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.314795][T17164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.321852][T17164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.627837][ T40] usb 4-1: USB disconnect, device number 29 [ 1209.638937][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.651780][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.662696][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1209.672004][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.699563][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.707507][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.715493][ T24] usb 1-1: config 0 descriptor?? [ 1209.739374][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1209.748729][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1209.764854][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1209.773703][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1209.782652][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.789771][ T7208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.798117][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1209.806716][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1209.815544][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.822816][ T7208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.839152][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1209.848258][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1209.871621][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1209.880369][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1209.899415][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1209.908621][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1209.925800][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1209.934922][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1209.947767][T17164] device veth0_vlan entered promiscuous mode [ 1209.954805][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1209.991308][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1210.007689][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1210.016284][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1210.027272][T17164] device veth1_macvtap entered promiscuous mode [ 1210.038847][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1210.047104][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1210.716054][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1210.763830][ T24] pyra 0003:1E7D:2CF6.0085: item fetching failed at offset 5/7 [ 1210.775277][ T24] pyra 0003:1E7D:2CF6.0085: parse failed [ 1210.787675][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1210.801913][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1210.907879][ T24] pyra: probe of 0003:1E7D:2CF6.0085 failed with error -22 [ 1210.995103][ T24] usb 1-1: USB disconnect, device number 32 [ 1211.672936][T17200] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1211.683051][T17200] device gretap0 entered promiscuous mode [ 1211.690733][T17200] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1211.699716][T17200] 0ªX¹¦D: renamed from gretap0 [ 1211.762598][T17200] device 30ªX¹¦D left promiscuous mode [ 1211.779785][T17200] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1211.832303][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1212.145859][T17203] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1212.459921][T17207] loop7: detected capacity change from 0 to 512 [ 1212.479595][T17207] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1212.495705][T17207] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1212.515419][T17207] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.4500: bad orphan inode 131083 [ 1212.526562][T17207] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1212.756940][T17216] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1212.791027][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.811506][ T24] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1212.820598][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.859096][ T24] usb 4-1: config 0 descriptor?? [ 1213.389723][T17191] IPv6: sit1: Disabled Multicast RS [ 1213.390671][T17219] syz.6.4503[17219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.395055][T17219] syz.6.4503[17219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.412022][ T24] hid-generic 0003:1532:010D.0086: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 1213.544602][T17164] EXT4-fs (loop7): unmounting filesystem. [ 1213.784150][ T28] kauditd_printk_skb: 336 callbacks suppressed [ 1213.784255][ T28] audit: type=1400 audit(1139.752:5953): avc: denied { create } for pid=17218 comm="syz.1.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1214.846780][ T24] usb 4-1: USB disconnect, device number 30 [ 1214.877153][ T28] audit: type=1400 audit(1139.771:5954): avc: denied { bpf } for pid=17218 comm="syz.1.4502" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1214.899770][ T8127] Bluetooth: hci0: command 0x1003 tx timeout [ 1214.905958][ T28] audit: type=1400 audit(1139.771:5955): avc: denied { map_create } for pid=17218 comm="syz.1.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1214.906442][T11569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1215.082633][ T28] audit: type=1400 audit(1139.771:5956): avc: denied { map_read map_write } for pid=17218 comm="syz.1.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1215.108693][ T28] audit: type=1400 audit(1139.799:5957): avc: denied { prog_load } for pid=17218 comm="syz.1.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1215.141445][T17214] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1215.147815][ T28] audit: type=1400 audit(1139.911:5958): avc: denied { execmem } for pid=17223 comm="syz.7.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1215.186530][ T28] audit: type=1400 audit(1140.107:5959): avc: denied { bpf } for pid=17223 comm="syz.7.4504" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1215.218043][ T28] audit: type=1400 audit(1140.126:5960): avc: denied { prog_load } for pid=17223 comm="syz.7.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1215.256123][ T28] audit: type=1400 audit(1140.135:5961): avc: denied { perfmon } for pid=17223 comm="syz.7.4504" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1215.291166][ T28] audit: type=1400 audit(1141.015:5962): avc: denied { read write } for pid=17164 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1215.350983][T17240] syz.7.4508[17240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1215.351091][T17240] syz.7.4508[17240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1216.185589][T17253] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1217.290219][ C1] ================================================================== [ 1217.298350][ C1] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 1217.305411][ C1] Write of size 8 at addr ffff888153884a00 by task syz.7.4508/17239 [ 1217.313406][ C1] [ 1217.315743][ C1] CPU: 1 PID: 17239 Comm: syz.7.4508 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 1217.325650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1217.335733][ C1] Call Trace: [ 1217.339041][ C1] [ 1217.341903][ C1] __dump_stack+0x21/0x24 [ 1217.346264][ C1] dump_stack_lvl+0xee/0x150 [ 1217.350897][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1217.355986][ C1] ? profile_hits+0x8e5/0xbe0 [ 1217.360700][ C1] ? __run_timers+0x32b/0x9a0 [ 1217.365402][ C1] print_address_description+0x71/0x210 [ 1217.370979][ C1] print_report+0x4a/0x60 [ 1217.375332][ C1] kasan_report+0x122/0x150 [ 1217.379859][ C1] ? __run_timers+0x32b/0x9a0 [ 1217.384559][ C1] __asan_report_store8_noabort+0x17/0x20 [ 1217.390307][ C1] __run_timers+0x32b/0x9a0 [ 1217.394836][ C1] ? sched_clock+0x9/0x10 [ 1217.399186][ C1] ? sched_clock_cpu+0x6e/0x250 [ 1217.404054][ C1] ? calc_index+0x200/0x200 [ 1217.408579][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1217.413808][ C1] run_timer_softirq+0x6a/0xf0 [ 1217.418608][ C1] handle_softirqs+0x1d7/0x600 [ 1217.423393][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1217.428616][ C1] __irq_exit_rcu+0x52/0xf0 [ 1217.433137][ C1] irq_exit_rcu+0x9/0x10 [ 1217.437398][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1217.443056][ C1] [ 1217.446002][ C1] [ 1217.448946][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1217.454954][ C1] RIP: 0010:finish_task_switch+0x173/0x7b0 [ 1217.460794][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 19 ec 67 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 25 87 a3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 1217.480430][ C1] RSP: 0000:ffffc900055e7be0 EFLAGS: 00000282 [ 1217.486535][ C1] RAX: 0000000080000001 RBX: ffff88812f038b48 RCX: 0000000000000000 [ 1217.494533][ C1] RDX: 0000000000000001 RSI: ffffffff85a9f840 RDI: 00000000ffffffff [ 1217.502534][ C1] RBP: ffffc900055e7c30 R08: dffffc0000000000 R09: ffffed1022019799 [ 1217.510538][ C1] R10: ffffed1022019799 R11: 1ffff11022019798 R12: ffff8881f7137d40 [ 1217.518536][ C1] R13: 0000000000000000 R14: ffff8881f71388a0 R15: ffff88812f038000 [ 1217.526537][ C1] ? __switch_to_asm+0x3a/0x60 [ 1217.531338][ C1] __schedule+0xb8f/0x14e0 [ 1217.535793][ C1] ? release_firmware_map_entry+0x194/0x194 [ 1217.541721][ C1] ? finish_task_switch+0x16b/0x7b0 [ 1217.546959][ C1] preempt_schedule_irq+0x9b/0x110 [ 1217.552104][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1217.557855][ C1] ? __schedule+0xb8f/0x14e0 [ 1217.562491][ C1] ? __cfi_get_timespec64+0x10/0x10 [ 1217.567723][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 1217.573676][ C1] irqentry_exit+0x37/0x40 [ 1217.578125][ C1] sysvec_apic_timer_interrupt+0x64/0xc0 [ 1217.583783][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1217.589794][ C1] RIP: 0010:exit_to_user_mode_loop+0x4a/0xb0 [ 1217.595803][ C1] Code: 00 e8 0a 4a 59 00 e8 a5 f0 f3 00 fa e8 af 7a 8a 03 65 48 8b 05 07 a7 a3 7e 4c 8b 30 41 f7 c6 0e 30 02 00 74 5b fb 41 f6 c6 08 <74> 05 e8 6f b9 8f 03 41 f7 c6 00 10 00 00 74 08 48 89 df e8 5e 00 [ 1217.615429][ C1] RSP: 0000:ffffc900055e7ed0 EFLAGS: 00000202 [ 1217.621523][ C1] RAX: 0000000000000001 RBX: ffffc900055e7f58 RCX: a398f5a8e1507200 [ 1217.629512][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc900055e7f58 [ 1217.637505][ C1] RBP: ffffc900055e7ee0 R08: dffffc0000000000 R09: ffffed1025e07001 [ 1217.645494][ C1] R10: ffffed1025e07001 R11: 1ffff11025e07000 R12: 0000000000000000 [ 1217.653490][ C1] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88812f038000 [ 1217.661599][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 1217.667113][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 1217.672644][ C1] irqentry_exit+0x12/0x40 [ 1217.677115][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 1217.682272][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1217.687772][ C1] RIP: 0033:0x7f541de4d9c3 [ 1217.692232][ C1] Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 [ 1217.702914][T17258] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1217.711869][ C1] RSP: 002b:00007ffc15cbdb78 EFLAGS: 00000202 [ 1217.711897][ C1] RAX: 0000000081a84bb9 RBX: 00007f541ece5720 RCX: ffffffff81a84bb9 [ 1217.711915][ C1] RDX: 0000000000000bb9 RSI: ffffffff81a84bb9 RDI: 0000000000000011 [ 1217.740000][ C1] RBP: ffffffff81a84bb9 R08: 00007f541e1a0000 R09: 00007f541e1a2000 [ 1217.747988][ C1] R10: 0000000081a84bbd R11: 0000000000000011 R12: 0000000000000011 [ 1217.755968][ C1] R13: 0000000000000000 R14: ffffffff81a84f83 R15: 0000000000002355 [ 1217.763960][ C1] ? sync_mm_rss+0xe3/0x280 [ 1217.768481][ C1] ? show_pgsize_migration_enabled+0x29/0x40 [ 1217.774467][ C1] ? show_pgsize_migration_enabled+0x29/0x40 [ 1217.780452][ C1] ? show_pgsize_migration_enabled+0x29/0x40 [ 1217.786459][ C1] [ 1217.789482][ C1] [ 1217.791818][ C1] Allocated by task 17214: [ 1217.796230][ C1] kasan_set_track+0x4b/0x70 [ 1217.800826][ C1] kasan_save_alloc_info+0x25/0x30 [ 1217.805950][ C1] __kasan_kmalloc+0x95/0xb0 [ 1217.810547][ C1] __kmalloc+0xb1/0x1e0 [ 1217.814712][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 1217.819744][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 1217.824776][ C1] tty_ioctl+0x8ef/0xc60 [ 1217.829022][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 1217.833715][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1217.838319][ C1] x64_sys_call+0x58b/0x9a0 [ 1217.842841][ C1] do_syscall_64+0x4c/0xa0 [ 1217.847271][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.853176][ C1] [ 1217.855501][ C1] Freed by task 17214: [ 1217.859569][ C1] kasan_set_track+0x4b/0x70 [ 1217.864168][ C1] kasan_save_free_info+0x31/0x50 [ 1217.869204][ C1] ____kasan_slab_free+0x132/0x180 [ 1217.874324][ C1] __kasan_slab_free+0x11/0x20 [ 1217.879096][ C1] slab_free_freelist_hook+0xc2/0x190 [ 1217.884482][ C1] __kmem_cache_free+0xb7/0x1b0 [ 1217.889344][ C1] kfree+0x6f/0xf0 [ 1217.893076][ C1] hci_release_dev+0x13ad/0x1500 [ 1217.898020][ C1] bt_host_release+0x82/0x90 [ 1217.902619][ C1] device_release+0xa4/0x1d0 [ 1217.907212][ C1] kobject_put+0x19d/0x280 [ 1217.911632][ C1] put_device+0x1f/0x30 [ 1217.915799][ C1] hci_dev_cmd+0x265/0x720 [ 1217.920223][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 1217.924916][ C1] sock_do_ioctl+0x101/0x310 [ 1217.929520][ C1] sock_ioctl+0x4d8/0x6e0 [ 1217.933856][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 1217.938552][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1217.943162][ C1] x64_sys_call+0x58b/0x9a0 [ 1217.947682][ C1] do_syscall_64+0x4c/0xa0 [ 1217.952112][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.958010][ C1] [ 1217.960340][ C1] Last potentially related work creation: [ 1217.966055][ C1] kasan_save_stack+0x3a/0x60 [ 1217.970736][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 1217.976122][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1217.981944][ C1] insert_work+0x51/0x300 [ 1217.986288][ C1] __queue_work+0x9b1/0xd30 [ 1217.990799][ C1] queue_work_on+0xd2/0x140 [ 1217.995324][ C1] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 1218.000270][ C1] hci_cmd_sync_status+0x53/0x120 [ 1218.005303][ C1] hci_dev_cmd+0x628/0x720 [ 1218.009732][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 1218.014419][ C1] sock_do_ioctl+0x101/0x310 [ 1218.019019][ C1] sock_ioctl+0x4d8/0x6e0 [ 1218.023355][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 1218.028050][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1218.032655][ C1] x64_sys_call+0x58b/0x9a0 [ 1218.037208][ C1] do_syscall_64+0x4c/0xa0 [ 1218.041642][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.047541][ C1] [ 1218.049872][ C1] Second to last potentially related work creation: [ 1218.056461][ C1] kasan_save_stack+0x3a/0x60 [ 1218.061149][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 1218.066536][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1218.072351][ C1] insert_work+0x51/0x300 [ 1218.076700][ C1] __queue_work+0x9b1/0xd30 [ 1218.081227][ C1] queue_work_on+0xd2/0x140 [ 1218.085754][ C1] hci_cmd_timeout+0x191/0x200 [ 1218.090539][ C1] process_one_work+0x71f/0xc40 [ 1218.095393][ C1] worker_thread+0xa29/0x11f0 [ 1218.100117][ C1] kthread+0x281/0x320 [ 1218.104199][ C1] ret_from_fork+0x1f/0x30 [ 1218.108625][ C1] [ 1218.110949][ C1] The buggy address belongs to the object at ffff888153884000 [ 1218.110949][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 1218.125005][ C1] The buggy address is located 2560 bytes inside of [ 1218.125005][ C1] 8192-byte region [ffff888153884000, ffff888153886000) [ 1218.138474][ C1] [ 1218.140812][ C1] The buggy address belongs to the physical page: [ 1218.147235][ C1] page:ffffea00054e2000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x153880 [ 1218.157472][ C1] head:ffffea00054e2000 order:3 compound_mapcount:0 compound_pincount:0 [ 1218.165802][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 1218.171880][ C1] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 1218.180468][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1218.189047][ C1] page dumped because: kasan: bad access detected [ 1218.195469][ C1] page_owner tracks the page as allocated [ 1218.201182][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 16573, tgid 16567 (syz.3.4320), ts 1170610602299, free_ts 1170239526118 [ 1218.222198][ C1] post_alloc_hook+0x1f5/0x210 [ 1218.226984][ C1] prep_new_page+0x1c/0x110 [ 1218.231500][ C1] get_page_from_freelist+0x2c7b/0x2cf0 [ 1218.237053][ C1] __alloc_pages+0x19e/0x3a0 [ 1218.241663][ C1] alloc_slab_page+0x6e/0xf0 [ 1218.246258][ C1] new_slab+0x98/0x3d0 [ 1218.250335][ C1] ___slab_alloc+0x6f6/0xb50 [ 1218.254933][ C1] __slab_alloc+0x5e/0xa0 [ 1218.259267][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 1218.264729][ C1] kmalloc_trace+0x29/0xb0 [ 1218.269156][ C1] audit_log_d_path+0xc6/0x240 [ 1218.273928][ C1] common_lsm_audit+0x8f8/0x16d0 [ 1218.278870][ C1] slow_avc_audit+0x1ac/0x220 [ 1218.283551][ C1] avc_has_extended_perms+0x8d3/0xdc0 [ 1218.288929][ C1] ioctl_has_perm+0x391/0x4c0 [ 1218.293610][ C1] selinux_file_ioctl+0x377/0x480 [ 1218.298637][ C1] page last free stack trace: [ 1218.303309][ C1] free_unref_page_prepare+0x742/0x750 [ 1218.308800][ C1] free_unref_page+0x8f/0x530 [ 1218.313513][ C1] __free_pages+0x67/0x100 [ 1218.317979][ C1] __free_slab+0xca/0x1a0 [ 1218.322330][ C1] __unfreeze_partials+0x160/0x190 [ 1218.327472][ C1] put_cpu_partial+0xa9/0x100 [ 1218.332168][ C1] __slab_free+0x1c4/0x280 [ 1218.336592][ C1] ___cache_free+0xbf/0xd0 [ 1218.341041][ C1] qlist_free_all+0xc6/0x140 [ 1218.345641][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 1218.351122][ C1] __kasan_slab_alloc+0x24/0x80 [ 1218.355982][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 1218.361100][ C1] kmem_cache_alloc+0x16e/0x330 [ 1218.365955][ C1] getname_flags+0xb9/0x500 [ 1218.370464][ C1] user_path_at_empty+0x30/0x1c0 [ 1218.375414][ C1] do_readlinkat+0xd4/0x480 [ 1218.379942][ C1] [ 1218.382271][ C1] Memory state around the buggy address: [ 1218.387936][ C1] ffff888153884900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1218.396004][ C1] ffff888153884980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1218.404065][ C1] >ffff888153884a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1218.412121][ C1] ^ [ 1218.416185][ C1] ffff888153884a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1218.424248][ C1] ffff888153884b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1218.432305][ C1] ================================================================== [ 1218.440373][ C1] Disabling lock debugging due to kernel taint [ 1218.446598][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1218.458321][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1218.466738][ C1] CPU: 1 PID: 17239 Comm: syz.7.4508 Tainted: G B 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 1218.478108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1218.488168][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 1218.493465][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 d2 28 00 4c 89 ff e8 50 c6 a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 0c 2b 6d 00 49 8b 7d 00 e8 33 c2 [ 1218.513090][ C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046 [ 1218.519164][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88812f038000 [ 1218.527144][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1218.535121][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 1218.543103][ C1] R10: ffffed102a710939 R11: 1ffff1102a710939 R12: dffffc0000000000 [ 1218.551079][ C1] R13: 0000000000000000 R14: ffff8881538849c8 R15: 0000000000000008 [ 1218.559058][ C1] FS: 00005555941d8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1218.567991][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1218.574578][ C1] CR2: 00007f6e92ba2e18 CR3: 000000012a484000 CR4: 00000000003506a0 [ 1218.582558][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1218.590534][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1218.598513][ C1] Call Trace: [ 1218.601799][ C1] [ 1218.604654][ C1] delayed_work_timer_fn+0x61/0x80 [ 1218.609782][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1218.615595][ C1] call_timer_fn+0x46/0x2a0 [ 1218.620106][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1218.625925][ C1] __run_timers+0x667/0x9a0 [ 1218.630446][ C1] ? calc_index+0x200/0x200 [ 1218.634958][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1218.640169][ C1] run_timer_softirq+0x6a/0xf0 [ 1218.644942][ C1] handle_softirqs+0x1d7/0x600 [ 1218.649713][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1218.654926][ C1] __irq_exit_rcu+0x52/0xf0 [ 1218.659435][ C1] irq_exit_rcu+0x9/0x10 [ 1218.663685][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1218.669324][ C1] [ 1218.672256][ C1] [ 1218.675188][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1218.681175][ C1] RIP: 0010:finish_task_switch+0x173/0x7b0 [ 1218.686993][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 19 ec 67 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 25 87 a3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 1218.706618][ C1] RSP: 0000:ffffc900055e7be0 EFLAGS: 00000282 [ 1218.712697][ C1] RAX: 0000000080000001 RBX: ffff88812f038b48 RCX: 0000000000000000 [ 1218.720675][ C1] RDX: 0000000000000001 RSI: ffffffff85a9f840 RDI: 00000000ffffffff [ 1218.728652][ C1] RBP: ffffc900055e7c30 R08: dffffc0000000000 R09: ffffed1022019799 [ 1218.736629][ C1] R10: ffffed1022019799 R11: 1ffff11022019798 R12: ffff8881f7137d40 [ 1218.744608][ C1] R13: 0000000000000000 R14: ffff8881f71388a0 R15: ffff88812f038000 [ 1218.752598][ C1] ? __switch_to_asm+0x3a/0x60 [ 1218.757378][ C1] __schedule+0xb8f/0x14e0 [ 1218.761822][ C1] ? release_firmware_map_entry+0x194/0x194 [ 1218.767734][ C1] ? finish_task_switch+0x16b/0x7b0 [ 1218.772946][ C1] preempt_schedule_irq+0x9b/0x110 [ 1218.778090][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1218.783821][ C1] ? __schedule+0xb8f/0x14e0 [ 1218.788427][ C1] ? __cfi_get_timespec64+0x10/0x10 [ 1218.793646][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 1218.799569][ C1] irqentry_exit+0x37/0x40 [ 1218.804021][ C1] sysvec_apic_timer_interrupt+0x64/0xc0 [ 1218.809660][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1218.815652][ C1] RIP: 0010:exit_to_user_mode_loop+0x4a/0xb0 [ 1218.821652][ C1] Code: 00 e8 0a 4a 59 00 e8 a5 f0 f3 00 fa e8 af 7a 8a 03 65 48 8b 05 07 a7 a3 7e 4c 8b 30 41 f7 c6 0e 30 02 00 74 5b fb 41 f6 c6 08 <74> 05 e8 6f b9 8f 03 41 f7 c6 00 10 00 00 74 08 48 89 df e8 5e 00 [ 1218.841276][ C1] RSP: 0000:ffffc900055e7ed0 EFLAGS: 00000202 [ 1218.847378][ C1] RAX: 0000000000000001 RBX: ffffc900055e7f58 RCX: a398f5a8e1507200 [ 1218.855361][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc900055e7f58 [ 1218.863350][ C1] RBP: ffffc900055e7ee0 R08: dffffc0000000000 R09: ffffed1025e07001 [ 1218.871334][ C1] R10: ffffed1025e07001 R11: 1ffff11025e07000 R12: 0000000000000000 [ 1218.879410][ C1] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88812f038000 [ 1218.887400][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 1218.892870][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 1218.898340][ C1] irqentry_exit+0x12/0x40 [ 1218.902769][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 1218.907970][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1218.913434][ C1] RIP: 0033:0x7f541de4d9c3 [ 1218.917863][ C1] Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 [ 1218.937483][ C1] RSP: 002b:00007ffc15cbdb78 EFLAGS: 00000202 [ 1218.943560][ C1] RAX: 0000000081a84bb9 RBX: 00007f541ece5720 RCX: ffffffff81a84bb9 [ 1218.951538][ C1] RDX: 0000000000000bb9 RSI: ffffffff81a84bb9 RDI: 0000000000000011 [ 1218.959515][ C1] RBP: ffffffff81a84bb9 R08: 00007f541e1a0000 R09: 00007f541e1a2000 [ 1218.967492][ C1] R10: 0000000081a84bbd R11: 0000000000000011 R12: 0000000000000011 [ 1218.975465][ C1] R13: 0000000000000000 R14: ffffffff81a84f83 R15: 0000000000002355 [ 1218.983450][ C1] ? sync_mm_rss+0xe3/0x280 [ 1218.987961][ C1] ? show_pgsize_migration_enabled+0x29/0x40 [ 1218.993947][ C1] ? show_pgsize_migration_enabled+0x29/0x40 [ 1218.999935][ C1] ? show_pgsize_migration_enabled+0x29/0x40 [ 1219.006013][ C1] [ 1219.009030][ C1] Modules linked in: [ 1219.012939][ C1] ---[ end trace 0000000000000000 ]--- [ 1219.018392][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 1219.023683][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 d2 28 00 4c 89 ff e8 50 c6 a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 0c 2b 6d 00 49 8b 7d 00 e8 33 c2 [ 1219.043296][ C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046 [ 1219.049381][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88812f038000 [ 1219.057356][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1219.065333][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 1219.073307][ C1] R10: ffffed102a710939 R11: 1ffff1102a710939 R12: dffffc0000000000 [ 1219.081365][ C1] R13: 0000000000000000 R14: ffff8881538849c8 R15: 0000000000000008 [ 1219.089362][ C1] FS: 00005555941d8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1219.098298][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1219.104884][ C1] CR2: 00007f6e92ba2e18 CR3: 000000012a484000 CR4: 00000000003506a0 [ 1219.112869][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1219.120930][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1219.128907][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1219.136442][ C1] Kernel Offset: disabled [ 1219.140774][ C1] Rebooting in 86400 seconds..